Your learning data belongs to you.

1. Who we are

Learn Spanish is a Spanish-learning application operated by LemiGuide (“Learn Spanish,” “we,” “us,” or “our”). For privacy questions or requests, contact support@lemiguide.com. Our service is operated from Ukraine and is available internationally.

2. Scope

This policy applies to the Learn Spanish Android application, the website at spanish.lemiguide.com, and our related backend services. It does not govern third-party services you access independently.

3. Information we collect

Account and profile information

• Firebase user ID, email address, display name, profile photo URL, sign-in provider, email-verification status, preferred language, and last sign-in time.
• If you use Google Sign-In, Google provides the profile information you authorize. We never receive your Google password.
• If you use email/password authentication, authentication credentials are handled by Firebase Authentication; our application server does not store your password.

Learning and activity information

• Course progress, completed lesson identifiers, test questions and answers, scores, vocabulary-review statistics, learning level, goals, daily target, XP, streak-related activity, and feature interactions.
• AI tutor topic, session duration, number of turns, and user/AI audio duration used to enforce usage limits and monitor costs. We do not store raw AI-tutor audio or full conversation transcripts on our application server. Transcripts may be displayed temporarily in the app during the session.

Voice and microphone data

When you press and hold the speaking button, your microphone audio is transmitted through an encrypted connection to OpenAI’s realtime API so the tutor can transcribe your speech and respond. Audio collection stops when you release the button or reach the time limit. Do not include sensitive personal information in AI conversations.

App, device, and analytics information

• A randomly generated installation identifier, app version, interface language, screen views, lesson and feature events, and diagnostic information.
• Firebase Analytics may automatically process app-instance identifiers, device and operating-system information, general interaction information, and approximate geographic information inferred from network data, subject to Google’s documentation and your device settings.
• Our servers may receive IP address, request time, user agent, response status, and security logs when you connect.

Subscription information

Google Play processes payments. We receive the product and plan selected, purchase token, subscription state, renewal/expiry time, and Google’s verification response. We do not receive or store your full card number, bank credentials, or Google Play password.

4. How we use information

• Provide accounts, lessons, tests, synchronization, pronunciation tools, and AI speaking practice.
• Personalize learning, calculate progress, create reviews from completed topics, and maintain usage limits.
• Authenticate users, verify subscriptions, restore entitlements, prevent fraud, and secure the service.
• Measure reliability and feature usage, diagnose crashes and errors, and improve the course.
• Communicate about account verification, password resets, support, policy changes, and service notices.
• Comply with legal obligations and enforce our Terms.

5. Legal bases

Where the GDPR, UK GDPR, or similar law applies, we process data to perform our contract with you, based on our legitimate interests in operating and securing the service, with consent where required (including microphone permission), and to comply with law. You may withdraw consent through device permissions, but affected features may stop working.

6. Service providers and disclosures

We disclose information only as needed to operate the service:

• Google Firebase — authentication, analytics, and crash diagnostics (Crashlytics).
• Google Play — subscriptions, purchase verification, refunds, and entitlement status.
• OpenAI — realtime voice transcription and AI tutor responses.
• Hosting and infrastructure providers — secure application hosting, database, networking, backups, and operational logs.
• Authorities or professional advisers — when required by law, to protect rights and safety, or in connection with a legitimate corporate transaction.

These providers act under their own terms and privacy commitments. We do not sell personal information or share it for cross-context behavioral advertising.

7. International transfers

Your information may be processed in Ukraine, the European Economic Area, the United States, and other locations where our providers operate. Where required, transfers are protected through recognized safeguards such as adequacy decisions, standard contractual clauses, or provider data-protection terms.

8. Retention

• Account and learning data: retained while your account remains active and deleted or anonymized following a valid deletion request, normally within 30 days.
• AI session metrics: retained for up to 24 months for limits, abuse prevention, and service analysis; raw microphone audio is not stored by our application server.
• Analytics: retained according to the retention settings of Firebase Analytics and then deleted or aggregated.
• Server and security logs: normally retained for up to 90 days, unless needed longer to investigate abuse or a security incident.
• Subscription and transaction records: may be retained for up to 7 years where required for accounting, tax, chargeback, fraud-prevention, or legal compliance. Retained records are restricted and are not used for marketing.
• Backups: deleted through normal backup rotation after the live record is removed.

9. Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; or complain to a data-protection authority. You can change microphone access in Android settings, change app language in your profile, cancel subscriptions through Google Play, and request account deletion at our account deletion page.

10. Account deletion

Deleting an account removes the Firebase account and associated profile, learning progress, test history, AI usage records, and directly linked analytics records where reasonably identifiable, except information we must retain for legal, security, fraud-prevention, or transaction-record obligations. Deleting Learn Spanish does not automatically cancel an active Google Play subscription; cancel it separately in Google Play to stop future renewals.

11. Security

We use TLS encryption in transit, authenticated API access, restricted server and database access, purchase verification, rate limits, and reasonable administrative and technical controls. No system can guarantee absolute security. Please use a unique password and notify us if you suspect unauthorized access.

12. Children

Learn Spanish is not directed to children under 13, or under the minimum digital-consent age applicable in their country. We do not knowingly collect personal data from such children without valid parental consent. A parent or guardian may contact us to request deletion.

13. Automated features

The AI tutor generates educational conversation and feedback. It may be inaccurate. We do not use AI output to make legal or similarly significant decisions about you.

14. Changes

We may update this policy as the app, providers, or law changes. We will publish the revised date and provide additional notice when a change materially affects your rights.