1. Who we are and scope

This Policy explains how Talk & Learn processes personal data on talkandlearn.app, in the web application, and in the Android application.

The data controller is Artem Sergeevich Soloviev, a self-employed individual in the Russian Federation, tax ID 890800314005. Privacy contact: [email protected]; telephone: +7 966 762 5067.

An account must be created and managed by an adult. Where a person in your care uses the communicator, their legal representative or responsible professional must decide what information is entered and who can access the group.

2. Data we process

Account data: email address, an irreversible password hash, name, optional profile image, interface language, and preferences.

Group data and user content: members and roles, settings, cards, categories, images, phrases, communication history, messages, goals, progress, reports, and recommendations.

Technical data: IP address, browser, operating system, application version, access time, server logs, and technical crash data. Crash reports do not include cards, messages, or communication history.

The Android application sends limited usage statistics without the content of the actions. We do not collect an advertising identifier or precise location.

When you use dictation, audio is sent for conversion to text. We do not retain the recording after processing; only recognised text and cards created from it may be stored.

We retain payment facts such as amount, date, payment identifier, and purchase contents. We do not receive or store full bank-card details.

3. Purposes and legal bases

We process data to provide the service and perform our contract with you: create an account, store and synchronise groups, show history, respond to requests, and manage paid access.

Features you actively request — speech synthesis and recognition, image search, phrase generation, reports, and recommendations — require sending the necessary query to the relevant provider.

We also process data to secure the service, prevent misuse, fix failures, and meet legal obligations, relying on our legitimate interests and applicable law.

We send educational or marketing communications only where we have a lawful basis. You can unsubscribe using the link in a message.

4. Local mode

The communicator works without an account. In local mode, cards, settings, history, and the group language setting are kept in the device’s local database and are not synchronised with our server.

Only requests you initiate that require a remote service are sent to the server, for example speech synthesis, image search, or dictation. Your whole local database is not uploaded.

A local backup is saved as a file on your device. Migration of local data into an account starts only after an explicit user action.

5. Recipients and international transfers

We do not sell personal data or share it for third-party advertising. Group participants can see content that the group administrator shares within that group.

We use providers only for specific service functions: Yandex for certain voice, AI, search, and analytics functions; ARASAAC and Unsplash for image search; YooKassa for payments; and email, hosting, and backup providers.

The controller and some providers are outside the European Economic Area, including in the Russian Federation. Cloud features may therefore transfer data to countries that may not provide the same level of protection as your country. Before a commercial launch directed at the EEA, the transfer mechanisms required by applicable law must be reviewed and documented.

6. Cookies and analytics

We use cookies and local storage necessary to keep you signed in and remember language and settings. You can remove or block them in your browser, although some features may stop working.

Yandex Metrica and AppMetrica provide aggregate site and application statistics. They do not receive the content of your cards, phrases, or messages for this purpose.

7. Retention and deletion

Account and group data is retained while the account exists. Deleted items may remain temporarily marked as deleted so that the change can synchronise across devices.

You can request account deletion by emailing [email protected] from the registered address. We normally complete deletion within 30 days, except for records we must retain by law. Technical logs and crash reports are retained for no longer than 12 months.

Local-mode data is removed when you clear the site or application data. Backup files you downloaded remain under your control.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier processing.

Send requests to [email protected]. We may ask for reasonable information to verify your identity. You may also complain to the data-protection authority where you live or work.

9. Security, changes, and contact

We use encrypted connections, password hashing, restricted access, and backups. No system is completely secure, so please protect your credentials and device access.

We may update this Policy. The current version and date will always be available at https://talkandlearn.app/privacy. Material changes will be communicated by email or in the application.

Privacy questions and requests: [email protected]; +7 966 762 5067.