Privacy

Last updated: 2026-10-31

EngFeed keeps only what it needs to run your account and your cards. This page follows your data from your device to where it is stored, says why and for how long, and how to use your rights.

Who is responsible

RoDa Thanh is the person responsible for your data.

Questions? Write to thanhroda1@gmail.com.

EngFeed is meant for people aged 16 and over.

Where your data goes

1. Your browser sends what you do in the app to the EngFeed server.
2. The EngFeed server stores it in its database, at Amazon Web Services (AWS), Singapore.
3. To deliver your login code, your email address goes to our mail provider, Amazon SES (Singapore).
4. Backups of the database are kept for 14 days.

What we keep and why

• Your email address: to sign you in and to send your login code. A guest has a made-up address instead, which cannot receive mail.
• Sign-in data: a hash of your current login code and a hash of your session token. We do not keep the code or the token itself. They are used to check your code and keep you signed in.
• What you do with the cards: which cards were shown, swiped past, opened or saved, how long you stayed, your answers and when you gave them, when each card is due for review, and the order cards were served in. This remembers your progress, decides when a card comes back, and shows which cards work so we can improve them.
• Your hearts and dislikes, the cards you picked for the Custom feed, and which feed you are on: to build your feed.
• Phrases you save or add: to show them back to you. Added phrases are private to you.
• On your device: a session cookie that keeps you signed in, and your language and colour theme choices (kept in localStorage, key mf-theme for the theme).

Guests

You can start without an email. A guest is deleted with all its data after 30 days without a visit, or at once when the guest logs out. If you save your progress by email, the guest's data moves to your account.

IP addresses

To stop one address from creating too many guests, the app checks your IP address when a new guest starts. It is kept in the server's memory only: it is not written to the database or to any log, and it is forgotten when the server restarts. The app keeps no access log.

Where it is stored

Your data is stored on a server in Singapore. That is outside Vietnam, so using EngFeed sends your data abroad.

Who else sees it

Amazon Web Services (AWS) provides the server and so holds the stored data for us.

Your email address is sent to our mail provider, Amazon SES (Singapore), to deliver your login code.

No ads, no third-party analytics or tracking, and the app loads nothing from other sites. There are no passwords: you sign in with a code sent to your email.

How long we keep it

Your data stays until you delete your account.

A login code works for 10 minutes. You stay signed in for 60 days.

Backups of the database are kept for 14 days. After you delete your data, copies in backups are gone within 14 days.

Your rights

You can ask to see or get a copy of your data, to correct it, to withdraw your consent, to restrict or object to how it is used, and to delete it. We confirm each request within 2 working days and then act within:

• Access, copy or correction: 10 days.
• Withdrawing consent, restricting or objecting: 15 days.
• Deletion: 20 days.

To ask for access, a copy, correction, withdrawal of consent, restriction or objection, write to thanhroda1@gmail.com from the address of your account and say what you want. We may ask you to show that the account is yours.

Delete your data

Open EngFeed, tap the gear (Settings), then "Delete account and data". Your account, sessions, saved and added phrases, answers, reactions and review schedule are removed straight away, without waiting for the deadline above. A guest can do the same or just log out.