NexaThai privacy policy
NexaThai is operated by Nexatrode LLC. This policy applies to the NexaThai website, iOS app, Android app, and account/sync service. Updated 1 October 2026.
Learning without an account
Sign-in is optional. Learning progress, lesson history, journal entries and preferences are stored on your device. Signing in opts into uploading and merging character-review progress, per-skill Study progress, custom lists, completed lessons and your current lesson position with your NexaThai account.
Account and service data
The service stores your provider sign-in identity, account identifier, device identifier and name, token hashes, sign-in timestamps, and the learning data you sync. Apple or Google authenticates you; NexaThai does not receive your provider password. Railway hosts the website, API and database. Service infrastructure may process IP addresses and request logs for operation and security. The app does not send its entire local database to the server.
Voice, writing and saved files
Voice practice is analyzed on-device. Ordinary temporary recordings are discarded when cleared, replaced or the practice screen is left. The calibration tools save derived pitch contours and measurements, not raw voice recordings. Saved calibration measurements, pronunciation observations and writing journals are stored locally and are not uploaded by account sync. Files you export or share, and operating-system device backups, are managed separately by you and their providers.
Thai speech playback uses bundled audio when available or the device speech service; that service is governed by your operating system and speech-provider settings. Audio playback through a device speech service is separate from the app's on-device analysis of your microphone recording.
Android machine-learning runtime
The Android app uses Google's on-device machine-learning runtime through Google Play services. Google states that runtime inputs, including app input data, are processed on-device and are not sent to Google for processing. The runtime can contact Google for updates and send runtime diagnostics, including device and app information, identifiers, configuration, performance and error metrics. This is separate from NexaThai account sync.
Google's runtime privacy and data collection documentation
Optional subscription support
If a signed-in learner chooses the optional monthly NexaThai Pro support flow, the website or app gives RevenueCat a stable NexaThai account identifier. RevenueCat returns product, purchase and entitlement status so the service can offer purchase, restore and subscription-management tools. RevenueCat may also process the device and technical information needed to provide that billing service.
RevenueCat Billing uses Stripe as its payment gateway for web purchases; Apple App Store or Google Play processes in-app purchases, as applicable. Nexatrode does not receive full payment-card details. NexaThai Pro can enable supported cross-device progress and list sync; the core free learning experience—lessons and device-only learning—remains free.
Send feedback
Feedback includes your message, account, app and OS versions, and language. Do not include passwords or sensitive information.
Only the operator can read feedback. It is deleted with your account or when removed after review.
A copy of your feedback is emailed to the support address below. Deleting your account removes the database record, not email copies. Contact support to request removal of email copies.
Email the support user at the Nexatrode website’s domain.
Website support requests
Website support disclosure updated 21 October 2026.
The support form collects your reply email and message. Signed-in submissions are linked to your account and removed from the active database when you delete it. Signed-out messages are not linked to an account, even if the email matches. Ask support to remove those records. Full messages and the reply address are forwarded to our restricted support mailbox; mailbox copies must be removed separately.
We use a short-lived essential form cookie and keyed hashes of your network address and reply email for spam prevention. The support record does not store your raw network address. We do not send automatic email to unverified reply addresses. Messages are retained while resolving your request and removed after review; request deletion through the support form. Do not send passwords, payment details, or recordings.
Contact supportCookies and security
Apple authorization tokens are stored encrypted for revocation when you delete your account.
Google authorization tokens are stored encrypted for revocation when you delete your account.
The website uses secure sign-in cookies in production. Access and refresh credentials are stored securely by the native apps. Provider state, native authorization codes, and tokens are short-lived, single-use, and stored only as hashes where possible. Native browser handoffs are protected with PKCE.
Retention and deletion
Account and synced learning data remain until you delete your account. Confirmed deletion removes the account and its associated records from the active database and revokes all sessions. Account-linked email challenges are also removed. Account deletion does not cancel an App Store, Google Play or web subscription; cancel it through the applicable store settings or purchase receipt first. Device-only data is not remotely erased; the apps offer a separate choice for erasing local learning records.
Operational database backups expire within 7 days. Service logs expire within 30 days. Deleting an account does not immediately remove copies in those restricted operational stores. Files you export or share and operating-system device backups are managed separately by you and their providers.
Delete your account and associated cloud data
Contact
For privacy questions, access/export requests, or help with deletion:
Email the privacy user at the Nexatrode website’s domain.