Privacy

The account itself — your email address, and a name if you give one. The immersion you log: languages, categories, activities, titles, sessions, their durations and dates, any notes or ratings you add, goals, journal entries and achievements. Your preferences, such as timezone and week start.

This is a tracker, so the data is the product. We cannot claim not to store your history — keeping it is the service you are asking for.

In a Supabase project — Postgres, authentication and storage — on their infrastructure. Every table is protected by row-level security, which means the database itself refuses to return one account’s rows to another. Not a policy we promise to follow: a rule the database enforces on every query.

The apps are served from Cloudflare. Email — password resets, and the optional language reports — is sent through Resend.

Backups live in a private bucket, reachable only by the account that owns them and only through short-lived signed links created at the moment you ask for one. They are never publicly addressable. A backup contains your own data and no subscription, password or payment information.

The AI features are optional and run only when you use them. What is sent is a packet of computed statistics — totals, changes, breakdowns — rather than your raw journal entries or session notes. Figures are always calculated by Hitasura first; the model puts them into words and is never the source of a number.

If you never use those features, nothing is ever sent to an AI provider.

No advertising trackers, no data brokers, and nothing sold to anyone. Your history is not training data.

You can export everything at any time, on any plan — a spreadsheet for reading, or a complete JSON backup built to be restored. Deleting your account removes it and everything in it permanently, and we keep no copy on your behalf, so export first if you may want it.

Questions about any of this: support@hitasura.com. Hitasura is operated by Embarc Information Technology Private Limited.