Privacy Policy

This policy explains what personal data Amiora collects, why we process it, who we share it with, how long we keep it, and the rights you can exercise. It applies to our mobile app, our website, and the services provided to companies whose team members learn with Amiora.

Who we are

Amiora is the controller of the personal data described below. For any privacy question or to exercise your rights, contact us at [email protected].

Data we collect

• Identity and account data. Your email address, name (where provided), and an authentication identifier from our sign-in provider.
• Learning content. The conversation text you write during practice, sentences and words you save, and your progress and review history.
• Tutor memory. If you have Amiora Pro, through a subscription or through your organization, the tutor keeps short notes about you between conversations so it can pick up where you left off: facts you share about yourself, upcoming events, goals, interests, how you like to learn, and mistakes you make often.
• Voice audio. When you speak in a practice session, your audio is sent to a third-party speech-to-text provider to transcribe what you said. We do not store your audio: it is held only in memory for the transcription request and is not written to our databases or file storage. How long each provider retains a request on its own systems is governed by that provider’s terms, which we link under Sub-processors below. We do not use your voice to identify you. The app tells you this and asks you to accept it before your first practice session.
• Subscription data. Your plan and purchase status, handled through our app-store billing provider. We do not receive or store your full card details.
• Product analytics and device data. We record how the product is used (screens viewed, features used) together with basic device and app identifiers. In the mobile app these usage events carry an anonymous per-installation identifier, not your account. The app also sends that identifier to our servers, so the usage events they record are linked to that installation as well as to your account; when analytics is off, the app stops sending it, and current versions also ask our servers to forget it. If you subscribe, our subscription provider sends your purchase and renewal records, including your account identifier, to our analytics provider, linked to this installation’s analytics identifier, so we can measure which version of the app works better for subscribers. Analytics is on by default and you can turn it off at any time in Settings; the setting is remembered and we stop collecting app usage as soon as you do. Turning analytics off removes that link for future purchase records, but they may still be recorded against your account, like other events our servers record. Deleting your account deletes them. Analytics does not record your approximate location.
• Diagnostics. Crash and error reports, with personal data scrubbed before they leave your device or our servers. Our servers also record how long each request takes and which internal steps it ran, with web addresses stripped of their query details and tagged only with an anonymous request reference, never your account.
• Email preferences and marketing email records. Whether you agreed to receive emails about Amiora, when and where you made that choice, and any later unsubscribe. For each marketing email we send you, we record which email it was, when it was sent, whether it was delivered, when your email app first opened it, whether you clicked a link in it, and whether a subscription started soon after. We do not keep a copy of the email itself. We also record whether you are in our follow-up email program and which follow-up emails you were sent or held back from.
• Video playback data received by YouTube. The Watch tab plays videos through YouTube’s official embedded player, so YouTube and Google receive the information any embedded player receives directly from your device. See Video playback through YouTube below.

Why we process it, and our lawful basis

• To provide the service (accounts, practice, progress, tutor memory, voice transcription, subscriptions). Our lawful basis is the performance of our contract with you.
• To keep the service secure and reliable (diagnostics, abuse prevention). Our lawful basis is our legitimate interest in a safe, working product.
• To send you emails about Amiora, at most one a week, with ideas for practicing and news about the app. Where you ticked the box when you created your account, our lawful basis is your consent. Where the box was already ticked for you, which we do only outside the European Economic Area, the United Kingdom and other regions that require an explicit choice, we rely on the rules that let a business email its own customers about its own similar products. Either way, every marketing email has an unsubscribe link, and one click stops them. Unsubscribing never affects the account emails we must send, such as sign-in links and billing notices.
• To understand how the product is used (analytics). Our lawful basis is our legitimate interest in knowing how the product is used, which you can object to at any time by turning analytics off in Settings. On this website, analytics runs only if you accept our cookie banner when you visit from the European Economic Area, the United Kingdom or Switzerland; elsewhere it is on by default and you can turn it off at any time with “Cookie settings” in the footer.
• To answer support requests and improve how well we teach. A small, allow-listed group of our staff can read the practice conversations on an account, to answer a support request, investigate a fault, or judge how well the tutor taught. Our lawful basis is our legitimate interest in a product that teaches well. The analytics setting above does not govern this, because this is not analytics. To object, write to [email protected].
• To improve Amiora’s replies and the product. We use AI tools to review practice conversations, with your name and contact details removed, so the tutor responds better and the product improves. Our lawful basis is our legitimate interest in improving and running the product. To object, write to [email protected].

