YAPPI — PRIVACY POLICY ======================== Last updated: October 23, 2026 1. Who we are ------------- Yappi is a language learning app operated by Corentin Martins ("we", "us"), who is the data controller for the personal data described here. Contact: corentin.martins.pro@outlook.fr. We collect as little as we can. Yappi has no ads and does no tracking across other apps or websites, and we never sell your data. 2. What we collect and why -------------------------- Stays on your device (we can't see it): - Your onboarding answers (level, goals, daily time, reminder time), your first name if you give it, saved words, lesson and flashcard progress, streak, watch time and settings. - A copy of your words for the home screen widget. Sent to our servers or providers: | Data | Why | Kept | |---|---|---| | An anonymous account ID (created automatically; no email or phone number) | To run your account, the feedback board and the AI features | Until you delete your account | | AI tutor (Talk, spoken lessons, Messages): what you say or type, the tutor's replies, your level, your saved words and the first name you chose (if any) | To generate the tutor's replies and call you by your name | Not stored by us after the reply is sent; a daily counter of how many turns you used | | Pronunciation scoring: a short recording of the sentence or word you just said, and its text | To score your pronunciation word by word | Not stored by us: sent to our AI provider and discarded after the score comes back; a daily counter of how many attempts you used | | Tagalog only: a short recording of what you say while you hold the microphone, and words the tutor says aloud (text), sent to our speech provider | To turn your speech into text and to create the tutor's voice | Not stored by us; the voice audio is cached on your device | | Which onboarding screens you reached, how you heard about Yappi, and the reasons and difficulties you picked during onboarding (if you answer) | To see where people leave onboarding and which channels bring learners | Until you delete your account | | Feedback board posts, comments, votes, reports and blocks | To show the board to other users and keep it safe | Until you delete them or your account | | Subscription status: a purchase ID from Apple, no payment details | To unlock Yappi Pro | While your account exists | We never receive your payment card details (Apple handles payments), your contacts or your location, and we don't keep any audio recordings. 3. Microphone and speech recognition ------------------------------------ The microphone is only used while you're speaking to Yappi (in onboarding, lessons, Talk and pronunciation practice). For most languages, your speech is turned into text by Apple's speech recognition, on your iPhone when it supports it, otherwise by Apple under Apple's privacy policy. iPhones don't recognise Tagalog, so for Tagalog a short recording is sent to a third-party speech provider instead. When you ask for a pronunciation score, a short recording of what you just said is sent to a third-party AI provider. The app deletes its copies of recordings once they're used. 4. Service providers -------------------- We use these providers to run Yappi. They process data only on our behalf: - Supabase (database, accounts and servers, hosted in the EU, Ireland). - AI providers: Google (Gemini, for the tutor's replies, and Cloud Text-to-Speech, for voices), Anthropic (Claude, for the tutor's replies), Microsoft (Azure Speech, for pronunciation scoring) and ElevenLabs (Tagalog speech-to-text). They receive your conversation text, level, saved words, chosen first name and short recordings to generate replies, score pronunciation and create speech. They process it only on our behalf, don't use it to train their models, and may keep it only for a limited time for safety and abuse monitoring. - Apple (speech recognition, App Store purchases, notifications). - RevenueCat (subscription management). It receives your anonymous account ID and purchase receipts, but no payment details. - YouTube / Google (video playback). Videos play in YouTube's official embedded player, and YouTube may collect information, such as viewing data and cookies, under Google's Privacy Policy (https://policies.google.com/privacy). Some providers may process data outside the EU (for example in the United States), protected by safeguards such as the European Commission's Standard Contractual Clauses. Each provider is bound by data processing terms that require it to protect your data. Your permission comes first: the first time you use an AI feature, the app shows exactly what will be sent and that it goes to our AI providers (named above), and nothing is sent unless you tap Allow. You can withdraw your permission at any time in Settings → AI tutor data sharing; the AI features then stay off until you allow them again. 5. Legal bases (GDPR) --------------------- We process your data to provide the service you asked for (contract), to keep the feedback board safe and prevent abuse (legitimate interest), and where required by law (legal obligation). Sending your conversations and recordings to our AI providers is based on your consent, which you give in the app and can withdraw at any time. 6. Your rights -------------- You can access, correct, export or delete your data, object to or restrict processing, and complain to your data protection authority (in France, the CNIL: www.cnil.fr). - Delete everything: Settings → Delete my account removes your account and all data on our servers straight away. Deleting the app removes the data on your device. - Anything else: email corentin.martins.pro@outlook.fr and we'll reply within 30 days. 7. Security ----------- Data is encrypted in transit (HTTPS) and protected by access rules on our servers. No system is perfectly secure, but we work to protect your data and will tell you about any breach as required by law. 8. Children ----------- Yappi is not for children under 13, and we don't knowingly collect data from them. If you think a child under 13 has used Yappi, contact us and we'll delete their data. 9. Changes ---------- If we change this policy, we'll update the date above and tell you in the App when the changes are significant. 10. Contact ----------- corentin.martins.pro@outlook.fr