Last updated: October 15, 2026
trufie ("we", "us", or "the app") is a language learning application. This policy explains what data we collect, how we use it, and your rights regarding that data.
When you sign up we store your email address and a unique user ID. If you sign in with Google or Apple, we receive the name and email associated with that account. We do not store your password directly — it is securely hashed by our authentication provider.
Your chosen interface language (the language you speak) and learning language (the language you are studying), along with your estimated proficiency levels.
We track which flashcards you have reviewed, grammar exercises you have completed, reading passages you have read, and listening exercises you have practiced — including scores, attempt counts, and time spent. This data is used to personalise your experience and power spaced-repetition scheduling.
Any flashcards, passages, or exercises you bookmark or organise into custom collections.
Words and definitions you add manually, including example sentences, synonyms, and associated audio.
Messages you exchange with the AI tutor — both text and voice — are stored so you can resume conversations and so the tutor can remember context. This includes the full text of your messages, the tutor’s replies, any translations you request, and detected language mistakes. Voice messages are transcribed and the text is stored; the original audio recording is not retained.
Over time the tutor builds a lightweight profile of your learning patterns: estimated level, interests you mention, recurring mistakes, and topics you have discussed. This profile is used exclusively to improve tutoring quality.
If you report a content error (e.g. a wrong translation), we store your report along with any notes you add.
If you use the text-scanning feature, the app accesses your camera or photo library to capture an image. Text is extracted on-device; images themselves are not uploaded or stored. The extracted text may be sent to our servers for translation.
We log aggregate usage data to manage costs and enforce rate limits. These logs are only accessible to administrators and are not shared externally.
We do not use any third-party analytics, crash-reporting, or advertising SDKs.
We do not sell your data, use it for advertising, or share it for third-party AI model training.
For users in the European Union or European Economic Area, our lawful basis for processing your personal data is the performance of our contract with you (Article 6(1)(b) GDPR) — namely the delivery of the language-learning service you signed up for. We also rely on our legitimate interest (Article 6(1)(f) GDPR) in preventing abuse of the service for security and rate-limiting logs. We do not process your data on the basis of consent for analytics or advertising, because we do not run analytics or advertising.
To deliver core features we share limited data with service providers in the categories listed below. Only the minimum data required is transmitted. Under their respective terms of service, these providers do not use your data for their own purposes, including model training.
Your account information, learning progress, and content are stored in a hosted database. Authentication tokens and session data are managed by our authentication provider.
To power the AI tutor, we send your chat messages, conversation context, and a summary of your learning profile to AI service providers. These providers process your data under API terms of service and do not use it to train their models.
When you use voice input, your audio recording is sent to a speech-recognition provider for transcription. The audio is processed in real time and is not retained by the provider.
Words and sentences are sent to a text-to-speech provider to generate pronunciation audio. Only the text content is transmitted.
The app is served through a cloud hosting provider. Standard web server logs (IP address, user agent, request path) may be collected by the host under their privacy policy.
If you sign in with Apple or Google, authentication is handled by their respective identity services. We receive only the email address and name you authorise.
Some sub-processors are located outside the EU/EEA, primarily in the United States. Where required, transfers rely on Standard Contractual Clauses (SCCs) provided by each vendor’s data processing agreement. We can provide a current list of our sub-processors on request — contact us at the address in section 10.
All data is transmitted over encrypted connections. Access controls ensure each user can only access their own data. All API requests require authentication, and administrative access is restricted to authorised personnel.
You can:
If you are located in the EU/EEA, you may also have rights under the GDPR including the right to access, rectification, erasure, and data portability.
Trufie is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you are based in the European Economic Area, the United Kingdom, or Switzerland, you must be at least 16 years old to create an account. If you believe a person under 16 has provided us with personal data, please contact us so we can delete it.
We may update this policy from time to time. If we make material changes, we will notify users through the app. The "last updated" date at the top of this page reflects the most recent revision.
For privacy-related questions or data requests, contact us at privacy@trufie.app.