← PocoLingo

PocoLingo — Privacy Policy

PocoLingo — Privacy Policy

Who we are

PocoLingo (“the app”) is operated by the PocoLingo Team (“we”). Contact: support@pocolingo.app. Last updated: 2026-10-21.

Summary

You can use PocoLingo without creating an account or giving us your name or email. We only process what is needed to run the app, sync your progress, provide AI features and — for free users — show ads.

Data we process

  • Anonymous user ID: Firebase Authentication (Google) creates a random anonymous ID so the app can talk to our servers. It is not linked to your name or email.
  • Learning data: your chosen languages and level, words you add, your progress and review history. Stored on your device and synced to our database (Supabase, EU) under your anonymous ID.
  • AI features: when you use AI chat, add a word or open a conjugation table, the text you send (e.g. your chat messages, the word) and a learning context (target language, level, some of your learning words) is sent through our server (Google Cloud Functions, EU) to OpenAI to generate the answer. We do not store your chat conversations on our servers. OpenAI processes API data under its API data policy and does not use it to train models.
  • Purchases: purchases are handled by Apple. We receive a signed transaction record (product, purchase/expiry dates, transaction ID) to verify Premium. We never see your payment details.
  • Usage counters: daily counts of AI messages, word lookups and audio requests per language, to enforce fair-use limits.
  • Ads (free version only): Google AdMob shows ads. AdMob may collect device identifiers (including the advertising identifier IDFA if you allow tracking), IP address (approximate location), ad interactions and diagnostic data. In the EEA/UK/Switzerland we ask for your consent via Google’s consent form (UMP). The IDFA is only used if you allow it in Apple’s App Tracking Transparency prompt; you can change this anytime in iOS Settings › Privacy › Tracking. Premium users see no ads.
  • Audio: pronunciation audio is downloaded from our storage or generated on your device; we do not record your voice.

Why we process it (legal bases, GDPR)

  • Providing the app and its features you request (Art. 6(1)(b) GDPR): ID, learning data, AI requests, purchase verification.
  • Legitimate interests (Art. 6(1)(f)): security, abuse prevention and fair-use limits.
  • Consent (Art. 6(1)(a)): personalised ads and tracking. You can withdraw consent at any time.

Service providers

  • Google Firebase / Google Cloud (authentication, server functions; EU region) — Google Ireland Ltd.
  • Supabase (database and file storage; EU) — Supabase Inc.
  • OpenAI (AI text and speech generation) — OpenAI, L.L.C. / OpenAI Ireland Ltd.
  • Google AdMob and User Messaging Platform (ads, consent) — Google Ireland Ltd.
  • Apple (App Store purchases).

Some providers may process data outside the EU (e.g. in the USA). Such transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Retention

Learning data is kept while you use the app. Usage counters are short-lived operational data. Purchase records are kept as long as needed to provide Premium and meet legal obligations. You can delete all server data at any time in Settings › Delete my data; uninstalling the app removes local data.

Your rights

You have the right to access, rectify, erase, restrict and port your data and to object to processing, and to lodge a complaint with a supervisory authority. Because we do not know who you are, please include your anonymous ID if possible (or use Delete my data in the app). Contact: support@pocolingo.app.

Children

PocoLingo is not directed to children under 13 (under 16 in some EU countries). We do not knowingly collect data from children.

Changes

We may update this policy. The current version is always available at this address.