Privacy Policy
Last updated: August 22, 2026
Introduction
OraliAI Inc. ("Orali," "we," "our," or "us") provides an AI-powered language-learning app and related websites and services. This Privacy Policy explains what personal data we collect, how we collect and use it, who receives it, how long we keep it, and the choices available to you.
Voice and AI processing
When you use a voice lesson or another AI feature, Orali sends the data needed to provide that feature to third-party AI service providers. This can include your audio, transcript, lesson and language settings, relevant conversation history, and text you ask us to translate, explain, or speak. Our AI service providers are Google LLC, through its Gemini API, and OpenRouter, Inc. OpenRouter may route a request to the selected underlying model provider, including Google.
We ask for your permission in the app before sending this personal data to an AI service provider. Orali does not sell your audio, use raw lesson audio for advertising, or use it to train Orali's own AI models.
Information we collect
Information you provide directly
- Account and contact information: your email address, display name, account identifier, authentication information, and any information you include when contacting support or joining a waitlist.
- Learning profile: the language you are learning, your proficiency, goals, interests, age range, preferred lesson style, correction preferences, daily practice target, voice choice, and other onboarding answers.
- Learning content: prompts, messages, saved words and revision cards, lesson feedback, profile image, and other content you submit or save.
- Support and survey information: messages, ratings, feedback, and any information you choose to send us.
Audio and lesson information
- Audio: the voice audio you provide while the microphone is active or when you submit a recorded response.
- Transcripts and lesson records: transcriptions of your speech, conversation history, AI responses, corrections, pronunciation feedback, translations, summaries, lesson results, and progress.
- Lesson context: your selected language, proficiency, lesson topic, tutor instructions, voice selection, and relevant prior turns needed to continue the lesson.
Audio is collected from your device microphone only after you grant iOS microphone permission and begin a feature that uses speech. Orali does not store raw lesson audio in its application database after the requested processing is complete. Audio may be buffered temporarily on your device, in transit, and in server memory while the feature is operating. Our AI providers may retain limited service data according to their agreements, security requirements, and applicable law.
Information collected automatically
- Usage and learning activity: features used, lesson starts and completions, session duration, progress, paywall activity, subscription status, and interactions with the app or website.
- Device and network data: device and operating-system information, app version, browser type, IP address, timestamps, diagnostics, crash information, and similar technical data.
- Purchase information: subscription product, entitlement, renewal, and transaction status from Apple and our subscription provider. Orali does not receive your full payment-card details.
- Cookies and similar technologies: identifiers and events used to keep our website working, understand usage, prevent fraud, and, where permitted, measure marketing performance.
How we use information
We use personal data to:
- create and secure your account and authenticate you;
- operate voice lessons and AI features, including speech processing, conversation, translation, text-to-speech, feedback, and summaries;
- personalize lessons, remember preferences, track progress, and create revision activities;
- process subscriptions and provide paid features;
- provide support, respond to requests, and send service communications;
- analyze reliability and product usage, troubleshoot problems, and improve the safety and performance of Orali;
- measure marketing performance and send marketing communications where you have consented or where otherwise permitted by law; and
- prevent abuse, enforce our terms, and comply with legal obligations.
Who receives personal data
We do not sell personal data. We disclose it to the following service providers only as needed for the purposes described below:
Google LLC — AI services
Receives audio, transcripts, prompts, conversation and lesson context, and text submitted for translation, speech generation, feedback, or summaries through the Gemini API.
OpenRouter, Inc. — AI routing
Receives audio, transcripts, prompts, conversation and lesson context, and speech-generation input for AI lesson features. OpenRouter routes requests to the selected model provider, which may include Google.
Supabase, Inc. — account and data infrastructure
Processes account identifiers, authentication data, profile and learning information, transcripts, progress, saved content, and generated lesson assets for authentication, database, and storage services.
Railway Corp. — hosting
Processes app requests, IP addresses, technical logs, and AI session traffic while hosting Orali's API and live-session infrastructure.
PostHog, Inc. — product analytics
Processes account identifiers, email and display name, learning-profile attributes, app events, and device and usage information so we can understand and improve the product.
RevenueCat, Inc. — subscriptions
Processes your account identifier, email and display name, subscription and entitlement status, and selected learning-profile attributes to manage purchases, paywalls, and subscription attribution.
Meta Platforms, Inc. — measurement
May receive app events and device or attribution information for campaign measurement, subject to your device settings, consent, and applicable law.
Apple and Google — platform services
Process sign-in or App Store purchase information when you choose their authentication, payment, or platform services.
We require every service provider that receives personal data from Orali to provide the same or equivalent protection described in this Policy, process the data only for authorized purposes, apply appropriate security, and comply with applicable privacy law. We do not authorize these providers to sell your personal data or use it for their own advertising.
We may also disclose information if required by law, to protect rights and safety, with your direction or consent, or as part of a merger, financing, acquisition, or sale of assets. If ownership changes, this Policy continues to apply unless you are notified otherwise.
Data retention and deletion
- Raw lesson audio:Orali uses it transiently to provide the requested voice feature and does not retain it in Orali's application database after processing is complete.
- Account and learning data: we generally retain your account, profile, transcripts, lesson results, progress, and saved content while your account is active so that your learning history remains available.
- Analytics and transaction records: we retain these only as reasonably needed for product analysis, fraud prevention, accounting, dispute resolution, and legal compliance.
If you delete your account or make a verified deletion request, we delete or de-identify personal data that we control unless retention is required for security, fraud prevention, legal compliance, or the establishment or defense of legal claims. Residual copies may remain for a limited period in protected backups and service-provider systems before being overwritten under normal retention schedules.
Your choices and rights
- AI data-sharing consent: you can decline the in-app request. If you decline, Orali will not send your personal data to its AI providers, but voice lessons and other AI-dependent features will not work.
- Withdraw permission: you can stop using voice features, disable microphone access in iOS Settings, and contact us to withdraw consent for future AI processing. Withdrawal does not affect processing that occurred before it.
- Account deletion:you can delete your account from the app's Settings screen or request deletion by email.
- Privacy requests: depending on where you live, you may request access, correction, deletion, or a portable copy of personal data, or object to or restrict certain processing.
- Marketing: you can unsubscribe using the link in a marketing email or contact us.
To make a request, email us at jayson@orali.ai. We may need to verify your identity before completing a request.
Data security
We use administrative, technical, and organizational safeguards designed to protect personal data, including encrypted network connections, access controls, and authenticated account access. No transmission or storage system can be guaranteed to be completely secure.
Children's privacy
Orali is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data, contact us so we can investigate and delete it.
International transfers
Orali and its providers may process personal data in the United States and other countries whose laws may differ from those where you live. Where required, we use appropriate contractual and legal safeguards for these transfers.
Changes to this Policy
We may update this Policy as our services or legal obligations change. We will post the updated version here and revise the date above. If a change materially affects how we use personal data, we will provide additional notice or request consent where required.
Contact us
For questions, privacy requests, or concerns about this Policy, contact:
OraliAI Inc.
Email: jayson@orali.ai