Privacy policy

# Privacy Policy

**Last Updated:** January 2025

## Introduction

Welcome to the Bulgarian Learning App ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using our app, you agree to the collection and use of information in accordance with this policy.

---

## 1. Information We Collect

### 1.1 Personal Information

When you create an account, we collect:

- **Name** - To personalize your experience
- **Email Address** - For account authentication and communication
- **Password** - Encrypted and securely stored
- **Profile Information** - Display name, avatar (if provided)

### 1.2 Learning Data

To provide and improve our services, we collect:

- **Progress Data** - Completed lessons, skills, and exercises
- **Performance Metrics** - XP earned, accuracy rates, time spent
- **Achievements** - Unlocked badges, streaks, milestones
- **AI Teacher Interactions** - Questions asked and responses (anonymized)

### 1.3 Usage Data

We automatically collect:

- **Device Information** - Device type, operating system, app version
- **Usage Statistics** - Features used, session duration, navigation patterns
- **Error Logs** - Crash reports and technical diagnostics
- **Analytics Data** - Aggregated usage patterns (via Firebase Analytics)

### 1.4 Payment Information

For subscription purchases:

- **Payment Data** - Processed by Apple App Store or Google Play Store
- **Subscription Status** - Active, expired, or canceled subscriptions
- **Transaction History** - Purchase dates and amounts

**Note:** We do not store credit card information. All payments are processed securely by Apple or Google.

### 1.5 Information We Do NOT Collect

We do not collect:

- ❌ Social Security Numbers or government IDs
- ❌ Financial account information
- ❌ Precise geolocation data
- ❌ Biometric data
- ❌ Health information
- ❌ Contacts or phone numbers (unless you provide them)

---

## 2. How We Use Your Information

We use your information to:

### 2.1 Provide Services

- Create and manage your account
- Track your learning progress
- Sync data across devices
- Provide AI-powered teaching assistance
- Enable text-to-speech pronunciation

### 2.2 Improve Experience

- Personalize lesson recommendations
- Adjust difficulty based on performance
- Show relevant achievements and rewards
- Display leaderboard rankings

### 2.3 Communication

- Send account-related notifications
- Provide customer support
- Send important updates about the app
- Notify you of new features (with your consent)

### 2.4 Analytics and Research

- Analyze usage patterns to improve the app
- Identify and fix bugs
- Develop new features
- Conduct research on language learning effectiveness

### 2.5 Legal Compliance

- Comply with legal obligations
- Enforce our Terms of Service
- Protect against fraud and abuse
- Respond to legal requests

---

## 3. How We Share Your Information

### 3.1 Service Providers

We share data with trusted third-party services:

**Firebase (Google)**
- Purpose: Authentication, database, analytics
- Data Shared: Email, user ID, usage data
- Privacy Policy: https://firebase.google.com/support/privacy

**OpenAI**
- Purpose: AI Teacher responses
- Data Shared: Questions asked (anonymized, no personal info)
- Privacy Policy: https://openai.com/privacy

**RevenueCat**
- Purpose: Subscription management
- Data Shared: User ID, subscription status
- Privacy Policy: https://www.revenuecat.com/privacy

**Apple App Store / Google Play Store**
- Purpose: Payment processing
- Data Shared: Purchase information
- Privacy Policies: [Apple](https://www.apple.com/legal/privacy/) | [Google](https://policies.google.com/privacy)

### 3.2 We Do NOT Sell Your Data

We will never:
- ❌ Sell your personal information to third parties
- ❌ Share your data with advertisers
- ❌ Use your data for purposes other than stated here

### 3.3 Legal Requirements

We may disclose information if required by law or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security issues
- Protect user safety

---

## 4. Data Storage and Security

### 4.1 Where We Store Data

Your data is stored securely using:

- **Firebase Cloud Firestore** - Encrypted database (Google Cloud)
- **Firebase Authentication** - Secure user authentication
- **Device Storage** - Local progress cache (encrypted)

Data centers are located in the United States and comply with international data protection standards.

