Privacy Policy

Scope and contact

This policy applies to the Soulingo website and iOS and Android apps. The website provides information and support; learning takes place in the mobile apps. Contact the operator at linhdndev@gmail.com about personal data.

Visiting the website

You do not need to sign in. The website stores a soulingo-locale cookie to remember your language for up to one year; remove it through browser settings. These informational pages do not load Google AdSense, Google Analytics or a sign-in SDK. Hosting providers may process connection and request information to deliver content, maintain security and keep the service reliable. Email links open your email application; a message is sent only when you choose to send it.

Data in the mobile apps

The apps process information needed to provide and synchronize learning.

• Account: your Firebase user identifier, name, email and profile photo shared by your sign-in provider. We do not receive your Apple or Google password.
• Learning: level, goals, preferences, answers, scores, progress, review schedules, bookmarks, activity and statistics. Leaderboard information may be visible according to participation and name-visibility settings.
• Purchases: products, transactions and Pro entitlement status to verify and restore access. We do not receive complete payment-card details.
• Support: your email, message and files you choose to send. Share only information needed for your request.

Purposes and service providers

We use data to sign you in, save and synchronize progress, calculate reviews, personalize learning, verify purchases and handle support. We do not sell personal data or use learning history for targeted advertising.

• Apple, Google and Firebase provide authentication. Google Sign-In uses basic identity permissions; we do not request Gmail, Drive, calendar or contacts access. Our use of Google data follows the Google API Services User Data Policy, including Limited Use requirements.
• Cloudflare provides APIs, storage and content delivery. Learning-reminder emails, where available, use account email and preferences; turn them off in Profile or through the unsubscribe link.
• Apple and Google process store payments. RevenueCat verifies and restores access using user identifiers, purchase data and SDK service or device information.
• YouTube supplies videos and thumbnails and may process network, device and playback data and cookies under its own policy. Providers may process data outside your country.

• Firebase privacy
• Google API Services User Data Policy
• Google privacy
• RevenueCat privacy

Microphone and speech recognition

Recording begins only when you choose to practice speaking. Refuse or revoke microphone and speech-recognition permissions in device settings.

• iOS uses a temporary recording for Apple Speech. Recognition may run on-device or through Apple. The file is removed after completion or cancellation; an interrupted file may remain until temporary data is cleared.
• Android uses the device speech service, which may be provided by Google. These services may send audio to their providers and need a connection.
• The app calculates scores from the transcript in memory. The Soulingo API receives the exercise identifier and score, not the recording or raw transcript.

Local storage and diagnostics

Apps store settings, cached content and account-specific learning data locally. Signing out or uninstalling does not delete server data; caches or copies on other devices may require separate removal. Firebase Crashlytics is optional and off by default on mobile. If enabled, reports may include crash traces, app, OS and device information and diagnostic identifiers, without email, answers or audio. Disable sharing in the app to stop new reports; reports already submitted cannot be recalled from the device.

Retention and deletion

Your profile and synchronized progress are retained while you use the account, until you delete that data. The current in-app flow deletes learning data and signs you out; your Firebase authentication identity may remain. Request complete account deletion, including that identity, at linhdndev@gmail.com. We may verify ownership and will explain the outcome and any data that must be retained and why. Apple, Google and RevenueCat manage transaction records under their own retention policies. Support messages are retained as needed for the request and related obligations. Account deletion does not cancel store subscriptions.

Your rights and choices

Depending on where you live, you may have rights to access, correct, export or delete data, restrict or object to processing and withdraw consent. Contact linhdndev@gmail.com. Do not send passwords, verification codes or payment credentials. Change device permissions, diagnostics and reminder preferences in the app. EEA and UK users may complain to their data protection authority. We do not sell or share data for cross-context behavioral advertising.

Children, security and updates

Soulingo is a general-audience service, not directed to children under 13. Contact us if you believe a child has provided personal data. Data is sent to the API over HTTPS; no storage or transmission method is completely secure. Changes to the service or data practices will be reflected in an updated version of this policy.