1. Data We Collect
- Account information — Your email address, used for login and account management via Supabase Auth.
- Profile data — Name, learning goal, English proficiency level, and subscription plan (free/pro).
- Audio recordings — Speech recorded during practice sessions. Audio is sent to OpenAI Whisper for real-time transcription and is not stored permanently on our servers.
- Usage data — Session scores, streaks, conversation history, vocabulary progress, and fluency metrics.
- Device information — Device type and operating system version, collected for crash reporting and compatibility.
2. How We Use Your Data
- Transcribe and analyse your speech to generate AI-powered feedback
- Track and display your learning progress, scores, and daily streaks
- Personalise practice topics, conversation scenarios, and difficulty levels
- Send local daily streak reminder notifications (no marketing emails)
- Improve our AI models, app features, and user experience
- Manage your subscription and enforce plan limits
3. Third-Party Services
- OpenAI — Your audio is sent to OpenAI's Whisper API for transcription and GPT-4o-mini for conversational feedback. Subject to OpenAI's Privacy Policy.
- Supabase — Authentication and database hosting, powered by AWS (ap-south-1 region). Subject to Supabase's Privacy Policy.
- Render — Backend API server hosting. Subject to Render's Privacy Policy.
- RevenueCat — Subscription management for Google Play. Subject to RevenueCat's Privacy Policy.
- Google Play — Payment processing for in-app subscriptions. Governed by Google's Privacy Policy.
4. Data Retention
- Audio recordings: Processed in real-time and immediately discarded — never stored on our servers.
- Session data (scores, feedback, transcripts): Retained for the duration of your account.
- Account data: Permanently deleted within 30 days of account deletion request.
5. Data Security
- All communication between the app and our servers is encrypted via HTTPS/TLS
- User authentication uses JWT tokens via Supabase — we never see your password
- Database access is restricted to authenticated backend services only
- We do not sell, rent, or share your personal data with advertisers or third parties for marketing
6. Children's Privacy
Bol AI is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child has created an account without parental consent, please contact us immediately and we will delete the account and associated data.
7. Your Rights
- Request a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and all associated data
- Opt out of local push notifications at any time via your device's notification settings
To exercise any of these rights, email us at Contact@getbolai.com. We will respond within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through an in-app notification. Continued use of Bol AI after changes are published constitutes your acceptance of the updated policy.
9. Contact Us
Developer: Ritesh Kumar Singh
Email: Contact@getbolai.com
Country: India
Website: getbolai.com