### 4.2 Security Measures

We implement industry-standard security:

- 🔒 **Encryption** - Data encrypted in transit (HTTPS/TLS) and at rest
- 🔒 **Authentication** - Secure password hashing (bcrypt)
- 🔒 **Access Control** - Strict database security rules
- 🔒 **Regular Audits** - Security reviews and updates
- 🔒 **Monitoring** - Real-time threat detection

### 4.3 Data Retention

- **Active Accounts** - Data retained while account is active
- **Inactive Accounts** - Data may be deleted after 2 years of inactivity
- **Deleted Accounts** - Data permanently deleted within 30 days
- **Backups** - Backup data deleted within 90 days

---

## 5. Your Rights and Choices

### 5.1 Access and Control

You have the right to:

- ✅ **Access** - View your personal data
- ✅ **Update** - Correct inaccurate information
- ✅ **Delete** - Request account deletion
- ✅ **Export** - Download your data
- ✅ **Opt-Out** - Disable analytics or notifications

### 5.2 How to Exercise Your Rights

**In-App:**
- Go to Profile → Settings → Privacy
- Manage data, notifications, and preferences

**Email Us:**
- Contact: [email protected]
- We respond within 30 days

### 5.3 Account Deletion

To delete your account:

1. Go to Profile → Settings → Delete Account
2. Confirm deletion
3. All data will be permanently deleted within 30 days

**Note:** Subscription cancellation must be done through Apple App Store or Google Play Store.

### 5.4 Marketing Communications

You can opt out of:
- Email newsletters (unsubscribe link in emails)
- Push notifications (device settings)
- In-app promotional messages (app settings)

---

## 6. Children's Privacy

### 6.1 Age Requirement

Our app is intended for users aged **13 and older**. We do not knowingly collect information from children under 13.

### 6.2 Parental Consent

If you are under 18, please obtain parental consent before using our app.

### 6.3 If We Learn of Underage Users

If we discover we have collected data from a child under 13, we will:
1. Delete the account immediately
2. Remove all associated data
3. Notify the parent/guardian (if possible)

---

## 7. International Users

### 7.1 Data Transfers

Our services are hosted in the United States. By using our app, you consent to the transfer of your data to the U.S.

### 7.2 GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under GDPR:

- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority

### 7.3 CCPA Compliance (California Users)

California residents have rights under CCPA:

- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of data sales (we don't sell data)
- Right to non-discrimination

---

## 8. Cookies and Tracking

### 8.1 What We Use

We use:

- **Essential Cookies** - Required for app functionality
- **Analytics Cookies** - To understand app usage (Firebase Analytics)
- **Preference Cookies** - To remember your settings

### 8.2 Third-Party Tracking

We use Firebase Analytics, which may use cookies and similar technologies. You can opt out in app settings.

### 8.3 Do Not Track

We respect "Do Not Track" signals where technically feasible.

---

## 9. Changes to This Policy

### 9.1 Updates

We may update this Privacy Policy periodically. Changes will be posted with a new "Last Updated" date.

### 9.2 Notification

For material changes, we will:
- Notify you via email
- Show an in-app notification
- Require acceptance before continued use

### 9.3 Your Continued Use

Continued use of the app after changes constitutes acceptance of the updated policy.

---

## 10. Contact Us

### 10.1 Questions or Concerns

If you have questions about this Privacy Policy or our data practices:

**Email:** [email protected]  
**Support:** [email protected]  
**Website:** www.bglingo.app

### 10.2 Data Protection Officer

For GDPR-related inquiries:  
**Email:** [email protected]

### 10.3 Response Time

We aim to respond to all inquiries within 30 days.

---

## 11. Additional Information

### 11.1 Third-Party Links

Our app may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

### 11.2 Data Breach Notification

In the event of a data breach, we will:
1. Notify affected users within 72 hours
2. Provide details of the breach
3. Explain steps we're taking to address it
4. Advise on protective measures you can take

### 11.3 Your California Privacy Rights

California Civil Code Section 1798.83 permits users who are California residents to request information about disclosure of personal information to third parties. We do not share personal information with third parties for their direct marketing purposes.

---

## Summary

**We collect:** Account info, learning progress, usage data  
**We use it for:** Providing services, improving the app, personalization  
**We share with:** Service providers only (Firebase, OpenAI, RevenueCat)  
**We DON'T:** Sell your data or share with advertisers  
**Your rights:** Access, update, delete, export your data  
**Security:** Industry-standard encryption and protection  

---

**By using our app, you acknowledge that you have read and understood this Privacy Policy.**

**Thank you for trusting us with your Bulgarian learning journey!** 🇧🇬

---

*This privacy policy was last updated on January 31, 2025.*