International transfers

Amiora runs on infrastructure located in the United States, and several of our processors are US-based. Where personal data is transferred outside your country, we rely on appropriate safeguards with the processors listed below, such as the European Commission’s Standard Contractual Clauses or a valid data-transfer framework.

Sub-processors

We rely on the following processors to run Amiora. Each is bound by a data-processing agreement and processes personal data only on our instructions.

• Google Firebase. Authentication and account infrastructure.
• DigitalOcean. Application hosting, database, and file/media storage.
• OpenAI, Groq, and Google (Gemini). AI language and speech processing for practice and transcription. Your conversation text, and your tutor memory notes, are sent to Google (Gemini) or OpenAI to generate Amiora’s replies; your voice recordings are sent to Groq or OpenAI to be turned into text.
• OpenRouter. Routes some AI requests to the provider hosting the model: splitting the tutor’s replies into words for vocabulary, and creating your tutor memory notes when Google (Gemini) is unavailable, through Decart, Sail Research or DeepInfra; and Amiora’s spoken voice when xAI is unavailable, through Microsoft (Azure). In those cases the tutor’s reply text, or your conversation text and notes, pass through it.
• Anthropic. AI tools we use to improve Amiora’s replies and the product.
• xAI. Text-to-speech, used to generate Amiora’s spoken voice from the text of its replies.
• PostHog. Product analytics. In the mobile app, usage events carry only a per-installation identifier. Some events our servers record are tied to your account, and so are the purchase records our subscription provider sends it if you subscribe, as described above.
• Google Analytics. Analytics for this website: which pages are visited, which site or search sent the visit, and which links are followed. It sets cookies to tell visits apart. From the European Economic Area, the United Kingdom or Switzerland it runs only if you accept our cookie banner; elsewhere it runs unless you turn it off. To tell the two apart we set a cookie saying only that your visit comes from outside those regions, based on your connection’s country. Turning analytics off stops it and deletes its cookies.
• Sentry. Crash and error diagnostics, and performance diagnostics for our servers.
• Better Stack. Storage and search of our server logs, which record the requests your device makes to us (including your IP address and an internal account identifier), used to diagnose problems. It also receives our servers’ health metrics, which contain no personal data, and a sample of the server performance diagnostics described under Diagnostics above.
• RevenueCat. Subscription management. It also sends your purchase and renewal records to PostHog, as described above.
• Mailgun. Account and billing email, and the marketing email you agreed to receive. It records delivery, opens, unsubscribes and link clicks for us.

Video playback through YouTube

Videos in the Watch tab are not hosted by us. The app loads YouTube’s official embedded player (the YouTube IFrame Player API, served from www.youtube.com) inside a web view, and the video streams from YouTube to your device.

Because the player talks to YouTube directly, YouTube and Google receive the ordinary information an embedded player receives, without it passing through us: your IP address, your user agent and device/app information, cookies and other storage that YouTube sets or reads in that web view, and playback context such as which video was loaded and what you did with the player. That processing is described in Google’s Privacy Policy.

The app streams these videos only. It does not download or store video or audio on your device, and it provides no offline playback or export.

How long we keep your data

We keep personal data only for as long as we need it for the purpose we collected it for, to meet legal obligations, and to resolve disputes. When you delete your account, we delete or anonymize your personal data on a defined schedule, including copies held by our processors and in routine backups.

Our record of each marketing email is deleted 180 days after the last one we sent you, and delivery details after 90 days. If you unsubscribe, we keep your email address with a note that you opted out, even after you delete your account, so that we never email you again by mistake.

Your rights

You can ask us to:

• access the personal data we hold about you, and receive a copy of it;
• correct data that is inaccurate or incomplete;
• delete your account and personal data;
• restrict or object to certain processing;
• turn website analytics off, or withdraw your consent, at any time (use “Cookie settings” in the footer).

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with your local data-protection authority.

Deleting your account

You can delete your account and the data associated with it. See Account deletion for how.

Changes to this policy

If we make material changes, we will update this page and, where required, ask for your consent again.