Privacy

This notice explains what personal data the Likhon app and likhon.app (the "website") handle, why, how long we keep it, and the choices you have. The short version: what you type never leaves your computer, there is no analytics, tracking or telemetry, and the website keeps only what it needs to run accounts, the library and the forum.

Who is responsible. [Legal name of the operator], [postal address] ("we", "us") is responsible for the personal data described here. Contact: [privacy@likhon.app — address to be created].

1. The app

What you type stays on your computer. Likhon converts your keystrokes into Bangla on your computer. It never sends what you type to us or anyone else, and never writes it to a log.

Words it learns. If learning is on, Likhon keeps words you type, and which words follow which, in a file on your computer, to suggest them later. It never learns from fields Windows reports as password fields, and stops learning where it cannot tell. You can view, export, change or delete these words in Settings. They are not sent anywhere unless you donate them (see section 3).

When the app goes online. Only when you ask it to. Each request goes to the Likhon website:

Like any connection on the internet, these requests show our server your IP address and basic technical details (such as the app version). We use them only to answer the request and to protect the service from abuse, and do not keep them with anything that identifies you beyond [the server log retention period below].

Diagnostics. If you turn diagnostics on, Likhon writes a file on your computer to help find problems. It does not send it. You decide whether to share it with us, for example when asking for help.

2. The website

No analytics, no tracking. The website uses no analytics, no advertising and no tracking cookies or pixels, and loads nothing from other companies' servers in your browser. Download counts are kept as totals only, with nothing about who downloaded.

Cookies and browser storage. Public pages set no cookies. When you sign in, the website sets only the cookies needed to keep you signed in and to protect forms from forgery; they are removed when you sign out or when they expire. The website remembers your language choice in your browser's own storage, which never leaves your browser. The website may also keep a copy of a few pages in your browser so it can show an offline page.

Browser tools. The typing box, converter and other tools run in your browser. The text you enter is not sent to us.

Server logs. Our servers record technical information about requests (such as time, address requested, and the IP address and browser type that made them) to keep the website secure and working. [We keep these logs for up to 30 days.] The website's own logs are kept free of personal data.

3. Word donation

Donation is off unless you choose it, and you see and tick the words before anything is sent. Numbers and anything that looks like an email address are filtered out. A donation is stored as the words alone, with no account, name, device or IP address attached. Donated words go through review before they can enter the dictionary; raw donations are deleted after review. Because donations are not linked to you, we cannot find or delete a particular donation after it is sent. How donated words may be used is set out in the Terms.

4. Accounts

An account is only for publishing to the library and posting in the forum. For an account we keep:

• your email address, and the name you choose to show;
• a password, only if you set one (stored only as a secure hash);
• sign-in links, stored only as a hash and valid once, for 15 minutes;
• when you accepted the terms, the open-source confirmation and the responsibility statement, and which version;
• your items, their versions and files, review messages, and your forum topics and posts; and
• while you are signed in, a session record with your IP address and browser type, to keep you signed in and to detect misuse.

Moderators and administrators see what they need to review items and moderate the forum. Their actions are kept in an audit log.

Why we use it. To provide the account and the features you ask for (our agreement with you, the Terms); to keep the service secure and prevent abuse (our legitimate interest in running a safe service); and where the law requires us to.

5. Reports and copyright notices

You can report a library item without an account. If you add an email address so we can reply, it is stored encrypted and used only for that report. For a copyright notice we keep your name, contact details and claim, also with the contact details encrypted, and may share what is needed with the uploader so they can respond (see Report and takedown).

6. Who else handles data

We do not sell personal data, and do not share it for advertising. We use service providers only to run the website: [hosting provider], [file storage, planned: Cloudflare R2], and [email delivery provider] to send sign-in links and notices. They may handle data only on our instructions. Some of them may store data outside Bangladesh; where they do, we [use contracts that require equivalent protection]. We may disclose data if the law requires it.

7. How long we keep data

• Account data: until you delete the account. Forum topics and posts are deleted with it. (Accounts with published items: see Terms.)
• Unpublished drafts and uploaded files: deleted with the account, or when you delete them.
• Published items: as long as they are published, under their open-source license.
• Sign-in links: expire after 15 minutes. Sessions: end when you sign out or after [period].
• Reports and copyright notices: [up to 3 years after the case is closed], to handle repeat problems and legal claims.
• Audit log of moderation and admin actions: [period].
• Server logs: [up to 30 days].

8. Your rights

You can ask us to tell you what personal data we hold about you and give you a copy, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Where we rely on your consent (for example for word donation), you can withdraw it at any time; this does not affect what was done before. You can change your name, email address and password, and delete your account, on the Account page. For anything else, write to [privacy@likhon.app]. We will answer within [30] days.

If you are not satisfied with our answer, you can complain to the data protection authority where you live (in Bangladesh, [the authority under the Personal Data Protection Ordinance, 2025]).

9. Children

Likhon and the website are for everyone, including students. Accounts are for people aged [13] or older, and people under 18 need a parent's or guardian's permission. We do not profile children or show them advertising, because we do not do that for anyone.

10. Security

We protect personal data with encryption in transit (HTTPS), hashing of passwords and sign-in links, encryption of report contact details, limits on who can see what, and rate limits against abuse. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

11. Changes

We will update this notice when what we do with data changes. The date at the top shows the last change. If a change is significant, we will say so on the website and, for account holders, by email.