1. Scope of this policy

This Privacy Policy applies to the Italir Pothe mobile application, public website, backend services and related features.

Third-party websites and services linked from Italir Pothe operate under their own privacy policies.

• Italir Pothe mobile-app users.
• Visitors to the Italir Pothe public website.
• Registered learners and certificate holders.
• Users of courses, quizzes, examinations and practice tools.
• Users of AI Tutor, AI voice and AI-assisted CV features.
• Users of messages, audio or video calls and webinars.
• People who contact support or submit account-deletion requests.
• People participating in rewards, purchases or community activities.

2. Information we collect

We collect information that is reasonably necessary to provide, secure, personalize and improve Italir Pothe.

2.1 Account and authentication information

We may collect account and authentication information when you register, sign in, verify your account or use protected services.

We do not store your password as readable plain text.

• Full name.
• Email address.
• Phone number.
• Password in protected or hashed form.
• One-time verification codes and verification status.
• Internal user ID and account role.
• Email and phone verification status.
• Profile photo.
• Preferred language.
• Learner level.
• Account-security and login information.
• Authentication tokens and session information.

2.2 Profile and preference information

• Profile photo and profile-photo file information.
• App-language selection.
• Learning level and learning preferences.
• Notification and haptic preferences.
• Communication preferences.
• Current streak and streak-protection balance.
• Other settings you choose to save.

2.3 Learning and course information

We may collect information about how you access and use courses, lessons and learning activities.

• Course enrollments and purchased courses.
• Chapters and lessons accessed.
• Video-watching progress.
• Audio-listening progress.
• Theory or PDF resources opened or completed.
• Vocabulary progress and saved words.
• Quiz questions, selected answers and results.
• Daily challenges and completed tasks.
• Time spent on learning activities.
• Course-completion percentage.
• XP, streaks, achievements and rewards.
• Leaderboard position and league information.
• Career-track and Survival Italian activity.
• Saved learning materials and practice history.
• Recommended lessons, focus areas and next steps.

2.4 Examination and certificate information

• Examination-attempt identifiers.
• Listening, writing, vocabulary, grammar and speaking answers.
• Written examination responses.
• Speaking-test audio recordings and transcripts.
• Scores and completion results.
• Teacher or reviewer comments.
• Examination status and review status.
• Attempt dates and time taken.
• Certificate identifier and reference code.
• Learner name shown on a certificate.
• Course or examination connected to a certificate.
• Certificate issue date, status, PDF and verification information.

2.5 AI Tutor and AI-learning information

AI input may be processed by contracted AI, speech-recognition, speech-generation, transcription and real-time voice providers.

Do not provide government identification numbers, payment-card details, medical information or other highly sensitive information that is unnecessary for language learning.

• Text prompts and questions.
• AI conversation history.
• Selected lesson, topic or learning mode.
• Writing-assistance requests.
• Source language and target language.
• Learner level.
• Previous mistakes and recent mistake tags.
• Learning-memory facts generated from prior interactions.
• Level-test questions and answers.
• Audio submitted for transcription.
• Voice-chat audio streams and transcripts.
• AI-generated responses and corrections.
• Strengths, weaknesses and recommended focus areas.
• Token, voice-time and AI-credit usage.
• Session identifiers and technical connection information.
• Feedback and reports about AI-generated content.
• Screenshots or evidence voluntarily attached to an AI-content report.

2.6 Messages, calls and community information

Live audio and video are transmitted to provide calls.

We retain recordings only where a feature is designed to record information, such as speaking examinations, voice answers or another feature that provides clear notice.

• Direct messages and message content.
• Message timestamps and delivery status.
• Conversation identifiers.
• Images, audio, documents or other attachments you send.
• Sender and recipient identifiers.
• Online or presence status.
• Call identifiers.
• Caller and receiver details.
• Audio or video call type.
• Call status, duration and timestamps.
• Technical channel and connection information.
• Blocked-user records.
• User reports, report reasons and evidence.
• Moderation decisions and safety records.

