Privacy policy

Information we collect

• Account information. When you sign in with Apple or Google, we receive a verified email address, an account identifier, and, when available, your name and profile picture. Apple may provide a private relay address. We do not receive your Apple or Google password. We create a Clementine account ID and use a secure sign-in token on your device.
• Learning information. We store course and lesson progress, review schedules and results, learning goals, preferences, reading history, saved items, streaks, and character introduction history. Some settings and learning records remain on your device; supported progress and history sync to your account when connected.
• Answers you submit for review. When you request writing or simulated-email feedback, we process the text you submit. When you choose to record and submit a spoken answer, we process the recording and its transcript. We request microphone access for recording. We do not record in the background. Simulated emails are exercises and are not sent to real recipients.
• Usage and diagnostics. We collect account-linked events such as app opens, lesson and review activity, durations, and synchronization results. Event properties use a restricted set of identifiers and counters, not your raw written answers. Crash reports can include error messages, technical stack traces, app version, operating system, and account identifiers.
• Feedback. We collect feedback messages, content reports, and screenshots you choose to attach, together with relevant app context. Screenshots may contain information visible in the app; please avoid including sensitive information. Feedback attachments may be accessible to anyone with their unlisted storage URL.
• Service and beta-testing information. Our infrastructure providers process connection information, such as IP addresses and request logs, to deliver and protect the service. Apple may provide TestFlight feedback, crash information, and testing data under its TestFlight terms.

How we use it

We use this information to sign you in, keep learning records associated with the right account, synchronize progress, deliver lessons and requested feedback, investigate problems, answer support requests, improve the beta, and prevent abuse. We do not sell your personal information, run targeted advertising, or track you across other companies’ apps and websites for advertising.

Where applicable, we process information to provide the service you request, for legitimate interests in operating and improving it, to meet legal obligations, or with your consent for optional activities. You can choose whether to submit feedback or answers for AI review.

Service providers and sharing

We use Apple and Google for sign-in; Vercel and Neon for application hosting, storage, and databases; and OpenAI to transcribe or review answers you explicitly submit. Requests to AI services can include your submitted text or recording and the exercise context needed to evaluate it. Avoid including private information in learning exercises. Provider processing and retention are governed by our service arrangements and their applicable policies.

Pre-recorded lesson audio is produced using speech services, including Google Cloud and Microsoft Azure, and delivered from hosted storage. Playing a pre-recorded lesson does not send a microphone recording. The privacy-policy website is hosted with OpenAI Sites.

Authorized Clementine operators can access information needed to support learners and maintain the service. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer subject to appropriate privacy protections. If you use a leaderboard, its displayed name, streak, and language can be visible to other learners.

Storage, retention, and security

We keep account and learning records while your account is active, unless you request deletion. Usage events have a 120-day retention window; older events are removed during subsequent event ingestion. We retain feedback and diagnostic records as needed to investigate and resolve issues, or until you request their deletion. Infrastructure logs and backups follow the relevant provider’s retention schedule and may outlast deletion from the active database for a limited period.

We use encrypted network connections, secure device storage for sign-in tokens, and access controls for account data. No storage or transmission method is completely secure. Information may be processed outside your country, including in the United States, where privacy laws may differ.

Your choices and account deletion

You can change learning preferences in the app, sign out, revoke microphone permission in your device settings, and choose not to submit optional feedback or AI-review answers. Signing out or uninstalling the app does not delete your cloud account. Device-only records are not guaranteed to survive an uninstall.

To delete your account, use Account → Delete account in versions that include this option. Deletion removes your account and its associated learning records from our active systems, including account-linked feedback and diagnostics. Apple-linked accounts may require you to confirm your Apple sign-in so its authorization can be revoked. If you are using an earlier beta or cannot access your account, email yutaro@clementine.cc from the address associated with it. We aim to complete verified requests within 30 days and will tell you if more time is required.

You may also request access to, a copy of, correction of, or deletion of your information. Depending on where you live, you may have additional rights to restrict or object to processing, withdraw consent, or complain to a data protection authority. We may ask for enough information to verify that a request concerns your account. We may retain information where legally required and aggregate statistics that no longer identify you.

Children

The beta is intended for adults and is not directed to children under 13. If you believe a child has provided us with personal information, contact us so we can investigate and delete it as appropriate.

Changes and contact

We will update the effective date when this policy changes and provide additional notice for material changes where required. Questions about this policy or your information can be sent to yutaro@clementine.cc.