Elixir Lab ("we", "us", or "our") operates the Elixir mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
1. INFORMATION WE COLLECT
1.1. Account Information
When you create an account, we collect:
- Your name and email address (provided by Google Sign-In or Apple Sign-In)
- A unique user identifier
- Your preferred native language and target learning language(s)
1.2. Usage Data
We automatically collect information about how you interact with the App:
- Lesson progress and completion data
- Dictionary words and learning statistics
- Chat conversation history with the AI tutor
- App feature usage patterns and screen interactions
- Subscription status (Free or Pro)
1.3. Device Information
We may collect:
- Device type, operating system, and version
- Unique device identifiers
- Push notification tokens (Firebase Cloud Messaging)
- App version
1.4. Audio Data
When you use the speech features:
- Voice recordings are sent to our servers and processed by our self-hosted speech-to-text (STT) service (operated on infrastructure we control) to convert your speech into text
- Text-to-speech (TTS) is used to generate audio responses from text on our self-hosted TTS service
- Audio is processed in real time for the requested feature and is not permanently stored on our servers for STT/TTS processing
- We do not send voice recordings to OpenAI or other third-party AI providers for STT/TTS
1.5. Payment Information
We do not collect or store your payment information directly. All payment processing is handled by:
- Apple App Store (for iOS users)
- Google Play Store (for Android users)
We receive only subscription status confirmation (active, expired, cancelled) from these platforms.
2. HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Provide, maintain, and improve the App
- Generate personalized AI-powered language lessons based on your level and progress
- Track your learning progress and adapt lesson difficulty
- Manage your dictionary and vocabulary tracking
- Process and verify subscription status
- Send push notifications and practice reminders (with your consent)
- Analyze usage patterns to improve the App experience
- Communicate with you about updates or changes to the Service
- Detect and prevent fraud or abuse
3. AI DATA PROCESSING AND THIRD-PARTY AI
3.1. Third-party AI provider
We use OpenAI (OpenAI, L.L.C. and its affiliates) as a third-party AI service provider. The mobile app does not connect to OpenAI directly; our backend sends data to OpenAI’s API only after you have been informed and have given permission in the app, as described in Section 3.5.
3.2. What data may be sent to OpenAI
When you use AI-powered features, we may send the following categories of data to OpenAI. We send only what is necessary for the feature you use:
- Text you type or submit in chat (practice chat, daily lessons, and related conversations)
- Transcribed text from your voice input (after STT on our servers), when you send a voice message in a lesson
- Context needed for education: your learning and native language settings, lesson topic, lesson progress, and recent messages in the current session (for continuity)
- Your first name or display name (the name you set in the App), when needed so the AI tutor can address you personally in daily lessons and lesson planning
- Words or phrases you request explanations for in the dictionary
- Message content used for grammar checking, word analysis, or lesson planning
We do not send to OpenAI: your email address, Apple/Google account identifiers, payment or subscription card data, or device advertising identifiers. Your name is not sent for features that do not require personalization (for example, grammar checking or dictionary word descriptions).
3.3. How we collect and use AI-related data
- Collection: You provide text and audio when you use chat, lessons, dictionary, and voice features. Language and progress context come from your account settings and in-app activity stored on our servers.
- Use: To generate tutor replies, lesson content, translations, grammar feedback, word descriptions, and to improve the educational experience. OpenAI processes this data on our behalf to return model outputs; we store chat and lesson history on our servers as described in Section 6.
3.4. OpenAI’s data practices
OpenAI provides protection for personal data equivalent to the protections described in this Privacy Policy. We use OpenAI's API, under which OpenAI does not use data submitted via the API to train or improve its models and processes the data solely to return the requested outputs to us. For international transfers we rely on appropriate contractual safeguards (e.g., Standard Contractual Clauses).
