Privacy Policy

Introduction

PhrasiGo ("we", "us", "our") respects your privacy. This policy explains what information we collect, how we use it, and your rights, when you use the PhrasiGo mobile application and web app ("App").

Account & Sign-In

You can use PhrasiGo without creating an account. All core features work offline, and without an account your phrases and progress are linked to you only on your device. (To make repeat translations and pronunciation guides faster, the texts sent for translation are also kept, with their results, in shared server caches that are linked to no one.) The App still sends the usage counts and technical reports described under "How We Use Information" below.

If you choose to sign in with Google or Apple, we collect:

• Email address — to identify your account. With Sign in with Apple you may hide your email; we then receive the private relay address Apple creates for you
• Display name and, with Google, profile photo — to personalize your experience
• Age range (Google sign-in) — to comply with children's privacy regulations

Sign-in is optional and used to enable cross-device data sync and cloud backup of your learning data.

Information You Provide

When you use the App, you may provide:

• Sentences and translations — phrases you create for language learning
• Folders — to organize your sentences
• Voice recordings — during speaking practice exercises (processed in real-time, not stored permanently)
• Talk conversations — messages you type or speak to the AI conversation partner in the Talk feature. They are processed to generate the tutor's reply and are not used to train AI models. If you use "Report this reply", we keep the tutor's reply, your note and the reason you chose, linked to your account, so we can review it.

How We Use Information

Information you provide is used to:

• Generate translations and audio pronunciation
• Run practice sessions (speaking, listening, translation, and blitz modes)
• Track your learning progress (XP, streaks, leagues, accuracy)
• Sync your data across devices (if signed in)
• Maintain service logs and fair-use quotas — technical metadata about your requests (such as request counts, language codes, text length, and response times) linked to your account, kept to keep the service reliable and prevent abuse
• Understand which parts of the App help learners — for each day, how many times each screen or feature of the App was used on your account (or, before you sign in, on the anonymous session the App uses), how far into setup and the first lesson a new install got, where a lesson was left (which unit and exercise, in ranges, and the kind of exercise) and which screen the App was left on, how many of your answers to phrases you saw again after a day or more were right (grouped by how long ago you last saw them), whether you came back the next day or the next week, how many days after installing you first saved a phrase, practiced, used Talk or signed in, and whether a short optional question about how your first lesson felt or why you left a lesson was shown and, if you answer it, the option you picked. Counts only, never what you wrote or practiced; once per day we also note which kind of device (iOS, Android or web) and which version of the App was used
• Find and fix problems — for each day, how many times one of the App's checks went off on your account or anonymous session (for example, saved data that could not be read or was too large, practice results that could not be uploaded, a launch that had to be stopped, a sound that did not play or a microphone that would not start), and whether you allowed notifications when the App asked. Counts only: they never contain your phrases, words, error text or device details. Used to find and fix problems that could lose your data or stop parts of the App from working
• Learn which of our channels brought you (Android only) — once, on the day you install the App from Google Play, the App asks Google Play which kind of link brought you (for example a TikTok, YouTube or Instagram link of ours, our website, or none) and records only that one word, from a fixed list, on your account or anonymous session. It never keeps or sends the link itself or any campaign or click details, and uses no advertising identifier
• Detect and fix crashes — if the App crashes or hits an error, we automatically receive a technical report. It includes the error and where in the App's code it happened; the names of the screens and setup steps just before it; the App's own recent network requests (their method, the address without its parameters, and the result); the device's maker (Android), model, processor type and operating system, its language and region setting and, on Android, its time zone, and technical details, such as the device's screen size, number of processors and orientation, whether it is an emulator, and when the App was started; on iPhone also, for example, whether the device is jailbroken, its free memory, temperature state, battery level and whether it is charging; on Android also, for example, the screen density, when the device was last started, and its kernel version; the App version and build; and identifiers: a random identifier the crash-reporting service creates for this installation (on iPhone, only when you are not signed in) and, if you are signed in, an opaque account identifier. Only when the App's own native code crashes, or the App freezes, stops responding or is shut down by the system, the report also holds further details, such as the device's total memory, on iPhone its kernel version, its time zone and a fingerprint of the device and App (a one-way hash of Apple's per-app-maker device identifier, the device model and the App), and on Android which permissions the App has and whether they are granted, and whether the App was installed from an app store and which one. Separately, each time the App is used it sends a short session record (when the session started, how long it lasted, whether it ended normally or crashed, how many errors it hit, the App version and the random installation identifier), so we can count how many sessions end without a crash. These reports and records never include your phrases, translations, conversations or recordings, and never your email address or IP address. Versions of the App before 1.8.3 differ. They send no setup-step names, no account identifier and, on Android, none of the App's screen names (on iPhone the system records the names of some screens as they open): each of their reports carries the random installation identifier, whether or not you are signed in. But they also send data that later versions do not: recent device and app events (such as the App going to the background, the screen turning on or off, and power, network or time-zone changes); in every report, the device's total memory and, on Android, which permissions the App has; on iPhone, the parameters and sizes of the App's network requests (a parameter can hold a name you gave, such as the name of one of your folders); and on Android, the device's battery, memory, storage and network state and whether it is rooted. On iPhone this extra data stops once the App runs its 1.8.3 update; on Android, 1.8.3 is the first version that sends none of it
• Fix a problem you report — only if you write a message under "Something wrong?" and tap Send, we receive your message (with any email addresses or access tokens in it removed), where you sent it from (Settings or a lesson), the device's type, maker (Android) and model, its processor type (iPhone) and whether it is an emulator, the operating system's name, version and build, and the App's name, identifier, version, build and build type, and, only if you tick it after seeing the list, the names of the last screens, actions and App checks and how long ago each happened, which can include the option you picked in a short question and whether recent review answers were right (never your phrases or what you typed). The report carries neither your account identifier nor the installation identifier that crash reports carry: the only identifiers in it are random ones created new for each report
• Deliver notifications and practice reminders (if enabled)
• Send transactional and service-related emails (e.g. account deletion confirmation, security notices, teacher-student notifications)
• Send marketing or product-update emails — only if you have explicitly opted in (see "Communications" below)

