Privacy Policy

Learn to Speak Kriolu — Android & iOS App
Effective date: September 1, 2026 | Last updated: September 1, 2026

This Privacy Policy explains how Learn to Speak Kriolu ("the App", "we", "us", or "our") collects, uses, and protects information when you use our mobile application on Android and iOS. By using the App, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Name and email address — provided directly by you, or through a third-party sign-in provider.
Password — if you register with email/password, your password is encrypted (hashed) and we never store or have access to your plain-text password.
Third-party sign-in identifiers — if you sign in with Google or Apple, we receive a unique account identifier from that provider to link your sign-in to your account. We do not receive your Google or Apple password.

1.2 Device and Notification Information

Push notification token — a device token used to deliver notifications (e.g., lesson reminders) via Firebase Cloud Messaging.
Notification preferences — whether you have opted in or out of notifications.
Time zone — used so reminders and scheduled content arrive at appropriate local times.

1.3 Purchase Information

In-app purchases and subscriptions are processed through the Google Play Store or Apple App Store, using RevenueCat as our subscription management platform. RevenueCat and the app store receive purchase and transaction data necessary to process and validate your purchase. We do not collect or store your payment card details.

1.4 Lesson Content and Local Storage

The App downloads and caches lesson content (words, translations, audio, and cultural notes) locally on your device to enable offline use. This cached content is app-provided material, not personal data about you, and is not transmitted to third parties.

1.5 Information We Do Not Collect

The App does not access or collect:

Microphone or camera data
Location data (GPS or otherwise)
Contacts, photos, or other device files
Advertising identifiers — the App does not display third-party ads

2. How We Use Your Information

To create and manage your account and authenticate you when you log in.
To sync your learning progress and preferences across your devices.
To send push notifications you have opted into (such as lesson reminders).
To process and validate in-app purchases and subscriptions.
To maintain the security of your account (e.g., limiting active sessions).
To respond to support requests you send us.

3. How We Share Your Information

We do not sell your personal information. We share limited information only with the following service providers, solely to operate the App:

Service Provider	Purpose	Data Involved
Google (Sign-In)	Authenticate your account if you choose "Sign in with Google"	Google account identifier, name, email
Apple (Sign in with Apple)	Authenticate your account if you choose "Sign in with Apple"	Apple account identifier, name, email (or private relay email)
Firebase Cloud Messaging (Google)	Deliver push notifications	Device push token
RevenueCat	Manage and validate in-app purchases/subscriptions	Purchase/transaction data, anonymized user ID
Google Play / Apple App Store	Process payments for in-app purchases	Payment and transaction data (handled entirely by the store)

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of the App, our users, or others.

4. Data Retention

We retain your account information for as long as your account is active. If you delete your account in the App, we permanently delete your account record, including your name, email, and authentication data, from our servers, except where retention is required to comply with legal obligations or resolve disputes.

5. Account Deletion

You may permanently delete your account at any time, directly within the App:

Open the App and sign in to your account.
Go to Profile → Delete account.
Confirm the deletion when prompted. For your security, you may be asked to sign in again first if your session isn't recent.

What happens when you delete your account:

Your account record — name, email address, password (hashed), Google/Apple sign-in identifiers, push notification token, notification preferences, and time zone — is immediately and permanently removed from our servers.
This action is irreversible. We cannot restore a deleted account or its data.
Locally cached lesson content on your device is removed when you uninstall the App.
We do not retain a copy of your personal data after deletion, except where we are legally required to (e.g., to comply with a legal obligation or resolve an active dispute).

Subscriptions: deleting your account does not automatically cancel an active subscription. Subscriptions are billed and managed by the Google Play Store or Apple App Store, so please cancel your subscription there (Play Store → Subscriptions, or Settings → [your name] → Subscriptions on iOS) separately, before or after deleting your account, to avoid future charges.

If you're unable to access the App (e.g., you no longer have the device, or are locked out), you can request account deletion by emailing us at the address in Section 10 — please include the email address associated with your account so we can verify and process the request.

6. Your Choices and Rights

Access and correction — you can view and update your account information within the App.
Account deletion — see Section 5 above.
Notifications — you can opt out of push notifications at any time via the App's settings or your device's system settings.
Data requests — you may contact us (see Section 10) to request a copy of, or the deletion of, your personal data.

Depending on where you live, you may have additional rights under laws such as the GDPR (European Economic Area) or the CCPA/CPRA (California). Contact us using the details below to exercise these rights.

7. Data Security

We use industry-standard measures to protect your information, including encrypted password storage, encrypted connections (HTTPS/TLS) between the App and our servers, and authentication tokens with session controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The App is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Data Transfers

Your information may be processed and stored on servers located outside of your country of residence. By using the App, you consent to the transfer of your information to these locations.

10. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your data rights (including account/data deletion), please contact us at:

Email: [email protected]

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page, and, where appropriate, through an in-app notice.