NexaThai privacy policy
NexaThai is operated by Nexatrode LLC. This policy applies to the NexaThai website, iOS app, Android app, and account/sync service. Updated 13 September 2026.
Learning without an account
Sign-in is optional. Learning progress, lesson history, journal entries and preferences are stored on your device. Signing in opts into uploading and merging character-review progress, per-skill Study progress and custom lists with your NexaThai account.
Account and service data
The service stores your email/sign-in identity, account identifier, device identifier and name, token hashes, sign-in timestamps, and the learning data you sync. Passwordless sign-in uses Resend to deliver email; Railway hosts the website, API and database. Service infrastructure may process IP addresses and request logs for operation and security. The app does not send its entire local database to the server.
Voice, writing and saved files
Voice practice is analyzed on-device. Ordinary temporary recordings are discarded when cleared, replaced or the practice screen is left. The calibration tools save derived pitch contours and measurements, not raw voice recordings. Saved calibration measurements, pronunciation observations and writing journals are stored locally and are not uploaded by account sync. Files you export or share, and operating-system device backups, are managed separately by you and their providers.
Thai speech playback uses bundled audio when available or the device speech service; that service is governed by your operating system and speech-provider settings. Audio playback through a device speech service is separate from the app's on-device analysis of your microphone recording.
Android machine-learning runtime
The Android app uses Google's on-device machine-learning runtime through Google Play services. Google states that runtime inputs, including app input data, are processed on-device and are not sent to Google for processing. The runtime can contact Google for updates and send runtime diagnostics, including device and app information, identifiers, configuration, performance and error metrics. This is separate from NexaThai account sync.
Google's runtime privacy and data collection documentation
Optional subscription support
If a signed-in learner chooses the optional monthly NexaThai Pro support flow, the app gives RevenueCat a stable NexaThai account identifier. RevenueCat returns product, purchase and entitlement status to the app so it can offer purchase, restore and subscription-management tools. RevenueCat may also process the device and technical information needed to provide that billing service.
Apple App Store or Google Play, as applicable, processes payment. Nexatrode does not receive full payment-card details. The optional support subscription does not change the core free learning experience.
Cookies and security
The website uses secure sign-in cookies in production. Access and refresh credentials are stored securely by the native apps. The service stores hashed credentials and email challenges rather than raw tokens. Token-redemption hashes are kept to prevent reuse; they do not contain the email address or a direct account reference.
Retention and deletion
Account and synced learning data remain until you delete your account. Confirmed deletion removes the account and its associated records from the active database and revokes all sessions. Account-linked email challenges are also removed. Device-only data is not remotely erased; the apps offer a separate choice for erasing local learning records.
Operational database backups expire within 7 days. Service logs expire within 30 days. Deleting an account does not immediately remove copies in those restricted operational stores. Files you export or share and operating-system device backups are managed separately by you and their providers.
Delete your account and associated cloud data
Contact
For privacy questions, access/export requests, or help with deletion:
Email the privacy user at the Nexatrode website’s domain.