2.7 Webinar information

• Webinar registration or attendance.
• User and participant identifiers.
• Display name and profile image.
• Join and leave activity.
• Chat messages.
• Speaker requests and approval status.
• Microphone and camera status.
• Audio and video streams when participating as a speaker.
• Technical connection and channel information.
• Reports or moderation information.

2.8 CV and employment-related information

You control what information you include in your CV.

Avoid adding information that is not necessary for your CV.

• Name and contact details.
• Email address and phone number.
• Address or location written in your CV.
• Professional summary.
• Employment history.
• Education history.
• Skills, qualifications and certifications.
• Language ability.
• References.
• Profile photograph.
• Uploaded CV documents or images.
• Template, design and formatting preferences.
• AI CV-assistant conversations.
• Generated CV files and previews.

2.9 Purchase and entitlement information

Google Play processes your payment method.

Italir Pothe does not receive your complete payment-card number, bank-account credentials or Google Play password.

• Google Play product ID.
• Purchase token.
• Order or transaction number.
• Purchase provider.
• Product type.
• Price and currency.
• Purchase date and status.
• Subscription or entitlement status.
• Refund, cancellation and chargeback information.
• Coupon, referral or promotional information.
• Obfuscated account identifier used for transaction verification.
• Purchased course, package or digital entitlement.
• AI text-token balance.
• AI voice-time balance.
• CV-credit balance.
• Streak-freeze balance.
• Reward and other digital balances.

2.10 Rewards and delivery information

This information is used only to process and support reward delivery and related records.

• Recipient name.
• Delivery address.
• Country information.
• WhatsApp or contact number.
• Reward selected or earned.
• Shipping status.
• Dispatch and delivery information.
• Communications related to delivery.

2.11 Contact and support information

• Name.
• Email address.
• Phone number.
• Support subject and message.
• Account-deletion request information.
• Appeal or complaint details.
• Files, screenshots and other evidence you submit.
• Communications between you and our support team.

2.12 Device and technical information

The current Android application does not request access to your precise GPS location, address-book contacts, SMS messages or health data.

• Device or installation identifier.
• Firebase push-notification token.
• Device platform and operating system.
• App version.
• Browser type when using the website.
• IP address.
• Approximate country or region inferred from network or store information.
• Language, locale and timezone.
• Network and connection information.
• API request and response timestamps.
• Login, authentication and security events.
• Error, diagnostic and performance information.
• Feature usage and app-interaction records.
• Purchase-verification and fraud-prevention signals.

3. Device permissions

Depending on the feature you use, Italir Pothe may request access to notifications, microphone, camera, photos, selected files and call-related Android functionality.

You may refuse or revoke optional permissions through your device settings.

A feature may not work when its required permission is disabled.

• Notifications: Used for account and security notices, learning reminders, course or examination updates, messages, incoming-call alerts, webinar reminders, purchases and reward updates.
• Microphone: Used for AI voice conversations, speaking practice, speaking examinations, audio messages, calls and webinar speaker participation.
• Camera: Used for profile photographs, selected image uploads, video calls and webinar speaker participation.
• Photos and selected files: Used for profile photos, evidence, attachments, CV information, messages, reports, generated CVs, certificates and learning PDFs.
• Call-related and foreground-service access: Used to maintain incoming or active voice and video calls and display call notifications where permitted by Android.

4. How we use information

• Register, authenticate and secure accounts.
• Verify email addresses and phone numbers.
• Provide courses, lessons, quizzes and practice features.
• Save learning progress and examination results.
• Personalize learning content and recommendations.
• Provide AI text, voice, translation and writing assistance.
• Generate CVs and downloadable documents.
• Operate messages, calls and webinars.
• Deliver notifications.
• Process purchases and verify Google Play transactions.
• Grant courses, subscriptions, credits and other digital entitlements.
• Issue and verify certificates.
• Operate leaderboards, streaks, rewards and daily challenges.
• Deliver physical or digital rewards.
• Respond to support, reports, appeals and deletion requests.
• Detect spam, fraud, cheating, misuse and security threats.
• Moderate content and protect users.
• Diagnose technical problems.
• Measure service performance and improve features.
• Enforce our Terms and Conditions.
• Comply with legal, tax, accounting and regulatory obligations.
• Establish, exercise or defend legal claims.