Communications

Transactional and service emails. If you sign in, we may use your email address to send you messages necessary to operate the App or respond to your actions — for example, account deletion confirmations, security notices, teacher-student notifications, important changes to these policies, or replies to your support requests. These messages are not opt-in/opt-out: they are necessary to provide the Service while you have an active account. You can stop receiving them by deleting your account.

Marketing and product-update emails. We will only send you marketing or promotional emails (product tips, new-feature announcements, re-engagement messages, special offers) if you have explicitly opted in. The default setting is off. You can change your preference at any time in Settings > Communications, or by clicking the unsubscribe link in any marketing email we send. Opt-out requests are honored promptly, typically within 24 hours.

Push notifications. The App may send push notifications such as practice reminders or streak alerts, but only if you grant permission at the operating-system level. You can disable these at any time through your device settings or the App's notification preferences.

Legal basis (EU/UK users). We rely on Article 6(1)(b) GDPR (performance of a contract) to send you transactional and service messages. We rely on Article 6(1)(a) GDPR (consent) to send you marketing emails when you opt in. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Data Storage

On-device storage: Your sentences, folders, progress, and audio cache are stored locally on your device. This enables offline functionality.

Cloud storage (signed-in users): If you sign in, your sentences, folders, and progress are also stored on our secure cloud servers (Supabase, hosted on AWS) to enable cross-device sync. Data is encrypted in transit using TLS.

Audio files are not stored on our servers. Text-to-speech audio is generated on-demand and cached only on your device.

Third-Party Services

The App uses the following third-party services (data processors). We send them only what each feature needs, over encrypted connections. API keys are never included in the App itself: translation, speech and AI services are reached through our own servers, except that for live speech recognition the App may stream your microphone audio directly to Deepgram using a short-lived pass our servers issue; crash reports, session records and "Something wrong?" reports go from the App directly to Sentry, the App checks with Google (Firebase App Check) that it is the genuine App on a genuine device; and sign-in, notifications and updates go through the providers named below.

