Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect the following types of information:
- Account information: Email address, display name, and optional profile image when you create an account.
- Learning data: Lesson progress, quiz answers, vocabulary statistics, and streak information.
- Usage analytics: Page views, feature usage, and session data via PostHog. This data is anonymized and used to improve the Service.
- Device information: Device type, operating system version, and app version collected automatically for error monitoring and compatibility.
- Voice data: Audio recordings during voice tutoring sessions, processed in real-time for pronunciation feedback. Recordings are not stored permanently.
- Push notification tokens: Device tokens for delivering push notifications about streaks, challenges, and learning reminders. You can disable notifications at any time.
- Payment information: Processed securely by Stripe (web) and Google Play / Apple App Store (mobile). We do not store credit card numbers on our servers.
2. How We Use Your Information
- To provide and improve the Service
- To personalize your learning experience
- To process payments for subscriptions
- To send transactional emails (password resets, verification)
- To monitor and fix errors via Sentry
- To analyze usage patterns and improve features
3. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe: For payment processing (web)
- RevenueCat: For mobile in-app purchase management and subscription tracking
- PostHog: For anonymized product analytics
- Sentry: For error monitoring (device info and error context only, no personal data)
- Resend: For transactional email delivery
- ElevenLabs: For text-to-speech voice generation in lessons
- LiveKit: For real-time voice tutoring sessions
- Cloudinary: For media storage and delivery (images, audio)
4. Data Storage and Security
Your data is stored on secure PostgreSQL databases. Passwords are hashed using industry-standard algorithms. We use HTTPS for all data transmission.
5. Data Retention
We retain your account data for as long as your account is active. Guest profiles are automatically deleted after 30 days of inactivity. If you create an account, your guest progress can be migrated. After account deletion, we remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.
6. Cookies
We use session cookies for authentication. PostHog may use cookies for analytics. You can control cookie preferences in your browser settings.
7. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your learning progress data
- Request portability of your data in a machine-readable format
- Lodge a complaint with a data protection authority
8. Account Deletion
You can delete your account and all associated data at any time. To delete your account: (1) Open the Chamelingo app or web app, (2) Go to Settings, (3) Tap "Delete Account" at the bottom of the page, (4) Confirm the deletion via the verification email sent to your registered email address. Upon deletion, the following data is permanently removed within 30 days: your profile information, learning progress, vocabulary statistics, streak history, custom decks, friend connections, and arena match history. Anonymized analytics data that cannot be linked back to you may be retained. You can also request account deletion by emailing privacy@chamelingo.com.
9. European Users (GDPR)
If you are located in the European Economic Area, we process your data under the following legal bases: (a) your consent, (b) performance of a contract (providing the Service), and (c) our legitimate interests (improving the Service, preventing fraud). You may withdraw consent at any time by contacting us. We do not transfer data outside the EEA without appropriate safeguards.
10. California Users (CCPA)
We do not sell your personal information. California residents have the right to know what personal information we collect, request its deletion, and opt out of any future sale. To exercise these rights, contact us at privacy@chamelingo.com.
11. Children's Privacy
Chamelingo is not directed at children under 13. We do not knowingly collect personal information from children under 13.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification.
13. Contact
For privacy-related questions, contact us at privacy@chamelingo.com.