Privacy Policy — Convo

1. What Convo is

Convo is a Mandarin Chinese learning app for iOS and Android, operated by Wilfred Manyara (“Convo,” “we,” “us,” or “our”). Convo helps beginner to intermediate learners build speaking and listening skills through structured lessons, pronunciation practice, and AI-powered conversation practice.

This Privacy Policy explains what information we collect when you use the Convo mobile app and this website (together, the “Service”), how we use it, who processes it on our behalf, and the choices and rights available to you. It applies to the Convo mobile application and the pages published at wilfredmanyara.com/convo, including this policy and our Terms of Service.

2. Information we collect

We collect the following categories of information:

Account data. When you sign in with Google Sign-In or an email magic link, we collect your name, email address, profile photo (when you sign in with Google), and a user ID that identifies your account in Convo.

Onboarding preferences. During onboarding you tell us your Chinese proficiency level, your motivations for learning, and your interests. We store these preferences to personalize your experience.

Learning data. As you use Convo, we record your lesson activity, your answers, your progress through lessons, pronunciation practice results, the messages you exchange in AI conversations, and your trial and premium status.

Audio. Microphone recordings are captured only when you start a practice activity that requires speaking. This audio is sent to a third-party AI provider to produce a transcription of what you said. The audio itself is not stored on Convo's servers.

Technical data. We collect limited technical information needed to operate and secure the service, such as device type, app version, and error logs.

3. How we use information

We use the information described above to:

• Provide the Service, including creating your account and syncing your progress;
• Personalize lessons and conversation scenarios based on your level, motivations, and interests;
• Generate pronunciation feedback, transcriptions, and AI conversation responses;
• Manage your free trial and premium access;
• Operate, secure, and debug the Service, including investigating errors and preventing misuse.

4. Third-party processors

We use a small number of third-party providers to run Convo. They process personal data on our behalf:

• Supabase — provides authentication, database, and serverless backend hosting for the Service.
• Google — provides Google Sign-In and the AI model we use for transcription and chat, accessed through OpenRouter.
• OpenRouter — an AI model gateway used for conversation chat, scenario generation, and audio transcription.

These providers may process your information in the United States or in other countries where they or their sub-processors operate. See “International transfers” below for more detail.

5. Selling and advertising

We do not sell your personal data. We do not use your personal data for third-party advertising. We share personal data only with the service providers described above, and only as needed to operate the Service, or where required by law.

6. Data retention

We keep account and profile data for as long as your account exists, and delete it when you request account deletion (see “Your rights” below). Audio recordings are not retained by Convo after they have been processed into a transcription. Technical logs are retained only for as long as needed for security and operational purposes, such as investigating errors and abuse.

7. Security

We protect personal data with encryption in transit between the app and our servers, access controls that limit who can reach production data, and secure storage of authentication tokens on your device. No method of transmission or storage is perfectly secure, but we take these measures to reduce risk to your data.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or object to the processing of your personal data, and to request a copy of your data in a portable format. To exercise any of these rights, email [email protected] from the email address associated with your account, or include that address in your request.

Account deletion. To delete your account and the personal data tied to it, send an email to [email protected] with the subject line “Account deletion request” (or a similar clear request) from your account email address. We will confirm receipt, verify the request, and complete deletion within 30 days, unless a longer period is required by law. We may retain limited records where we have a legal obligation to do so.

9. Children

Convo is not intended for children under 13 (or the applicable minimum age in your region). We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

10. International transfers

Convo is operated from Kenya, and our third-party providers — including Supabase, Google, and OpenRouter — may process information in the United States or in other countries. Those countries may have data protection rules that differ from the laws of where you live. By using Convo, you understand that your information may be processed in these locations in accordance with this policy.

11. Changes to this policy

We may update this Privacy Policy as the Service evolves or when the law changes. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you in the app or by email. We encourage you to review this page periodically.

12. Contact us

If you have questions about this Privacy Policy or how Convo handles your information, contact Wilfred Manyara at [email protected].