Privacy policy

Last updated 6 September 2026.

This policy describes what the application actually does today. It has not been reviewed by a lawyer; that review is outstanding and is the operator’s responsibility before public release.

Who is responsible

Lingua Doctor is operated by the account holder who deploys it. Contact for privacy questions, data access and deletion requests is the support address published with the app listing.

What is collected

Account

Email address, display name, a password hash (never the password itself), the language you are learning, your interface language, your role and your plan. You need an account because your progress has to belong to someone.

Learning activity

Your answers, scores, mistakes, the CEFR objectives those mistakes map to, review scheduling, placement results and exit-exam results. This is the product: without it there is no mastery model and no personalised practice.

Speaking and the microphone

Two different things happen, and they are worth separating:

• Pronunciation and dictation practice.Speech is turned into text by your device’s own speech recogniser. Only the resulting text is sent to our server. Your recording is not uploaded and is not stored by us.
• Live voice conversation. This is a real-time call with an AI model. Audio is streamed to the AI provider for the duration of the call so it can respond. We do not keep a recording; a transcript of the conversation is stored so you can review the session and so corrections can be produced.

The microphone is only used while a speaking feature is open, and the operating system asks your permission first. Declining leaves every other part of the app working.

Subscriptions

Purchases are handled by Apple, Google and RevenueCat. We receive whether you hold an entitlement and when it expires. We never receive or store your card details.

Technical

Server logs record a request id, the route, a status code, a duration and a salted one-way hash of your IP address used for rate limiting. The raw IP address is not stored.

What is not collected

• No analytics and no crash-reporting SDK. The app contains neither. No behavioural analytics profile is built about you.
• No advertising identifier. Advertising is disabled in the shipped build and the advertising-ID permission is removed from the app package. If ads are ever enabled, this policy and the store data-safety declarations will be updated before that build is released.
• No contacts, photos, location or device identifiers.

Who processes your data

• The hosting provider configured by the operator — application server and PostgreSQL database.
• OpenAI — AI tutor replies, conversation practice, live voice, speech transcription and generated speech. Receives the text of your practice, and live-call audio while a call is in progress.
• ElevenLabs — optional alternative for generated speech, used only when the operator configures it. Receives the lesson text to be spoken, not your voice.
• RevenueCat, Apple and Google — subscription state.
• Google Sign-In — only if you choose to sign in with Google, and only to verify your identity token.

These providers operate outside your country in most cases. Using the app means your practice text is processed by them.

Generated voices

Every voice you hear is synthetic. It is labelled as AI-generated in the interface and does not imitate any real person.

How long it is kept

Account and learning data are kept while your account exists. Generated audio is cached so the same sentence is not re-synthesised, and that cache expires on its own. Deleting your account removes your account record, your learning history and your conversation transcripts.

Your choices

• Export. The app can produce a copy of your data.
• Deletion. The app can delete your account and its data from the account screen. This is immediate and cannot be undone.
• Consent. Voice recording consent and analytics consent are separate settings you control.
• Microphone. Revocable at any time in your device settings.

Children

The app is not directed at children under 13, and accounts are not knowingly created for them.

Changes

Material changes will be shown in the app before they take effect. The date at the top of this page always reflects the current version.

Terms of service