Privacy Policy

Effective Date: February 23, 2026 Last Updated: February 23, 2026

This Privacy Policy describes how Limersi ("we," "us," or "our") collects, uses, and shares information when you use the Limersi mobile application ("App"). By using the App, you agree to the collection and use of information as described in this policy.

1. Data Controller

Robert Rosiji-Griffith trading as Limersi is the data controller responsible for your personal data. For questions about this policy or your data, contact us at:

Email: contact@limersi.com

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication method (email/password, Google, or Apple Sign In)
  • Profile photo URL (if provided by your Google or Apple account)

2.2 Profile Information

During onboarding and app usage, you may provide:

  • First name and last name
  • Country
  • Native language and target language
  • Difficulty level (CEFR level: A1 through C1)
  • Marketing preferences (opt-in)

2.3 Learning Content

As you use the App, we store:

  • Conversation messages -- the full text of messages you send and AI responses you receive
  • Flashcards -- vocabulary cards generated from your conversations, including source and target language text
  • Learning progress -- spaced repetition data for each flashcard (review history, difficulty ratings, scheduled review dates)

2.4 Subscription Information

If you subscribe to a premium plan, we store:

  • Subscription status, plan type, and pricing
  • Purchase dates and renewal information
  • Payment provider identifiers (managed by Apple App Store or Google Play Store)

We do not directly process or store your payment card details. All payments are handled by the respective app stores.

2.5 Voice Data

When you use the voice practice feature:

  • Your voice recording is sent to our servers and forwarded to Google Cloud Speech-to-Text for transcription
  • Voice recordings are not stored permanently -- they are processed in real-time and discarded after transcription
  • Only the resulting text transcription is used for grading your pronunciation

2.6 Device and Usage Data

We automatically collect:

  • Timezone (IANA format, synced from your device on each login)
  • App usage analytics (screen views, feature interactions, learning activity -- see Section 5)

3. How We Use Your Information

We use the information we collect to:

  • Provide the language learning service -- power AI conversations, generate flashcards, and track your learning progress
  • Personalize your experience -- tailor content to your language pair, difficulty level, and learning history
  • Process subscriptions -- manage your premium access and billing status
  • Improve the App -- analyze usage patterns to identify bugs, improve features, and understand how learners use the App
  • Communicate with you -- send service-related notifications (if you opt in to marketing, we may send promotional messages)
  • Generate audio pronunciation -- create text-to-speech audio for your flashcards

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Legal Basis Data Processed
Contract performance Account data, profile data, learning content, learning progress, subscription data -- necessary to provide the language learning service you signed up for
Consent Marketing communications, analytics (session replay) -- you can withdraw consent at any time
Legitimate interests App improvement analytics, fraud prevention, security -- balanced against your privacy rights

5. Third-Party Services

We use the following third-party services to operate the App:

5.1 Supabase

  • Purpose: User authentication, database hosting, file storage
  • Data shared: Email, authentication credentials, all app data stored in our database, text-to-speech audio files
  • Privacy policy: supabase.com/privacy

5.2 PostHog

  • Purpose: Product analytics and session replay
  • Data shared: User ID, email, authentication method, language preferences, subscription status, app usage events (screen views, learning activity, subscription events)
  • Session replay: We record user sessions to improve the App experience. Text inputs are masked in recordings. Network telemetry is captured. Session replay is only active in production.
  • Privacy policy: posthog.com/privacy

5.3 RevenueCat

  • Purpose: In-app subscription management
  • Data shared: User ID, email address, language preferences
  • Privacy policy: revenuecat.com/privacy

5.4 Deepseek AI

  • Purpose: AI conversation responses, flashcard generation from messages, voice answer grading
  • Data shared: Full conversation message history (your messages and AI responses), flashcard text for pronunciation grading
  • Privacy policy: deepseek.com/privacy

5.5 Google Cloud

  • Purpose: Speech-to-Text (voice pronunciation grading) and Text-to-Speech (flashcard audio generation)
  • Data shared: Voice audio recordings (for STT, processed in real-time and not stored), flashcard text (for TTS, audio cached)
  • Privacy policy: policies.google.com/privacy

5.6 Google Sign-In / Apple Sign In

  • Purpose: Social authentication
  • Data shared: Only the minimum required for authentication (email, name, profile photo)
  • Privacy policies: Google | Apple

6. Data Retention

  • Account data and learning content are retained as long as your account is active
  • Voice recordings are not retained -- they are processed in real-time and immediately discarded
  • Text-to-speech audio generated from flashcard text is cached indefinitely to avoid regeneration
  • Analytics data in PostHog follows PostHog's standard retention policies
  • Subscription records in RevenueCat are retained by RevenueCat for financial compliance, even after account deletion

When you delete your account, all data stored in our database is permanently deleted (see Section 7).

7. Account Deletion

You can delete your account at any time from the Profile screen in the App. When you delete your account:

Permanently deleted:

  • Your account information (email, profile data)
  • All conversation messages and chat history
  • All flashcards and vocabulary data
  • All learning progress and spaced repetition data
  • Your customer profile and preferences
  • Your Supabase authentication credentials

Retained for compliance:

  • RevenueCat subscription/purchase records (required for financial and tax compliance by Apple and Google)

Note: Deleting your Limersi account does not cancel active App Store or Google Play subscriptions. You must cancel subscriptions separately through your device's subscription settings.

You may also request account deletion by emailing contact@limersi.com.

8. Your Rights (EEA Residents)

If you are located in the European Economic Area, you have the following rights under GDPR:

  • Right of access -- request a copy of the personal data we hold about you
  • Right to rectification -- request correction of inaccurate personal data
  • Right to erasure -- request deletion of your personal data (see Section 7)
  • Right to data portability -- request your data in a machine-readable format
  • Right to restrict processing -- request that we limit how we use your data
  • Right to object -- object to processing based on legitimate interests
  • Right to withdraw consent -- withdraw consent for marketing or analytics at any time
  • Right to lodge a complaint -- file a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at contact@limersi.com. We will respond within 30 days.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. During onboarding, we require users to confirm they are at least 13 years old. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at contact@limersi.com.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure authentication via Supabase with JWT tokens
  • Server-side access controls and authentication guards
  • Database access restricted to authenticated and authorized users

While we strive to protect your data, no method of electronic transmission or storage is 100% secure.

11. International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including countries outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Local Storage on Your Device

The App stores the following data locally on your device:

  • Authentication tokens (session and refresh tokens) in AsyncStorage for maintaining your login session
  • Daily study flashcard cache (expires after 24 hours)
  • Session preferences (study settings like cards per session)

This data is stored on your device only and is cleared when you sign out.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this document. For significant changes, we will notify you through the App or by other means. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at:

Email: contact@limersi.com