Privacy Policy

Introduction

Welcome to Cheevo (“we,” “our,” or “us”). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our language learning platform.

Information We Collect

Personal Information

  • Email address (for authentication)
  • Google account information (if you sign in with Google OAuth)
  • Apple account information (if you sign in with Apple on iOS)
  • Account credentials (encrypted passwords)

Usage Data

  • Lessons you create and interact with
  • Vocabulary cards and flashcard review history
  • Chat messages with our AI tutor
  • Audio recordings (for pronunciation and transcription features)
  • Analytics data (via PostHog) to improve our service

How We Use Your Information

  • To provide and maintain our language learning service
  • To personalize your learning experience using AI-powered features
  • To track your vocabulary learning progress with spaced repetition (FSRS)
  • To improve our platform through analytics and monitoring (Langfuse, PostHog)
  • To communicate with you about your account and our services

Data Storage and Security

Your data is stored in a PostgreSQL database. We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Third-Party Services

We use the following third-party services to operate Cheevo. We only share the minimum data each service needs to function, and we do not sell your data to any third party.

AI & Language Processing

  • Google Gemini AI: Processes your lesson content and chat messages to generate tutoring responses. Google receives the text of your conversation but not your account details.
  • Anthropic Claude: Processes lesson content for certain tutoring tasks. Like Google, it receives lesson text only — not your email, name, or account information.
  • OpenAI: Processes audio for speech synthesis and transcription. Voice recordings are sent for processing and are not retained by OpenAI for training purposes under our API agreement.
  • DeepL: Translates text snippets within lessons. Only the text to be translated is sent — it is not linked or linkable to your account.

Authentication

  • Google OAuth: If you choose to sign in with Google, we receive your name and email from Google to create your account.
  • Apple Sign-In: If you choose to sign in with Apple on iOS, we receive the identifiers Apple provides. You can use Apple’s email relay to keep your real email private.

Payments & Subscriptions

  • Stripe: Processes web subscription payments. Stripe receives your email and payment information. We do not store your card details — they are handled entirely by Stripe.
  • RevenueCat: Manages iOS and Android in-app subscriptions. RevenueCat receives an anonymous app user ID and transaction data from Apple or Google — not your email or personal details.

Storage & Infrastructure

  • Cloudflare R2: Stores your voice recordings and uploaded images. All files are stored under your user ID and are permanently deleted when you delete your account.

Communications

  • Resend: Delivers transactional emails (verification, password reset). Resend receives only your email address and the email content — no other account data.

Analytics & Monitoring

  • PostHog: Collects anonymized usage events (e.g., “lesson started,” “card reviewed”) to help us improve the product. Events are linked to your user ID.
  • Langfuse: Monitors AI quality by logging prompts and responses. Traces include lesson content but are used solely for debugging and improving tutoring quality — not for training AI models.

Each service operates under its own privacy policy. We do not use your personal content to train our own AI models, and our API agreements with AI providers prohibit them from using your data for model training.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Withdraw consent for data processing

To exercise these rights, please visit our Data Deletion page or contact us directly.

Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, all associated data is permanently removed from our systems, including lessons, vocabulary cards, chat messages, voice recordings, and uploaded images.

Children’s Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]

Last Updated: February 20, 2026

Back to my profile