Privacy notice

Draft for the beta — to be reviewed by a lawyer before public launch.

Effective date: [EFFECTIVE DATE]

Who we are: [COMPANY NAME] ("we", "us"). Contact: [CONTACT EMAIL]

Applies to: the course app and the server behind it, during the free, invite-only beta.

This notice says in plain English what we collect when you use the app, why, who else touches it, and how you can get rid of it.

What the app does

You upload a language-learning book that you own as a PDF. We use AI services to turn it into a private course (exercises, texts and audio) for you. You study in the app; an AI tutor can check your writing, your speaking and your conversation practice.

What we collect and keep

Your account

• your email address;
• your password, stored only as a salted argon2 hash (we cannot read it);
• the date you signed up, and which version of our Terms you accepted and when;
• sign-in tokens (stored as hashes) so you stay signed in, and a short record of failed sign-in attempts (email, IP address, time) used to block password guessing.

Your books and courses

• the PDF you upload, stored privately on our server and used only to build your course;
• the course made from it: its exercises, the audio we generated for it, and any edits you make in the review editor;
• a few working notes the conversion leaves behind so that a single step can be rewritten later (the plan of each unit, its word list and summaries of what it teaches; not the book's pages).

Your progress

• what you have completed, your scores and your list of mistakes, synced from your phone so you can keep it safe and use it on another device.

Your reports

• if you tap "report a problem" on an exercise, we keep your reason, your note and a copy of that exercise so we can look at it.

Notifications

• if you allow notifications, a push token for your phone, so we can tell you when a book is ready or needs your confirmation.

Usage counts

• how many AI calls and word lookups you made today, to apply daily limits.

Technical logs

• like most servers, ours may keep ordinary technical logs (for example IP address, time and which page was asked for) for security and fixing faults.

The server does not keep the texts you send to the tutor or your voice recordings: they are processed to give you an answer and then dropped (the next section says who processes them). If the tutor finds a mistake, it can be saved in your progress, which is described above.

Who processes your data for us

We use these services to run the app. They receive only what is needed for their part of the job.

• Anthropic (Claude API) reads the pages of your PDF to build your course, writes the exercises, and later checks the writing you submit, the transcript of your spoken answers, your conversation practice and the words you look up.
• Google Cloud turns the exercise text into audio (text-to-speech) and turns recordings you choose to send to the tutor into text (speech-to-text).
• Expo delivers push notifications to your phone, if you allowed them.
• Our hosting provider runs the server and stores the data described above.

Those providers have their own terms and privacy policies. Data may be processed in countries other than yours.

What we do not do

• We show no ads.
• We do not sell your data.
• We do not share your courses with other users. Your books and courses are private to your account.
• We do not use your books, texts or recordings to train any model.

How long we keep it

• Delete a course: we delete its book (the PDF), its audio and other media, your progress for it, the reports you made about it, and the working notes of its conversion.
• Delete your account: we delete everything above for all your courses, plus your sign-in tokens, notification tokens and usage counts.
• Records of failed sign-ins are kept only briefly, and are cleared when you sign in successfully.
• Backups may hold deleted data for a limited period before they are overwritten.
• Anonymous, site-wide totals (such as how many AI calls were made on a day) are kept; they identify nobody.

You can do both deletions yourself in the app. If you cannot, write to [CONTACT EMAIL].

Your choices

You can ask us for a copy of your data, to correct it, or to delete it, by writing to [CONTACT EMAIL]. You can switch notifications off in your phone's settings. If you think we have handled your data wrongly, you can contact the data-protection authority where you live. This notice is governed by the laws of [JURISDICTION].

Children

The app is meant for adults and is not aimed at children.

Changes

This is a beta. We may change this notice; when we make an important change we will tell you in the app and ask you to accept the new version.

Contact

[COMPANY NAME], [CONTACT EMAIL]