1Who we are
mashaenglish.com and the MashaEnglish app ("MashaEnglish", "we", "us") are run by Mariia Dolda (known as Masha), a sole proprietor in British Columbia, Canada. Masha is responsible for how your personal information is handled and is our privacy officer.
Contact: hello@mashaenglish.com or the contact form.
2What we collect
| What | When | Why |
|---|---|---|
| Name and email address | Sign-up, level test, free Booster, waitlists, contact form, trial call booking, English tips | To create your account, send what you asked for and reply to you |
| Password (stored only as a secure hash), or your Google or Apple sign-in | Sign-in | To let you sign in |
| English level, goals, native language, your messages to Masha, how you prefer to be contacted (email, WhatsApp, Telegram) and your handle if you give it | Forms and onboarding | To suggest the right practice and contact you the way you asked |
| Learning activity: tests, lessons, games, saved words, streaks, progress, answers | When you use the site or app | To save your progress and show it in your dashboard |
| Text you type and voice you record in AI practice | Only when you press Send or Check | To give you AI replies and feedback |
| Private lessons: lesson transcript and notes (part of the lesson service); video or audio recording only if you agreed | Private students only | To prepare your lesson notes, track your progress and build your personal dashboard, vocabulary and homework |
| Purchases: product, price, status, refunds, Stripe or Apple transaction IDs | When you buy | To give you access, handle refunds and keep tax records. We never receive your full card number |
| Device and usage data: pages viewed, country, region and city, device and browser type, the site that sent you, feature use | When you visit | To understand which pages help learners and to fix problems |
| Email delivery data: sent, delivered, bounced, and whether an email was opened or a link clicked | When we email you | To make sure important emails arrive and to see which emails are useful |
We do not ask for sensitive information (for example about health or religion). Please do not put it into messages or AI practice.
3Why we use it
- To provide the service you asked for: your account, lessons, course access, AI feedback and dashboards (necessary for our agreement with you).
- Service emails: your level test result, Booster link, dashboard access, purchase receipts, lesson materials and security emails.
- Marketing emails (English tips, newsletter): only if you ticked the optional box. See Emails.
- Analytics to improve the site (our legitimate interest; where the law requires consent, we ask for it). You can turn analytics off at any time.
- Legal duties: tax, accounting, refunds, disputes and fraud prevention.
We do not sell your personal information and we do not use it for third-party advertising.
4Emails
- When you fill in a form, you get a confirmation or the resource you asked for. You may also get one follow-up email about your request, about 2 days later.
- Tips and newsletter emails are sent only if you agreed. Every one has an unsubscribe link that works right away; you can also unsubscribe on Your data or by email. We handle email requests within 10 business days.
- Email opens and clicks may be measured. Our email provider (Resend) can tell us whether an email was delivered, opened or a link in it clicked. We use this to check that emails arrive and to see which emails are useful.
5AI features
When you use AI practice, the text or recording you send is processed by OpenAI (USA) to transcribe speech, reply to you and give feedback. Pronunciation Check recordings are sent to Microsoft Azure AI Speech to measure sounds, fluency and rhythm. We ask OpenAI not to store our text requests for its own use (store: false).
Voice recordings: we do not keep your practice recording after the AI has replied; it is used only to create the reply and feedback. The app keeps an unsent recording on your device so you can try again. Results such as feedback or pronunciation scores can be saved to your account so you can review them.
AI feedback can be wrong. It is practice guidance, not an official score.
6Private lessons: transcripts and recordings
- Transcription is part of the lesson service, by default. Lessons are transcribed (with AI) to create your notes and track your progress. Google Meet and Google Drive (Google, USA) store the transcript and meeting notes (Gemini notes). The transcript is then processed with OpenAI to prepare your personal lesson dashboard: new words, mistakes to work on and homework. Only Masha and authorized assistants see your private dashboard. If you do not want your lessons transcribed, tell Masha at any time; your lessons then continue without notes made from a transcript.
- Recording (video or audio) is separate and optional. Masha records a lesson only if you agreed, for example with the optional, unticked box “Masha may also record my lessons (video/audio)” when you book. Your choice is saved with your booking, and you can change it at any time by telling Masha.
- For a learner under 18, a parent or guardian makes these choices before the first lesson.
- You can ask us to delete a recording or transcript at any time. How long we keep them: see How long we keep it.
The lesson rules are on the lesson policy page.