5. Legal bases for processing

Where laws such as the GDPR apply, we rely on one or more lawful bases for processing.

Performance of a contract may apply when processing is necessary to create and maintain your account, provide requested learning services, save progress, provide messages, calls, webinars or AI features, process purchases and deliver certificates, CVs, credits and rewards.

Consent may apply to microphone, camera, photo and file access, voice recording or transcription, optional AI features, optional marketing communications or other processing where consent is legally required.

You may withdraw consent through the app, device settings or by contacting us. Withdrawal does not affect processing completed lawfully before withdrawal.

Legitimate interests may apply to protecting users and the service, preventing fraud and abuse, securing infrastructure, diagnosing problems, improving educational quality, maintaining records and protecting legal rights.

We balance legitimate interests against your rights and reasonable expectations.

Legal obligations may require processing or retention for tax, accounting, consumer-protection, payment, fraud-prevention, regulatory or valid legal-request purposes.

6. AI processing and automated features

AI output may be incorrect, incomplete or inappropriate. Review important results before relying on them.

AI learning scores, recommendations, rankings and level estimates are used for educational purposes.

They are not intended to make legal, immigration, employment, financial, medical or similarly significant decisions about you.

Some final-examination answers may be reviewed by authorized teachers or administrators rather than decided only by an automated system.

• Generate educational answers.
• Translate or correct writing.
• Transcribe audio.
• Estimate language level.
• Identify strengths and areas for improvement.
• Recommend lessons or practice.
• Create CV content or formatting suggestions.

7. How we share information

We do not sell personal information.

We do not provide personal information to advertisers for unrelated cross-service behavioral advertising.

We may share limited information with providers and authorized people where reasonably necessary to provide, secure and support Italir Pothe.

• Hosting and infrastructure providers supporting application hosting, databases, file storage, content delivery, security, monitoring, email, SMS, backups and infrastructure.
• Firebase Cloud Messaging for push-notification tokens and related technical data.
• Google Play for payments, purchase verification, subscriptions, refunds, fraud prevention and transaction support.
• Agora for audio, video and connection information used during calls or webinars.
• LiveKit and configured AI, speech, transcription or voice providers for live audio, transcripts, prompts, conversation context and session information.
• Other users who receive information you intentionally share, including messages, attachments, profile details, call participation, webinar participation, leaderboard details and community messages.
• Authorized teachers, moderators and support staff who need information to review examinations, provide support, moderate content, investigate reports or manage purchases, certificates and rewards.
• Authorities or other parties where disclosure is required by law or reasonably necessary to protect safety, investigate fraud, enforce agreements or protect users and the public.
• Parties involved in a merger, acquisition, financing, restructuring or sale of assets, subject to appropriate notice and safeguards.

8. Public certificate verification

Certificates may contain a verification code or public verification link.

A person with a valid certificate identifier may be able to view limited information required to verify authenticity.

Do not publicly share your certificate identifier unless you want other people to verify the certificate.

• Certificate holder’s name.
• Certificate title.
• Associated course or examination.
• Issue date.
• Certificate status.
• Verification identifier.

9. External services and links

When you open an external service, that provider may collect information under its own privacy policy.

Italir Pothe does not control the provider’s independent processing.

• Facebook pages or groups.
• WhatsApp support.
• External book stores.
• App stores.
• Other websites or communication services.

10. Cookies and local device storage

The website and app may use cookies, secure storage, local storage or similar technology.

We do not currently use third-party advertising SDKs in the Android application.

This policy will be updated before such advertising technology is introduced.

