Effective: 22 April 2026
Privacy Policy
What we collect
- Your email address, used for magic-link sign-in through Firebase Authentication.
- Onboarding answers (learning reason, self-assessed level, preferences) so we can build your plan.
- Audio from your assessment and practice calls, transcribed and scored by Google's Gemini models (a sub-processor).
- Transcripts, CEFR level, sub-skill scores, feedback notes and module completion — stored in Cloud SQL so you can see your progress.
- Purchase state from Apple or Google, relayed through RevenueCat to unlock your subscription.
How we use it
- To generate your CEFR estimate and 12-module learning plan.
- To give you feedback on each practice session.
- To track your progress chart and streak.
- To verify your subscription and deliver paid features.
We do not sell your data. We do not train third-party models on your speech.
Sub-processors
- Google Cloud (Firebase Auth, Cloud SQL, Cloud Storage, Gemini API).
- RevenueCat (subscription state).
- Apple and Google (billing, per their respective policies).
- PostHog (website analytics on this marketing site only — not inside the mobile app).
Retention
Audio recordings are stored for 30 days so you can review feedback, then deleted automatically. Transcripts and scores are kept until you delete your account.
Your rights (GDPR / CCPA)
- You can delete your account from Profile → Delete account. This wipes your profile, assessments, sessions, audio, and Firebase user record.
- You can request an export of your data by emailing erdi@cathoven.com.
- California residents may exercise CCPA rights (access, deletion, non-discrimination) at the same address.
Children
The app is not directed at children under 13 and we do not knowingly collect their data.