Privacy Policy

TriageSpanish is a product of Medical Spanish for Nurses, operated by Patricia Ortega, a sole proprietor (autónoma) based in Spain. This policy explains what data TriageSpanish collects, why, and how you can control it. Questions or requests go to support@triagespanish.com.

What we collect

• Account info: your email address (used to sign you in via a one-time link or Google sign-in) and, if you set one, a display name.
• Practice activity: which cases you complete, your pronunciation scores, and your streak. Today this is stored only on your own device (browser local storage) — we don’t yet sync it to our servers. We’ll update this notice before that changes.
• Voice recordings: when you practice speaking, your recording is sent directly to our pronunciation-scoring provider to be scored, and is never stored by us or by that provider beyond the scoring request. We do keep a small log entry (timestamp, cost, success/failure, linked to your account if you’re signed in) so we can monitor the service — never the audio itself.
• Error logs: if the app crashes, we log what happened (a technical message, not your personal data) to fix bugs, linked to your account if you’re signed in.

We do not collect payment card details — our payment provider and merchant of record (Paddle) handles those directly and never shares them with us.

Who we share it with

We don’t sell your data. We use these companies to run the app, each only for the function listed:

• Supabase — database and account sign-in.
• SpeechAce (United States) — scores your pronunciation from your voice recording, as described above.
• Vercel — hosts the app.
• Resend — sends account emails (sign-in links, receipts).
• Google — only if you choose “Continue with Google”: Google confirms who you are and shares your email address and name with us to sign you in (we never receive your Google password). Google handles that sign-in under its own privacy policy.
• Paddle — processes your subscription payment and billing.

Because Medical Spanish for Nurses is based in the EU (Spain), EU law treats any data we send outside the EU as an international data transfer — including to SpeechAce in the United States, even though you’re in the US too. That label is about where we’re regulated from, not about where you are. By using the pronunciation-practice feature, you consent to that transfer, made under SpeechAce’s own data-processing terms.

Your rights

You can access, correct, or delete your data at any time. To delete your account and everything linked to it, go to Profile → Account → Delete account in the app, or email support@triagespanish.com and we’ll do it for you within a few days. This also removes your voice-scoring and error logs, not just your profile.

Deleting your account does not cancel your subscription — they’re separate systems. See how to cancel first if you don’t want to be charged again.

Because we’re based in Spain, your data is protected under the EU’s GDPR: you have the right to access, correct, delete, restrict, and port your data, and to object to how it’s used. If you’re a California resident, you have equivalent rights under the CCPA — including to know what we collect and to request deletion. The same email above covers all of these; we don’t sell your data, so there’s nothing to opt out of on that front.

Wherever you’re downloading TriageSpanish from — not just the US or the EU — these GDPR-level rights apply to you too: it’s a question of where we’re regulated from, not where you are. If your own country’s law gives you additional rights beyond these, those apply as well.

Changes to this policy

If we make a material change (for example, adding a new sub-processor or starting to sync practice data to our servers), we’ll email anyone with an active account before it takes effect, and update the date above.