• Keep you signed in.
• Store authentication tokens.
• Remember language and app preferences.
• Maintain purchase-recovery information.
• Protect accounts and prevent fraud.
• Preserve necessary session information.

11. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy.

Account and profile information is generally retained while the account is active.

Learning progress, AI history and CV information may remain until deletion or until no longer needed.

Purchase and accounting records may be retained for legally required periods.

Security and diagnostic logs may be retained for a shorter operational period unless needed for investigation.

Moderation and fraud records may be retained where necessary to protect users and prevent repeated abuse.

Backup copies may remain temporarily until replaced through ordinary backup cycles.

• Whether your account remains active.
• The type of information.
• Course, examination and certificate requirements.
• Purchase, refund or chargeback periods.
• Safety and fraud-prevention needs.
• Legal, tax and accounting obligations.
• Dispute and complaint periods.
• Backup and system-recovery cycles.

12. Account and data deletion

You may request permanent account deletion inside the app through Settings → Delete Account, through the Italir Pothe public account-deletion webpage or by emailing hello@italirpothe.com.

We may verify your identity before completing the request.

After a verified deletion request, we will delete or anonymize personal information associated with the account that is no longer necessary for legal, security, fraud-prevention or transaction-record purposes.

Messages already delivered to another user may remain in that user’s conversation where necessary for conversation integrity, reporting or safety.

Where reasonably possible, the deleted account’s identity will be removed or anonymized.

Deleting an Italir Pothe account does not automatically cancel an active Google Play subscription. Subscriptions must be cancelled through Google Play.

• Account and profile information.
• Learning progress.
• AI conversations and learning-memory information.
• CV information and generated files.
• Stored uploads.
• Device tokens.
• Available digital balances.
• Certificate personal information or public verification access, subject to legitimate recordkeeping requirements.
• Other account-associated service information.
• Limited tax and accounting records may be retained.
• Purchase, refund or chargeback records may be retained.
• Fraud, abuse-prevention and security records may be retained.
• Information required for legal compliance, disputes or enforcement of legal rights may be retained.

13. Your choices and rights

Your available rights depend on the law that applies to you.

You may update available profile information from Settings.

You may control camera, microphone, notification, photo and file permissions through your device settings.

To submit a privacy request, contact hello@italirpothe.com. We may request reasonable information to verify your identity and protect the account.

• Access personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Request a copy of your information.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Request data portability.
• Withdraw consent.
• Opt out of optional marketing communications.
• Complain to an appropriate data-protection authority.

14. International data processing

Italir Pothe and its service providers may process information in countries other than the country where you live.

Where required, we use appropriate contractual, technical, organizational or legal safeguards for international transfers.

Users in the European Economic Area may contact their local data-protection authority regarding unresolved privacy concerns.

15. Security

We use reasonable administrative, technical and organizational measures designed to protect information.

No application, website, transmission or storage system can guarantee absolute security.

Keep passwords and one-time codes private.

Contact hello@italirpothe.com immediately if you suspect unauthorized account access.

• Password hashing.
• Authenticated APIs.
• Secure token handling.
• Encrypted network transmission.
• Access controls.
• Restricted administrative permissions.
• Signed file-upload and download links where configured.
• Monitoring and security logging.
• Fraud and abuse controls.

16. Children’s privacy

Italir Pothe is not intended for children under 13.

Where applicable law requires a higher minimum age or parental permission, that higher requirement applies.

A parent or guardian who believes that a child submitted personal information without appropriate authorization should contact hello@italirpothe.com. We will investigate and take appropriate action.

17. Changes to this policy

We may update this Privacy Policy when features, data practices, service providers, security requirements, applicable laws or Google Play requirements change.

We will update the effective date.

We will provide additional notice inside the app, by email or through another appropriate method when a material change requires notice.

18. Contact us

For privacy questions, complaints, rights requests or account-deletion assistance, contact hello@italirpothe.com.

Include the email address or phone number connected to your account when relevant.

Do not send your password or complete payment-card details.

Italir Pothe