Privacy Policy — AIdioms

1. Who we are and what this policy covers

AIdioms is an English-language learning platform that uses artificial intelligence to generate personalized educational content. The Service is operated by Spelunking Bash Digital Products LLC, a limited liability company organized in the State of New Mexico, United States ("AIdioms", "we", "us", or "our"). We are the controller of the personal information described in this policy.

This policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to our website, applications, and related services. Because we operate from the United States and serve users worldwide, this policy is written to United States practice, with additional rights for users in the European Economic Area (EEA), the United Kingdom, Brazil, and certain U.S. states described in section 10.

Contact: Spelunking Bash Digital Products LLC, 1209 Mountain Road Pl NE, Suite R, Albuquerque, NM 87110, United States — support@aidioms.app.

2. Information we collect

2.1 Information you provide

• Account details: full name and email address;
• Profile details: date of birth, gender, country/postal code;
• Optional details: income bracket and learning interests;
• Learning content you submit: answers, text written in Writing exercises, and voice recordings for Speaking exercises;
• Communications you send us, such as support requests and feedback.

2.2 Information collected automatically

• Usage data: proficiency level per skill, exercise and assessment results, and progress over time;
• Device and connection data: IP address, browser and device type, and general location inferred from IP;
• Cookies and similar technologies needed to keep you signed in and to remember preferences (see section 6).

2.3 Information from third parties

• If you sign in with a third-party provider (for example Google or GitHub), we receive basic profile information from that provider, such as your name and email address;
• If you were referred by another user, we record that referral.

3. How we use your information

• Provide, personalize, and improve the Service, including tailoring content to your level and interests;
• Generate and evaluate lessons, exercises, and pronunciation, fluency, and writing feedback using AI;
• Create and secure your account and authenticate you;
• Communicate with you about the Service, including service and security notices and, where permitted, product updates;
• Determine pedagogical fit for sponsored content without disclosing your identity to sponsors;
• Monitor for, prevent, and address fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our Terms.

We do not use your learning content to build advertising profiles, and we do not use it to train third-party foundation models beyond the processing needed to deliver your requests. We do use limited advertising and measurement technologies to promote the Service and understand which campaigns bring new learners — see section 6.

4. Legal bases (EEA, UK, and Brazil)

If you are in the EEA, the UK, or Brazil, we process your personal information on these bases:

• Performance of a contract — to provide the Service you signed up for;
• Legitimate interests — to secure and improve the Service and prevent abuse, balanced against your rights;
• Consent — for optional information and for processing voice recordings for Speaking exercises; you may withdraw consent at any time;
• Legal obligation — to comply with laws that apply to us.

5. How we share information

We share personal information only as described here:

• Service providers (subprocessors) that process data on our behalf: Supabase (database and authentication), Vercel (hosting), Anthropic and Google (AI content generation and evaluation), Resend (email), and Stripe (payment processing, when live). They receive only what is needed for their function and are bound by contract;
• Advertising and measurement partners — Meta, TikTok, and Google. When you visit our marketing pages or sign up, we send these partners event data (such as a page view, a lead, or a registration) together with a hashed version of your email address and technical data (IP address, user agent) so they can measure and optimize our advertising and, where you have consented, show you or people like you relevant ads. This activity is off by default and runs only where permitted, and only after you accept it where consent is required (see section 6);
• Sponsors receive only aggregated, de-identified campaign metrics — never information that identifies you;
• Legal and safety — when required by law or legal process, or to protect the rights, safety, or property of AIdioms, our users, or the public;
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy;
• With your direction — when you ask us to share information.

We do not sell your personal information for money.Our use of the advertising and measurement partners described above may be considered "sharing" for cross-context behavioral advertising, or a "sale", under some U.S. state privacy laws. Because the Service is not offered to U.S. persons, and because we run this activity only with consent where consent is required, we believe the practical effect is limited; you can still opt out at any time through the cookie controls (section 6) or by contacting us (section 14).

6. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to maintain your session, and local browser storage to remember preferences such as language, theme, and dismissed notices. The Service may not function properly without these.

We also use advertising and measurement technologies from Meta, TikTok, and Google (pixels, tags, and their server-side event APIs) on our marketing pages and sign-up flow, to measure our advertising and reach new learners. Where the law requires prior consent — including the EEA, the UK, and Brazil — these load only after you accept them, and you can change your choice at any time. You can also block or delete cookies in your browser.

7. International data transfers

We are based in the United States, and our providers store and process data in the United States and other countries. When we transfer personal information from the EEA, the UK, or Brazil to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), together with supplementary measures where needed. You can contact us for more information about these safeguards.

8. Data retention

We keep your account information and learning progress while your account is active. Voice recordings for Speaking exercises are processed transiently and are not retained after processing; only the resulting score and text transcript are kept. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements.

9. How we protect information

We use row-level access controls so each user can only access their own data, encryption in transit (HTTPS), access restrictions for our personnel, and provider infrastructure with recognized security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by law.

10. Your rights and choices

10.1 Everyone

You can access and update most account information in your settings, and you can request deletion of your account at any time. To make a request, email support@aidioms.app. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

10.2 EEA, UK, and Brazil

Subject to conditions in the GDPR, UK GDPR, and Brazil's LGPD (Law 13.709/2018), you may have the right to access, correct, delete, restrict, or object to processing, to data portability, to withdraw consent, and to obtain confirmation of processing. You may lodge a complaint with your local supervisory authority — in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD).

10.3 United States (California and similar states)

Depending on your state, you may have the right to know what personal information we collect and how we use and disclose it, to access and delete it, to correct it, and to opt out of "sale" or "sharing" and certain profiling. As noted in section 5, we do not sell or share personal information. You may exercise these rights, or appeal a decision, by emailing support@aidioms.app. An authorized agent may submit a request on your behalf with proof of authorization. California residents may also have rights regarding "shine the light" disclosures.

11. Children's privacy

The Service is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18 (or under the age of majority in your jurisdiction). If we learn that we have collected such information, we will delete the account and associated data. If you believe a minor has provided us information, contact support@aidioms.app.

12. Third-party links and services

The Service may link to or integrate third-party services. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The "Last updated" date above shows the current version.

14. Contact us

Questions about this policy or your personal information, or to exercise your rights: support@aidioms.app.

Spelunking Bash Digital Products LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110
United States