OpenAI processes data according to its terms and privacy policy. We configure our use of the API for service delivery. We require that processing for our App is limited to providing the features described above. For details on OpenAI’s handling of API data, see: https://openai.com/policies/privacy-policy and https://openai.com/policies/terms-of-use
We select providers that maintain appropriate technical and organizational measures for personal data. Where required by law, we use contractual safeguards for international transfers.
3.5. Your permission before sharing with third-party AI
Before any of the data categories listed in Section 3.2 is first sent to OpenAI, the App will show you a dedicated disclosure that states: the categories of data that will be sent (as listed in Section 3.2), that the recipient is OpenAI, and how that data is used to provide the App’s AI features. You must tap “Agree” in that disclosure before such sharing begins; if you tap “Not now,” we will not send your data to OpenAI and AI features that require OpenAI will not be available. You may withdraw your consent at any time in the App’s Settings by turning off sharing with OpenAI; if you withdraw, those AI features will not be available until you tap “Agree” again in the same disclosure. Accepting these Terms or this Privacy Policy on the sign-in screen alone is not sufficient for sharing data with OpenAI.
3.6. Aggregated use
We may use AI-processed outputs and aggregated, anonymized statistics that do not identify you to improve lesson quality and the App.
4. DATA SHARING AND DISCLOSURE
4.1. We do not sell your personal information to third parties.
4.2. We may share your information with the following categories of service providers:
- Authentication providers: Google and Apple (for sign-in)
- Cloud infrastructure: For hosting our application backend, database, and data storage
- Third-party AI: OpenAI (for AI-generated lesson content, chat responses, grammar checks, word analysis, and dictionary descriptions)—only after your in-app consent as described in Section 3.5
- Speech processing: Self-hosted STT and TTS services operated by us on our own GPU servers (not third-party AI providers); audio is not shared with OpenAI for speech recognition or synthesis
- Analytics: Firebase Analytics (for usage analytics)
- Push notifications: Firebase Cloud Messaging
4.3. We may disclose your information if required by law, regulation, legal process, or governmental request.
4.4. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. DATA STORAGE AND SECURITY
5.1. Your data is stored on secure servers. We use industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- Encrypted database connections
- SSH key-based server access
- Firewall protection (UFW)
- JWT-based authentication tokens
5.2. Lesson data and chat history are stored in a PostgreSQL database with regular automated backups.
5.3. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. DATA RETENTION
6.1. We retain your personal data for as long as your account is active or as needed to provide you with the Service.
6.2. Chat history and lesson data are retained to maintain your learning progress and context for future lessons.
6.3. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
6.4. Aggregated, anonymized data may be retained indefinitely for analytical purposes.
7. YOUR RIGHTS
Depending on your jurisdiction, you may have the following rights:
7.1. Access: Request a copy of the personal data we hold about you.
7.2. Correction: Request correction of inaccurate or incomplete data.
7.3. Deletion: Request deletion of your personal data ("right to be forgotten").
7.4. Portability: Request your data in a structured, machine-readable format.
7.5. Objection: Object to certain processing of your personal data.
7.6. Withdraw Consent: Withdraw consent for push notifications or other optional data processing at any time through the App's settings or your device settings.
To exercise any of these rights, please contact us at social@elixirlab.io.
8. CHILDREN'S PRIVACY
8.1. The App is not intended for children under 13 years of age.
8.2. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information.
9. PUSH NOTIFICATIONS
9.1. With your consent, we send push notifications for:
- Practice reminders at your preferred times
- Important updates about the App
9.2. You can manage or disable push notifications at any time through:
- The App's notification settings screen
- Your device's system settings
10. COOKIES AND TRACKING
10.1. The App itself does not use cookies.
10.2. Firebase Analytics collects anonymized usage data to help us understand how the App is used. This includes:
- Screen views and feature interactions
- Session duration
- User properties (language preferences, subscription status)
10.3. You can opt out of Firebase Analytics data collection through your device settings.
11. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy within the App
- Updating the "Last Updated" date at the top of this document
Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
13. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: social@elixirlab.io
Website: https://elixirlab.io/feedback_form