7Children and teenagers
- You can use MashaEnglish on your own if you are 16 or older.
- Learners aged 13 to 15 may use MashaEnglish only with a parent's or legal guardian's consent. Purchases are made by the parent or guardian.
- MashaEnglish is not for children under 13. If we learn that we collected information from a child under 13, we delete it.
- Private lessons with a learner under 18 need a parent's or guardian's agreement before the first lesson.
- Sign-up and booking forms say: “By continuing, you confirm you’re 16 or older, or have a parent’s or guardian’s permission.” There is no separate age check.
- We do not send marketing emails to learners we know are under 16. Parents can write to hello@mashaenglish.com to see, correct or delete their child's information.
9Service providers
We share information only with providers that help us run MashaEnglish, under their data-protection terms.
| Provider | What for | Where |
|---|---|---|
| Vercel | Website and app server hosting; our database (Vercel KV / Upstash Redis): accounts, progress, form submissions, AI balances | USA and other countries |
| Stripe | Card payments, Membership billing, refunds | USA and Canada |
| Apple | App Store purchases, Sign in with Apple | USA |
| Sign in with Google; Google Meet and Google Drive for private lessons (transcripts and Gemini meeting notes); Google Analytics | USA | |
| Resend | Sending emails, with delivery, open and click measurement | USA |
| OpenAI | AI practice: replies, feedback, speech transcription and voice; preparing lesson notes and dashboards from lesson transcripts | USA |
| Microsoft Azure AI Speech | Pronunciation Check | Canada or USA |
| PostHog | Product analytics (no names or emails, no IP address) | USA |
| GitHub | Code hosting, the worker that prepares lesson dashboards, a backup list of form submissions | USA |
| Calendly | Choosing the time of your Trial & Fit Call (you enter your details on Calendly) | USA |
| Telegram, WhatsApp | Only if you choose to message Masha there | Their own terms apply |
10Data transfers outside Canada
We are in Canada, and most of our providers are in the USA or other countries. Your information may be stored and processed there and may be accessible to courts and authorities under those countries' laws. For visitors from the EU and UK, we rely on the safeguards our providers offer, such as standard contractual clauses or the EU-US Data Privacy Framework.
11How long we keep it
We keep personal information only as long as we need it to provide the service and to meet legal duties. Then we delete or anonymize it.
| Data | How long |
|---|---|
| Account and learning history | Until you delete your account |
| Lesson transcripts, notes and your lesson dashboard | Until you ask us to delete them or your account is closed |
| Lesson recordings (only if you agreed to recording) | As long as needed to prepare your lesson notes, or until you ask us to delete them |
| Form submissions and messages to Masha | As long as needed to answer you and follow up on your request |
| Marketing consent and unsubscribe records | As long as we email you, and afterwards as long as needed to prove consent or respect your unsubscribe |
| Purchase, refund and tax records | As long as tax law requires (usually 6 years in Canada) |
| Analytics and server logs | As long as needed to understand how the site is used and to keep it secure |
12Your rights and how to delete your data
You can:
- ask for a copy of your information;
- correct it;
- delete your account yourself: on the website at Your data, in the app under Profile → Delete account and data. This deletes your account, progress, AI balance and course access. If you have a Membership that renews, turn off renewal first;
- ask us to delete other information that account deletion does not remove automatically: form submissions, analytics, email records, lesson transcripts, notes and recordings. Purchase and refund records are kept as long as tax law requires;
- withdraw consent to marketing emails or analytics at any time;
- if you are in the EU or UK: also object to processing, restrict it, get your data in a portable format, and complain to your data protection authority.
Email hello@mashaenglish.com from the address you use with us. We reply within 30 days. If you are not satisfied, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
13Security
We use HTTPS, hashed passwords, signed session cookies, access controls on teacher tools and spam protection on forms. No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected and the Privacy Commissioner, as the law requires.
14The MashaEnglish app
The iPhone and iPad app uses the same account and learning records as the website. It has no advertising SDKs and does not track you across other companies' apps or websites. The app uploads a voice recording only when you tap Send. Apple processes App Store payments; we receive the product, transaction status and refund information, never card details. You can delete your account in the app.
15Changes to this policy
We post changes here with a new date. If a change is significant, we tell signed-in users or email account holders.
16Contact
Mariia Dolda, privacy officer, MashaEnglish, British Columbia, Canada · hello@mashaenglish.com. The Terms of Service and the lesson policy also apply.