• Google Cloud — Translation and Text-to-Speech for translating phrases and generating pronunciation audio, plus Speech-to-Text as a fallback for speaking practice. See Google's Privacy Policy.
• Google Gemini (Vertex AI) — AI-generated translations with grammatical-gender variants, and the AI conversation partner in the Talk feature. The phrases and Talk messages you send are processed to generate the response and are not used to train Google's models. See Google Cloud's generative-AI data governance.
• Anthropic — Claude generates the phonetic (pronunciation) guides shown under phrases. Only the phrase text is sent. See Anthropic's Privacy Policy.
• Deepgram — Real-time speech recognition for speaking practice: your microphone audio is streamed for transcription while you speak, and is not retained by Deepgram. See Deepgram's Privacy Policy.
• OpenAI — Whisper speech-to-text as an alternative recognition engine for speaking practice. Audio is sent for transcription and is not retained by OpenAI. See OpenAI's Privacy Policy.
• Google Sign-In — if you choose to sign in with Google: Google gives us your name and email address (and, if you have one, your profile picture). See Google's Privacy Policy.
• Google Firebase App Check — on each launch of the mobile App, Google Play Integrity (Android) or Apple App Attest (iPhone) confirms that requests come from the genuine App, so our servers can refuse others. See Google's Privacy Policy.
• Apple — Sign in with Apple, if you choose it: Apple gives us your name and email (or a private relay address) and nothing else. When you delete your account we ask Apple to revoke that sign-in. See Apple's Privacy Policy.
• Supabase — Cloud database and authentication for signed-in users. See Supabase's Privacy Policy.
• Expo — Push notification delivery and over-the-air app updates. See Expo's Privacy Policy.
• Sentry — Crash and error reporting, and the "Something wrong?" reports you choose to send. Sentry receives the technical reports described above (the error; the recent screens, steps and network requests; the device's details; when the App's native code crashes or the App freezes, further details such as the device's total memory, on iPhone a device-and-App fingerprint and, on Android, the App's permissions; the App version; a random installation identifier and, if you are signed in, an opaque account identifier; versions before 1.8.3 differ, as described above) and a short record of each App session, so we can find and fix problems and count crash-free sessions. Other than what you write yourself in a "Something wrong?" message and, in versions of the App before 1.8.3 on iPhone, a folder name that can appear in a request parameter, your learning content is never included, and your email address and IP address never are. See Sentry's Privacy Policy.

Our website, phrasigo.com, sets no cookies. It counts visits with Cloudflare Web Analytics, which is cookieless: it stores nothing on your device and does not identify or follow you across sites. For each page view it records the page, the site that linked to it, the browser, operating system and device type, the country, and page-load timing, to give us totals only. See Cloudflare's Privacy Policy. Each page also loads its font from Google Fonts and its styling from the Tailwind CSS content network, so when a page opens, your browser sends them your IP address and its usual details (such as the browser and the page it asks from). See Google's Privacy Policy. The site keeps only two small notes in your browser's storage: that you closed the Android app banner, and, on the account deletion page, the email address you entered with the time of your request, so the same request is not sent again within an hour.

We do not sell your personal data to any third party.

Teacher-Student Data Sharing

PhrasiGo supports a teacher-student mode where teachers can share practice content with students. When a student explicitly accepts a teacher's invitation:

• What is shared: Practice statistics on the teacher's shared folders only — sentences practiced, accuracy percentage, and time spent.
• What is NOT shared: Personal sentences, personal practice data, XP, streak data, or any content outside the teacher's shared folders.
• Scope: Each teacher can only see stats for their own shared folders. They cannot see data from other teachers or personal practice.
• Encouragement messages: Teachers can send short encouragement messages (max 200 characters) to their connected students.
• Revocation: Students can disconnect from a teacher at any time in Settings, which immediately revokes all data access.

Microphone Permission

The App requests microphone permission for speaking practice exercises. Audio is only recorded when you actively press the microphone button. Recordings are sent to a speech-to-text service for transcription and are not stored permanently. You can revoke microphone access at any time through your device settings.

Your Rights

You have the following rights regarding your data:

• Access & Export: You can export all your data at any time from Settings > Account > Export My Data.
• Deletion: You can delete your account and all associated data from Settings > Account > Delete Account, or via our account deletion page.
• Correction: You can edit or delete any sentence or folder at any time within the App.
• Portability: Exported data is provided in a standard JSON format.
• Withdraw consent: You can sign out at any time to stop cloud sync. Your data remains on your device.

These rights apply to all users regardless of location, including rights under GDPR (EU), CCPA (California), and other applicable privacy regulations.

Data Retention

On-device data persists until you delete it or uninstall the App. Cloud data (for signed-in users) is retained until you delete your account. When you request account deletion, your account enters a 14-day grace period during which you can cancel by signing back in. After 14 days, all data is permanently and irreversibly removed from our servers. Crash reports and session records already sent to Sentry are not removed by account deletion; they are deleted automatically when Sentry's retention period for them ends.

Children's Privacy

The App is not intended for children under 13. Users who indicate they are under 13 are restricted from teacher-student features that involve data sharing. If you believe a child under 13 has created an account, please contact us so we can delete it.

Security

We use industry-standard security measures to protect your data, including TLS encryption for all data in transit, Row Level Security for database access control, and secure authentication via Google Sign-In or Sign in with Apple. No method of transmission or storage is 100% secure, but we take reasonable steps to safeguard your information.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance.

Contact

If you have questions about this privacy policy or wish to exercise your data rights, contact us at contact@phrasigo.com.