Tlumach Privacy Policy

Last updated: 2026-04-28

This Privacy Policy describes how the Tlumach mobile application (the "App") collects, uses, and protects information when you use it. By using Tlumach you agree to the practices described below.

If anything here is unclear, contact us at support@tlumachapp.com (or whichever support address is shown in the App's Settings → Contact support screen).

1. Who we are

Tlumach is operated by the publisher of the Google Play listing com.tlumach.app. References to "we", "our", or "us" mean that publisher.

2. What data we collect

We collect only what is necessary for the App to work and to keep your account secure.

Category	What it is	Why we need it
Account info	Your email address and Google sub identifier (via Google Sign-In).	Authentication, so the App knows which learner is using which device.
App usage / progress	Sentences you have seen, your CEFR stage, vocabulary and grammar progress.	Personalised AI-driven sentence generation. Your progress is per account, not per device.
Purchase history	Google Play subscription state, top-up purchase tokens, refund events.	To grant or revoke entitlements (Spark, Pro, top-ups) and prevent duplicate billing.
Crash & error diagnostics	Anonymous error traces (only when something goes wrong).	To find and fix bugs.

We do NOT collect:

precise location,
device contacts, calendar, photos, or files,
health, fitness, or financial data outside the Google Play purchase tokens (which Google Play classifies as non-personal),
voice recordings (the App only plays generated audio; it never records).

3. How we use the data

We use the data exclusively to:

authenticate you,
personalise the next sentence Tlumach prepares for you,
enforce subscription entitlements and remember your top-up balance,
detect and fix crashes,
comply with legal obligations.

We do not use your data for advertising, profiling unrelated to language learning, or training third-party AI models.

4. Where the data lives

System	Role	Region
Supabase	Our backend database and edge functions. Holds your account, progress, and entitlement rows.	The Supabase project's configured region.
OpenAI	Generates sentence text and audio in response to a server-side prompt. Receives no PII.	OpenAI's processing region.
Google Play	Handles all real money transactions. We never see your card details.	Google's region.

The App talks to Supabase exclusively over HTTPS. Supabase is configured with row-level security so your rows are visible only to your account.

5. Sharing your data

We do not sell your data. We do not share your data with third parties for advertising. The only third parties involved are the data processors listed in section 4, all of whom act on our behalf:

Supabase (data storage, authentication, edge functions),
OpenAI (text generation, text-to-speech) — receives ephemeral prompts with no personal identifiers,
Google (Play Billing, Sign-In, crash diagnostics surfaced in Play Console).

6. Children's privacy

Tlumach is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the App, contact us and we will delete the account.

7. Your rights

You may at any time:

Access the data we hold about you — exportable from the App's Settings → Storage on this device screen, and from the Supabase dashboard on request.
Correct inaccurate data — most fields are editable inside the App; for the rest, contact us.
Delete your account and all associated server-side data — use Settings → Sign out → Delete account, which calls our safe_delete_profile server-side procedure.
Withdraw consent to processing — by uninstalling the App and asking us to delete your account.

To exercise any of these rights, contact support@tlumachapp.com.

8. Security

All network traffic is encrypted in transit (HTTPS).
All data is encrypted at rest (Supabase Postgres).
Authentication uses OpenID Connect via Google Sign-In; Tlumach never sees your Google password.
We rotate service-account credentials regularly and follow the principle of least privilege for backend API access.

9. Retention

We keep account data for as long as you have an active account. When you delete your account, all server-side rows are removed within 30 days (except for purchase audit rows, which are retained for the period required by tax/finance regulations — usually 7 years — but stripped of personal identifiers).

10. Changes to this policy

We may update this policy when the App's behaviour changes. The "Last updated" date at the top is always the source of truth. Significant changes will be announced inside the App.

11. Contact

Questions or complaints? Email support@tlumachapp.com.