Privacy

What Luvani keeps about you, why it keeps it, how long it stays, and what you can ask us to do with it.

Who we are

Luvani is made by Vision Strategies Ltd, registered in the UK.

This notice covers the Luvani app and nothing else.

What Luvani keeps

Your email, your name and which sign-in you used. There is no account without them.

Your answer to the age question. It is a gate rather than a detail we file: the app asks once, and Luvani is for learners of thirteen and over.

What you have learned. Your history, your review deck, the phrases you keep, your missions and your sound checks. It sits on your phone, and on our server for an account that syncs.

Your saved conversations. After a session the app keeps a short summary with the phrases and corrections worth practising. The conversation itself, turn by turn, is never part of it.

Your plan and the speaking time you have used, so a session is billed once.

Your speech

Raw audio of you speaking is never stored. No file, no bucket, no table, no log line. It exists while it is in flight, and then it is gone.

That is a fact about how the app is built rather than a promise about how we behave. Nothing tees a session to storage, the server reads a pronunciation attempt into memory and answers with observations, and the phone keeps nothing once it has the answer.

Words are the same rule. What you say is turned into text so the tutor can answer, the session reads that text and drops it, and what survives is the curated summary described above.

The tutor's own lines are the one exception, and they are not yours. They are synthesised once and kept as audio, so a voice service is paid once for a sentence it has already said.

Who else sees it

A live conversation needs services we pay for. One carries the audio, one turns speech into text, one gives the tutor its voice, and one scores a pronunciation attempt. Another is the language model: it reads what you said as text and writes the reply the tutor speaks, so your words are read rather than only carried.

The language model is sent what you said, the turns already taken in the same session, the situation you are practising, your name where you gave one, and a short note of your level and the things to watch for in your French. It writes the tutor's answer from that. When a new situation is set up for you, the language model is also sent a few things you have told the tutor about yourself, which it remembers so it can bring them up next time, and the titles of the last few situations you practised, which it wrote itself, so the next one is not a repeat. Your email and which sign-in you used are never part of it.

What you say reaches these services during a session, so the tutor can answer you. The language model hears from us once more after a session ends: that session's turns go back to it, together with the things already on file about you, so it can pick out the phrases worth practising and note anything new worth remembering. Nothing more about that session reaches any of them after that.

Paying for Luvani brings in another company, and it hears none of your French. It takes the payment and tells the app what was bought, so what you paid for is there for you and can be put back on a new phone. What it is told is which account bought what. No audio, no words you said and nothing you are learning goes to it.

The server this notice calls ours runs on computers we rent. The database that keeps your account and your learning is run for us by a company we pay for exactly that, and the counters that hold cost and abuse in check sit with another, under a scrambled marker rather than your name. They hold what is described above so that we can, and nothing else is sent to them.

What any of these companies keeps on its own side is theirs to answer and is not something we have checked, which is why this notice says what each one does for us and stops there.

Nothing is sold. Nothing about you goes to a company for any purpose other than the ones above: carrying a conversation, answering you, keeping what you have learned, and taking a payment. Not to an advertiser, not to a data broker, not to anyone who would put it to a use of their own.

There is no advertising identifier anywhere in Luvani, and no third party analytics kit inside the app. Both are absent on purpose.

Usage data, and your choice

Luvani can record five plain events, such as a situation being finished. They carry no free text and nothing you said, and two separate checks refuse anything that is not on that short list.

They are off unless you turn them on. The switch is in Settings, you can change it whenever you like, and nothing in the app works differently either way.

Turning the switch off stops anything new being recorded. It does not reach backwards: deleting your account is what removes what was recorded before.

Keeping one free trial honest

When a free trial is claimed, our server keeps two scrambled markers for the installation it was claimed on. They are what stops one installation claiming the same free trial twice.

They are made by hashing with a secret only our server holds. They are not an advertising identifier, not a device fingerprint, not your email and not your account. Nothing about your learning and nothing you said is attached to them.

They are kept for two years and then deleted. They stay when an account is deleted, on purpose: a free trial that resets by signing up again is not a free trial.

How long we keep things

Your account, your learning and your saved conversations stay for as long as your account does.

Usage events are kept for thirteen months. The record of speaking time per session is kept for two years, and so are the trial markers.

Counters that hold cost and abuse in check expire on their own, within a day at most.

Deleting your account removes what is tied to it sooner than any of these.

Your rights

Download my data writes a file with your account details, every row we hold for you on our server, and everything the app keeps for you on this phone. There is no audio and no transcript in it, because neither is stored.

Delete account removes your account and, with it, your learning, your usage events, your entitlement, your speaking time records and your saved conversations. On this phone it erases every key kept for your account.

Two things of ours are kept on purpose: the trial markers above, and the random installation id they are made from. Neither carries learning, content, or anything that names you.

Paying for Luvani also leaves a record with the company that took the payment, and deleting your Luvani account does not reach it. What stays with them is which account bought what. No audio, no words you said and nothing you are learning is part of it.

We can tell you what deletion does. We cannot yet tell you it has been watched happen: the server side has not been run against a live database, and the erase on the phone has not been run on a real build. So this describes the mechanism rather than calling it verified.

Age

Luvani is for learners of thirteen and over. The app asks once, in plain words, and takes the answer.

If somebody says during a conversation that they are under thirteen, the session ends and this phone remembers that until the age question is answered again.

Keeping conversations safe

Some things a language app should not answer. Code reads what was said before the tutor sees it, and either steps in with a plain sentence or ends the session. It is a fixed set of rules rather than a judgement made by a model.

Nobody is watching a session. Luvani is not an emergency service and no message reaches a person, so anyone in trouble should talk to somebody they trust or call their local emergency number.

When that boundary acts, our server writes one line saying which rule it was. Your words are not in it.

Changes to this notice

This notice ships inside the app, so what you are reading here matches the version you are running. When it changes, it changes with an update, and the same words go up at the address in our App Store listing.

A reviewed privacy policy and terms are still required before release.