This is a plain-language draft written by the developer. It describes what the site does today. It is not legal advice and should be read by a lawyer in your country before launch.
Thalir is built to collect as little as possible. You can learn without an account, and then almost everything stays on your own device.
Last updated 2026-11-12
What stays on your device
Your lessons done, scores, streak, review cards, settings, and everything you make in the Create area (pictures, poems, recordings, photos) are saved in your browser on your own device. They are not sent to us.
You can download all of it, or erase it, in Settings.
If you make an account
We keep your e-mail address (for signing in), a display name, your chosen language and level, your progress, and any classes you join. Your progress is copied to your account so you can use another device.
Teachers can see the lessons finished, lessons started and average score of the students in their own class, and parents the same for their own children. Nobody else can see them.
The AI tutor
When you send a message, its text goes to our server and then to an AI service (Anthropic) to write the answer. Before that, e-mail addresses, phone numbers and similar details are removed from the message. Please do not type personal details anyway.
Without an account we keep only a count of messages for the day (tied to a random code in a cookie and a scrambled form of your network address), never the text. With an account, your conversations are saved so you can see them again, and you can delete them with your account.
The photo word hunt sends one photo to the AI only when you tick the box and ask. The photo is not kept.
Counting visits, and errors
To see which pages are used we count page views by day and page, such as “/learn: 41 views on 3 March”. We store no cookie, no address and no browser details for this, and we skip it if your browser sends Do Not Track or Global Privacy Control.
If something breaks, or your browser blocks something our security rules do not allow, it may send a short report to us: the page, what went wrong, and only the website name of anything blocked. We clean e-mail addresses and long numbers out of it, and delete it after 30 days.
Children under 13
A child under 13 needs an account linked to a parent. Child accounts have no tracking, no advertising, no public sharing, and their creations and recordings stay private.
Your choices
In Settings you can download your data as a file and delete it. If you have an account you can delete the account, which removes your profile, progress, conversations and creations from our database. Backups are overwritten within 30 days.
You can also ask us to correct or remove data by writing to the contact address on this page.
Who else handles data
Our web host, our database provider (Supabase) and the AI service (Anthropic) process data for us to run the site. We do not sell data or use it for advertising.