Privacy

What is stored

Your email address

Google returns it when you sign in, with the account identifier Google uses for you. Both are stored so the account can be found again.

Your password, if the account has one

Only a one-way hash of it. The password itself is never stored.

The words you added

Each word, the meaning you chose, the sentence you took it from, and any label you gave it.

Every answer you've given

Each review is recorded with the task, the answer and the verdict. The record is append-only, which makes a mistaken sort reversible.

The sentences you write and say

Stored with the grade they were given, for words and grammar. For spoken sentences the transcript is stored and the audio is not.

Where each grammar point stands

For every point you opened or were suggested: whether it is open, its tier, and the sentences that moved it.

Prompts written for you

Grammar prompts written overnight from your recent sentences, with the sentences they came from, so each one can be checked.

Your settings

The vocabulary level sorting set, and whether reviews are paused.

Your avatar, if you upload one

Stored as an image file and served from this site. Anyone with its link can open it. Nothing else you upload is kept.

What is never collected

No advertising identifier

There is no advertising, and no identifier is shared with an advertising network.

No cross-site tracking

No cookie follows you off this site, and no third-party script runs inside the app.

No audio

What you say is kept as text. The recording is never sent to the server or stored.

No location, contacts or device inventory

None of it is requested, and none of it is received.

What leaves the server

3 services receive something. No other service does.

Google, for sign-in

Signing in tells Google you signed in here. Gradus receives your email address and an account identifier, and asks for nothing else.

A language model, for grading sentences

Your sentence and its word or point are sent through OpenRouter to a model, which returns a verdict. Nothing else about you is sent. The provider's own terms cover what it does with the text.

A language model, overnight, for your grammar prompts

Up to 20 of your grammar sentences from the last 30 days are sent to write prompts for you. Nothing that identifies you is sent: no email, no name, no account identifier, and no tier or grade.

Your browser's speech recognition

The browser handles the microphone. Some browsers, Chrome among them, send audio to the browser vendor to transcribe. That path belongs to the browser and Gradus can't see it.

Analytics

Page views on the public pages are counted with Plausible. It sets no cookie, stores no identifier, and can't follow you to another site. It doesn't load once you're signed in.

What your browser keeps

5 things, all on your device. Two are sent, and only to this server: the sign-in cookie and the offline answers.

Your sign-in

A cookie that keeps you signed in. It is sent to this server with every request and nowhere else, and scripts on the page can't read it.

Your theme choice

Light or dark, so the site doesn't change on your next visit.

One sorting hint flag

Records that the 3 sorting buttons have been explained, so the explanation isn't shown again.

Answers given offline

An answer given without a connection waits here and is sent to this server when you reconnect.

The session in progress

Kept so a reload or a lost connection doesn't lose it. It is never sent anywhere.

Your source sentences

The sentence you took a word from is saved with it, and it may come from emails, work documents or personal messages. It is never shown to another user, added to a shared pool, or used as content. Changing that would require asking you first.

Closing your account

There's no button for it

Write to the address below and the account is closed by hand.

What closing removes

Your email address, Google identifier, avatar, words, source sentences, and the sentences you wrote and said.

What survives, and why

The review log is append-only. On closure its rows are cut from you: the identifier they point at is gone, and what remains can't be traced back.