Privacy Policy

Information We Collect

We collect the following categories of personal information when you use the Service:

Account Information

When you create an account, we collect your email address, full name, and a securely hashed version of your password. We never store your password in plain text. This information is necessary to authenticate your identity and provide access to the Service.

Payment Information

If you subscribe to a paid tier (Flavor+ or STU Bundle), your payment information is collected and processed directly by Stripe, our third-party payment processor. We receive a tokenized reference to your payment method and basic transaction details (such as subscription status and billing dates) but do not receive, access, or store your full credit card number, CVV, or bank account details.

Audio Recordings

When you use voice features of the Service, audio is recorded through your browser's MediaRecorder API. Audio recording occurs only when you explicitly initiate it (for example, by pressing the microphone button). We do not record audio passively or in the background. Audio data handling is described in detail in Section 2.

Learning Progress Data

We collect data related to your learning activity, including lessons completed, scores received, vocabulary mastery levels, streak history, conversation transcripts, and session timestamps. This data is used to power the spaced repetition system, track your progress, generate certificates of completion, and improve your learning experience.

Device and Usage Information

We may collect basic technical information such as browser type, device type, and general usage patterns (for example, session frequency and duration) to maintain and improve the Service. We do not use third-party analytics or tracking services.

Audio Data Processing

Audio is a central component of the Savor Languages learning experience. Here is exactly how your audio data is handled:

• Capture:Audio is recorded locally on your device using the browser's MediaRecorder API. Recording begins only when you explicitly press the microphone button and stops when you release it or the recording period ends.
• Transcription:Recorded audio is transmitted to OpenAI's Whisper API for speech-to-text transcription. The audio is processed in real time. Neither OpenAI nor Savor Languages permanently stores the raw audio data after transcription is complete.
• Voice Synthesis: Text content from lessons (such as example phrases and vocabulary) is sent to ElevenLabs for text-to-speech voice synthesis, enabling you to hear native-quality pronunciation of target language content. Your personal audio is not sent to ElevenLabs.
• Disposal: Audio data is processed in real time and discarded immediately after transcription. We do not maintain a permanent archive of your voice recordings. The resulting text transcript may be retained as part of your learning progress data.

AI Processing and Conversation Data

The Service uses Anthropic's Claude API to power interactive conversation practice, provide real-time language feedback, score your responses, and generate personalized lesson content. When you engage in conversation exercises, the text of your messages and relevant lesson context is sent to Anthropic's servers for processing.

Anthropic does not use your conversation data to train its AI models. Your interactions are processed under Anthropic's API terms, which prohibit the use of API inputs and outputs for model training purposes.

We may retain conversation transcripts as part of your learning progress to enable features such as correction review and progress tracking. You may request deletion of your conversation history at any time by contacting [email protected].

Cookies and Local Storage

The Service uses localStorage in your browser to maintain authentication session tokens. These tokens are necessary for you to remain logged in between visits and are essential to the functioning of the Service.

We do not use third-party tracking cookies. We do not use advertising cookies. We do not employ third-party analytics platforms that track your behavior across other websites.

You may clear your localStorage at any time through your browser settings. Doing so will log you out of the Service, requiring you to sign in again.

Data Sharing and Third-Party Service Providers

We share your personal information only with the third-party service providers necessary to operate the Service. We never sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

Our third-party service providers and the data they receive include:

• Stripe: Payment information for subscription billing. Stripe is PCI-DSS Level 1 compliant.
• OpenAI (Whisper): Audio data for speech-to-text transcription. Processed in real time and not retained.
• Anthropic (Claude): Conversation text and lesson context for AI-powered language practice and feedback. Not used for model training.
• ElevenLabs: Lesson text content for text-to-speech voice synthesis. Does not receive your personal audio recordings.

We may also disclose your information if required to do so by law, in response to a valid legal process (such as a subpoena or court order), or to protect the rights, property, or safety of Savor Languages, our users, or the public.

Data Retention

We retain your account information and learning progress data for as long as your account remains active, or as needed to provide the Service to you. If you request account deletion, we will delete your personal data within thirty (30) days, except where we are required by law to retain certain information for a longer period.

Audio recordings are discarded immediately after real-time processing and are not permanently stored. Text transcripts derived from your audio may be retained as part of your learning progress data and are subject to the same deletion procedures as other account data.

Payment records and transaction history may be retained for up to seven (7) years after your last transaction as required for tax, accounting, and legal compliance purposes.

Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal information.
• Deletion: You may request that we delete your account and all associated personal data. We will process deletion requests within thirty (30) days.
• Data Portability: You may request an export of your learning progress data in a machine-readable format.
• Withdrawal of Consent: You may withdraw consent for audio recording at any time by revoking microphone permissions in your browser settings. Note that this will limit your ability to use voice-based features.

To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) days.

Children's Privacy

The Service is not intended for use by individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete such information promptly.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at [email protected] so that we can take appropriate action.

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you are entitled to additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your personal data include:

• Contract Performance: Processing your account information and learning data is necessary to provide the Service you have requested.
• Consent: Audio recording and transmission to third-party APIs is based on your explicit consent, which you may withdraw at any time.
• Legitimate Interest: We may process basic usage data to maintain, secure, and improve the Service.

European users have the additional right to lodge a complaint with their local data protection supervisory authority. To exercise your GDPR rights or to inquire about cross-border data transfers, please contact us at [email protected].

CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Specifically:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• No Sale of Personal Information: We do not sell your personal information as defined under the CCPA. We do not share your information with third parties for their direct marketing purposes.

To exercise your CCPA rights, please contact us at [email protected]. We will verify your identity before processing any request and respond within forty-five (45) days.

Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure password hashing, and access controls limiting data access to authorized personnel.

However, no method of electronic storage or transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you become aware of any security breach affecting your account, please contact us immediately at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice on the Service at least fifteen (15) days before the changes take effect. The "Last updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: