Privacy Policy
In short
English AI: Speak & Learn is an English-learning app. We do not require an account and we do not sell your personal data. Your lessons, flashcards, progress and profile answers are stored on your device. When you use the AI tutor, the text you type or dictate is sent to our backend and an AI provider to generate a reply. We use Google AdMob to show ads, and Firebase Analytics, AppMetrica and Meta (Facebook) tools to measure app usage and ad performance. You can control personalized-ads consent and delete your data at any time.
1. Who we are
English AI: Speak & Learn ("the app", "we", "us") is published by EXO Studio, based in Hanoi, Vietnam. This policy explains what information the app processes, why, and the choices you have. It applies to the English AI: Speak & Learn Android application.
2. Information we collect
2.1 Information you provide
- Onboarding and profile answers — your chosen native and learning language, a display name, level, goal, daily study time and interests. These are stored on your device to personalize your plan and are not uploaded to us.
- Learning content you enter — messages you type or dictate to the AI tutor, and topics you request for vocabulary or grammar. Together with the relevant conversation history and lesson settings, this text is sent to our backend to generate a response.
2.2 Information collected automatically
- Advertising identifier — your Google Advertising ID is accessed for ads and measurement (subject to your consent where required).
- Usage and event data — screen views, feature usage, session and interaction events used for analytics.
- Device and technical data — device model, operating system version, language, coarse app performance and network-connection state.
- Attribution data — install source and campaign information via the Google Play Install Referrer and our attribution provider.
2.3 Information stored only on your device
Flashcards, spaced-repetition schedules, saved expressions, learning progress, cached grammar lessons and app settings are stored locally on your device and are not transmitted to us.
We do not require registration and we do not collect account credentials. We do not process precise location, contacts, photos, camera or microphone recordings. Speech input uses your device's built-in Android speech service, which returns only the recognized text to the app.
3. How we use information
- Provide core features: AI conversations, vocabulary, flashcards, grammar lessons and progress tracking.
- Personalize your learning plan and recommended activities.
- Display and measure advertising, including frequency and performance.
- Measure app usage, retention and marketing-campaign attribution.
- Maintain security, prevent abuse and enforce rate limits.
- Send a local daily study reminder if you enable notifications.
4. Purposes and legal bases
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing app features you request (including AI replies) | Performance of a contract |
| Analytics, non-personalized ads, security and abuse prevention | Legitimate interests |
| Personalized advertising and related measurement | Consent |
| Local daily reminder notifications | Consent |
Where we rely on consent, you may withdraw it at any time via your device settings or the app's privacy controls.
5. Service providers and SDKs
We use the following third-party services. Each processes data under its own privacy terms:
| Provider | Purpose | Typical data |
|---|---|---|
| Google AdMob (Google) | Advertising and ad measurement | Advertising ID, device and ad-interaction data |
| Google Firebase Analytics (Google) | Usage analytics | Event and device data, app instance ID |
| Google Firebase Remote Config (Google) | Feature and ad configuration | App and device configuration signals |
| AppMetrica (Yandex) | Analytics and install attribution | Event, device and attribution data |
| Meta / Facebook SDK (Meta) | App-event and advertising measurement | Advertising ID, app-event and device data |
| Google Play services / Install Referrer (Google) | Ads services and attribution | Install referrer, advertising signals |
| Our app backend and its AI provider (OpenCode) | Generate AI tutor replies | Your messages, conversation history and lesson settings |
| Android speech recognition (Google) | Convert your speech to text on request | Audio processed by your device's speech service |
We do not include a crash-reporting SDK (such as Crashlytics) in this app.
6. Sharing and sale of data
We share data only with the service providers listed above, and only as needed to run the app. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising beyond the advertising and measurement described here. We may disclose information if required by law or to protect our rights and users.
7. Data retention
On-device data (profile, flashcards, progress, settings) remains until you delete it, clear the app's data, or uninstall the app. Messages sent for AI replies are processed to generate a response and are not used to build a personal profile of you. Analytics, advertising and attribution partners retain data according to their own retention policies.
8. Security
Network traffic between the app and our backend uses encrypted HTTPS. The AI provider key is held only in our backend environment and is never included in the app. No method of transmission or storage is completely secure, but we apply reasonable technical and organizational measures to protect data.
9. Device permissions
| Permission | Why it is used |
|---|---|
| Internet / network state | Contact our backend, load ads and check connectivity |
| Notifications | Show the optional local daily study reminder |
| Advertising ID | Serve and measure ads (subject to consent) |
| Receive boot completed | Restore your daily reminder schedule after a restart |
Speech-to-text uses the Android system speech service and does not require the app to hold a microphone-recording permission.
10. Children
English AI: Speak & Learn is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.
11. Your rights (GDPR and CCPA)
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. California residents may request access to and deletion of personal information and may opt out of any "sale" or "sharing"; we do not sell personal information. You can:
- Manage personalized-ads consent through the in-app consent controls and your device's ads settings.
- Delete on-device data by clearing the app's storage or uninstalling.
- Contact us to exercise any right listed above.
We will not discriminate against you for exercising your rights.
12. International data transfers
We operate from Vietnam and our providers may process data in other countries, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
13. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above and, where appropriate, through an in-app notice.
14. Contact us
EXO Studio — Hanoi, Vietnam
Email: exostudio.feedback@gmail.com