Monolo

Privacy Policy

Last updated: 18 August 2026

[Company name] (“we”, “us”) operates the language-learning app Monolo (the “App”). This policy explains what information the App handles and why. Everything below reflects how the App is actually built.

1. Who we are

2. What we collect

2-1. Account information

You sign in with Apple or Google only. We never receive or store a password. From your identity provider we receive:

• your email address (if you use Apple’s Hide My Email, this is the relay address);
• which provider you used (Apple or Google) and the user ID that provider assigns to you.

2-2. Profile

• Nickname (optional)
• Contact email address (optional; you enter this in Settings, and it is kept separately from your sign-in account)
• Learning language and native language
• Level (CEFR-equivalent; both the estimate produced by each round of feedback and any level you set yourself)
• Playback speed for spoken audio
• Whether reminders are on, and the reminder time
• Practice streak and the date you last practiced

2-3. Learning data

• Transcripts of what you say
• AI feedback: suggested rewrites, their translation into your native language, explanations, and difficulty tags
• Level assessments (scores for vocabulary diversity, sentence complexity, and grammatical accuracy, plus the estimated level)
• Words per minute (word count ÷ recording seconds × 60), recording length, and topic
• Phrases you save to My List, with their translations, explanations, spoken audio, review counts, recall counts, and the time you last reviewed them
• Practice session records (counts and durations used for your reports)

2-4. Usage counts

To enforce the daily limits (3 rounds of feedback and 20 generated audio clips), we record a count per user, per day, per feature.

2-5. Subscription information

• Subscription state, plan type, expiry date, and last update time, as reported to us by RevenueCat.

We never receive your card number or any other payment details. Payment is handled by Apple’s App Store.

2-6. Push notification token

Only if notifications are enabled on your device, we store the token used to deliver push notifications (an Expo push token). We do not request it on devices where notifications are off.

2-7. What we do not collect

The App does not collect:

• location, contacts, camera, or photos;
• advertising identifiers (such as the IDFA), or any tracking for advertising purposes;
• behavioural or usage analytics — the App contains no analytics SDK and no crash-reporting SDK.

The only permissions the App requests are the microphone, for recording, and notifications, which are optional.

3. How recordings are handled

We do not store your audio recordings on our servers.

• Recordings are written to temporary storage on your device. They are never uploaded to our storage, and the database field that once held audio locations (speaking_sessions.audio_url) was removed in August 2026.
• To produce a transcript, the recording is sent to OpenAI’s speech recognition API (Whisper) at the moment transcription runs. What comes back is text and the length of the audio.
• Temporary files on your device are removed along with the App’s data when you delete the App.

4. What we store, and for how long

4-1. Exceptions to these retention periods

Despite the periods above, we may keep information for longer where the law requires us to retain it, or where retention is necessary to deal with a billing or refund dispute or to establish, exercise, or defend a legal claim. Any such retention is limited to what is necessary and to how long it is necessary, and we delete the information once that purpose has been met.

Deleted data may also remain in routine backups until those backups are overwritten in the normal course of operation.

5. Third parties we send data to

We send information to the following providers in order to run the App. All of them are based in the United States, so this involves transferring data outside Japan.

OpenAI states that data submitted through its API is not used to train its models. For details of how each provider handles data, please see their own privacy policies.

We do not send your information to any other third party. We share nothing with advertising networks or analytics providers.

6. Why we use your information

• To provide the App’s features: transcription, feedback, level assessment, text-to-speech, and review
• To show your history and reports, and to determine your level automatically
• To authenticate you and manage your account
• To provide paid plans and determine subscription status
• To enforce daily usage limits
• To send reminders and level-up notifications
• To respond to your enquiries

7. Closing your account and deleting your data

You can delete your account at any time from Settings › Account in the App. Deletion happens immediately; there is no grace period.

7-1. What is deleted

• Your authentication account and profile, including nickname, contact email, learning settings, and push token
• Transcripts, AI feedback, level assessments, and practice records
• Every phrase saved to My List
• Usage counts
• Generated audio files that no other user references
• Personally identifying attributes held by RevenueCat — email address, display name, phone number, and IP address. These are cleared as part of deletion.

7-2. What remains

To record that a deletion took place, we retain an anonymised deletion log containing only:

• a hash of your user ID (SHA-256; the original ID cannot be recovered and is not retained);
• the time of deletion;
• your plan at that moment (trialing, active, cancelled, or none);
• whether auto-renewal was on at that moment;
• the version of the warning text shown to you and what you consented to.

This log contains nothing that identifies you — no email address, no nickname, no provider user ID. We keep it so that, if a billing or refund question arises later, we can establish what a user agreed to before deletion.

Your subscriber record at RevenueCat itself is retained for revenue reporting, with the attributes above cleared.

7-3. Deletion and billing

Deleting your account does not cancel your subscription. There is no way for an app to cancel an App Store subscription on your behalf, so you must turn off auto-renewal yourself, from Settings › your Apple ID › Subscriptions on your device.

8. Security

• All communication is encrypted (HTTPS).
• The database enforces row-level security, so you can only read and write your own data.
• Subscription fields can only be written by the server process that receives notifications from our payment provider; the App cannot change them.
• Usage limits are enforced on the server.

9. Where the service is offered

Monolo is not offered in the member states of the European Economic Area, in the United Kingdom, or in Switzerland, and it is not intended for use from those regions.

10. Age restriction

Monolo is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If we learn that we have collected such information, we will delete it promptly.

If the law of the country or region where you live sets a higher age below which a parent or guardian must consent to your use of a service like this one, or to the handling of your personal information, please use Monolo only with that consent.

11. Your rights

Depending on the laws of the country or region where you live, you may have the right to request access to, correction of, restriction of the use of, or deletion of the personal information we hold about you. To make such a request, please contact us using the details in section 14.

You can also delete your account and all of your learning data yourself, immediately and at any time, from within the App, as described in section 7.

We may need to verify your identity before acting on a request. Because we store no passwords and sign-in works only through Apple or Google, we may ask you to write to us from the account you registered with.

12. If you live in California

This section applies in addition to the rest of this policy where the California Consumer Privacy Act, as amended by the CPRA, applies to you.

12-1. Categories of personal information we collect

• Identifiers (email address, the user ID assigned by your identity provider, and your in-app user ID)
• Commercial information (subscription state, plan, and expiry date)
• Audio and similar sensory information (transcripts of what you say; the recordings themselves are sent for transcription only and are not stored)
• Inferences (the level we estimate from your speech)

We collect this from you directly and from the providers listed in section 5. Our purposes are set out in section 6, the parties we disclose to in section 5, and our retention periods in section 4.

12-2. Sale and sharing

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the preceding 12 months. The same is true of the personal information of anyone under 16.

12-3. Sensitive personal information

We do not use voice data to identify anyone biometrically. We do not use or disclose sensitive personal information for any purpose that would give rise to a right to limit its use.

12-4. Exercising your rights

California residents have the right to know, to delete, to correct, and not to be treated differently for exercising those rights. To exercise them, contact us using the details in section 14. You may also submit a request through an authorised agent. We may need to verify that you are who you say you are, or that an agent is genuinely authorised, before we act.

13. Changes to this policy

We may change this policy. If we make a significant change, we will post it on this page and, where appropriate, notify you in the App.

14. Contact