Privacy Policy

Last updated 13 September 2026

Tongue-tied stores the learning information needed to run the app. Voice conversations are optional. We do not sell personal data, run advertising or save conversation audio.

Who is responsible

The website and beta requests

This website does not use analytics, advertising trackers or cookies. Vercel hosts the website and may process technical request data such as your IP address, browser, device information, requested page and time of access to deliver and protect the site.

If you join the beta list, we store your email address and signup time in the Tongue-tied Supabase database. We use this information only to manage your beta invitation and participation. The form also contains a hidden field that helps reject automated submissions.

Your account and learning data

If you join the app beta, Tongue-tied uses your email address to create your account. Supabase stores your account, recent conversation transcripts, feedback, vocabulary, notes, settings, practice results and personalised learning profile. A local copy remains on your iPhone for fast loading and offline practice. Each learner can access only their own records. Removing the app removes the local copy but does not delete the account copy.

Speech and audio

The built-in sentences, translations, dictionary entries and grammar notes work offline. Pronunciation uses voices built into iOS. When you choose the microphone for an exercise, the app asks for microphone and speech-recognition permission. Apple speech recognition turns your answer into text and may require online processing. Tongue-tied does not save an audio recording of the exercise.

AI conversation beta

OpenAI processes live audio to provide the optional conversation partner. A protected Tongue-tied service hosted on Vercel starts the conversation and prepares a bounded analysis, but it does not receive the live audio. After a completed conversation, the app sends the transcript through that protected service to OpenAI. The result is used for optional feedback, personalised practice, the next conversation focus and recurring learning notes.

Tongue-tied does not save conversation audio or request stored session recordings. The hosted voice service does not keep its own copy of transcripts or reviews after returning a response. OpenAI may retain API abuse-monitoring data for up to 30 days under its own controls, unless a longer period is legally required. API data is not used to train OpenAI models by default.

Why we process data

• To provide the website, beta access and app under Article 6(1)(b) GDPR.
• With your choice and permission for optional microphone, speech-recognition and AI conversation features under Article 6(1)(a) GDPR where consent is required.
• To keep the website and service secure under our legitimate interests in Article 6(1)(f) GDPR.
• To meet legal obligations under Article 6(1)(c) GDPR.

Service providers

• Vercel hosts this website and Tongue-tied's protected voice service.
• Supabase provides account and database services.
• OpenAI provides the live conversation partner and transcript feedback.
• Apple provides device speech recognition, pronunciation voices and optional on-device translation.

These providers process data under their contracts and privacy terms. Some processing may take place outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework or standard contractual clauses and related safeguards.

How long data is kept

Beta-list details are kept while we manage invitations and for up to six months after the beta ends, unless you ask us to delete them sooner or a legal obligation requires longer. Up to 30 recent conversation transcripts and their learning results are stored in your Tongue-tied account and on your device until you clear the history or delete the account. Other learning data remains until you delete it or delete your account. Providers may retain security logs and backups for their own documented periods.

Your choices and rights

You can clear conversation learning history without removing vocabulary or ordinary notes. You can delete your account and all Tongue-tied account data from the You tab. Contact us if you need a copy of your data or cannot use the in-app deletion control.

Under the GDPR, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, and withdraw consent at any time. Withdrawing consent does not affect earlier lawful processing. You may also complain to a data-protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information.

Children

The private AI conversation beta is for invited adult testers. It is not intended for children.

Changes and contact

If this policy changes, the updated version will appear here with a new date. Questions about privacy or the app can be sent to hassan.madeeha1989@gmail.com.