Privacy Policy – Emlish: Speak English with AI

App & developer information

Information we collect

• Learning data on your device: lesson progress, review schedule, gems, saved words, chat history, profile settings (level, daily goal, reminder time) and consent choices are stored locally in the app. We do not keep a cloud copy of your learning database. Your device's own backup (iCloud or Android backup) may include this local data, according to your device settings.
• AI requests (only after you agree to AI use): your chat messages, recent conversation context, dictionary queries, learning instructions and text transcribed from your speech are sent over HTTPS to our AI gateway (api.mangomatrix.online), which forwards them to Google Gemini or Alibaba Cloud Qwen to generate Emma's reply. Do not include sensitive personal information in your messages.
• Anonymous account: when an AI feature first needs it, and only after your consent, Firebase Authentication creates an anonymous account. The app sends its pseudonymous user ID and sign-in token to our gateway for access control and rate limiting. We do not ask for your name or email. The gateway does not pass your user ID or token to the AI providers.
• Usage analytics (optional, off by default): if you turn on Settings → Share usage analytics, Firebase Analytics receives app events such as screen views, AI request results, gem transactions, paywall steps and ad impressions, linked to a random identifier generated on your device. Analytics never include chat text or speech transcripts. Turning it off stops future collection.
• App configuration: Firebase Remote Config uses a Firebase installation ID to download app settings, independently of analytics.
• Advertising (free users, when ads are enabled): Google AdMob collects your advertising identifier (IDFA on iOS when you allow tracking, the Android advertising ID), IP address, coarse location derived from IP, device information and ad interactions to serve and measure ads. Before ads load, the app asks for consent through Google's User Messaging Platform where required and, on iOS, shows Apple's App Tracking Transparency prompt. Declining does not stop you from learning. Premium users do not load the ad SDK.
• Purchases: Apple (App Store) or Google (Google Play) processes Emlish Premium subscriptions. The app reads the verified subscription status and expiry date and keeps it on your device. We never receive your card or payment details.

Information we do not collect

• Your name, email address, phone number or contacts.
• Raw microphone audio — the app sends only the transcribed text onward.
• Precise location, photos or files.

Permissions the app uses

• Microphone and speech recognition (iOS NSMicrophoneUsageDescription, NSSpeechRecognitionUsageDescription; Android RECORD_AUDIO). Requested when you choose voice input for speaking practice. Speech is converted to text by Apple's or Google's speech recognition service, which may process audio on their servers depending on your device. You can decline and type instead.
• App Tracking Transparency (iOS). Asks whether ads may be personalized using your device's advertising identifier. You can keep learning if you decline.
• Notifications. Requested when you turn on study reminders. Reminders are scheduled locally on your device; the app does not use push notifications.
• Internet and network state. Used for AI features, ads, purchases, optional analytics, app configuration and the optional voice download. Lessons work offline.
• Advertising ID (Android AD_ID) and Google Play billing (BILLING). Added by the Google Mobile Ads SDK and the Google Play Billing library.

Third-party services

The app uses the following third-party services. Each processes data under its own privacy policy.

• Google Gemini API (Google LLC) — Generating AI replies, through a billing-enabled Google Cloud project; under Google's paid-service terms, prompts and responses are not used to improve Google products but may be retained for abuse monitoring. Data: Chat messages, conversation context, speech transcripts (text). Privacy policy
• Alibaba Cloud Model Studio – Qwen / DashScope (Alibaba Cloud) — Generating AI replies (the gateway may use it instead of, or as a fallback for, Gemini). Data: Chat messages, conversation context, speech transcripts (text). Privacy policy
• Firebase Authentication, Analytics and Remote Config (Google LLC) — Anonymous sign-in for AI, optional analytics, app configuration. Data: Pseudonymous user ID, installation ID, optional app events. Privacy policy
• Google AdMob and User Messaging Platform (Google LLC) — Advertising and ad consent. Data: Advertising ID, IP address, device information, ad interactions. Privacy policy
• Apple speech recognition / Google speech services — Converting your speech to text. Data: Microphone audio, processed by the platform provider. Privacy policy
• Apple App Store and Google Play Billing — Subscriptions. Data: Purchase and subscription status. Privacy policy
• GitHub (GitHub, Inc.) — Hosting the optional natural English voice model, downloaded only when you choose it in Settings. Data: IP address and standard request data when downloading. Privacy policy

AI consent

Before Emlish uses AI for the first time, it asks for your separate consent. Offline lessons work without it, and declining does not cost gems. You can withdraw consent at any time in Settings; this cancels active AI requests and blocks new ones until you agree again. A material change to how AI data is shared requires renewed consent. AI responses are generated automatically and may be inaccurate; they are not professional advice.

How we use and share information

We use the information above only to provide and improve the app, fix crashes, process purchases, show ads where applicable, and respond to your requests. We do not sell your personal information. We share it only with the service providers listed above, or when required by law.

Retention and deletion

• Our AI gateway processes chat content in memory to produce a reply and does not store it. Infrastructure and providers may keep connection and security logs for a limited time; provider retention is governed by their own terms.
• Learning data stays on your device until you delete it in the app or uninstall the app.
• Delete your account and data in the app: Settings → Delete account and data. If an anonymous account exists, the app asks our gateway to delete the Firebase account and, after the server confirms, removes local progress, chats, saved words and settings. If no account was ever created, the app deletes local data directly. If the request fails, the app shows a retry option and keeps AI disabled until deletion completes.
• Deleting your account does not cancel an App Store or Google Play subscription; manage renewal in your Apple or Google account. It also does not erase store purchase records, previously aggregated analytics, provider security logs or backups controlled by your device.
• You can also email us to request deletion; do not send passwords or authentication tokens.

Security

Data sent over the network is encrypted in transit (HTTPS/TLS). Data stored on your device is kept in the app's private storage, protected by Android and iOS security.

Children

Emlish is intended for learners aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the AI features, contact us and we will help delete the data.

Your rights

Depending on where you live (including under the Korean Personal Information Protection Act and the EU/UK GDPR), you may have the right to access, correct, delete or restrict the processing of your personal information, to withdraw consent, and to object to processing. To exercise these rights, email thanhdat.atwork@gmail.com.

Changes to this policy

We may update this policy when the app changes. The effective date at the top shows the latest version. Material changes will be announced in the app or on this page.