Privacy Policy for Calleo
Last Updated: February 7, 2026
Introduction
Welcome to Calleo, a language learning application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
Information We Collect
Personal Information
When you create an account with Calleo, we collect:
- Email Address: Used for account creation, authentication, and communication
- User ID: A unique identifier automatically generated for authentication and data association
- Password: Stored securely using industry-standard encryption (we never store passwords in plain text)
User-Generated Content
- Vocabulary Sets: Word pairs, translations, set names, and learning preferences you create
- Language Preferences: Your chosen target and native languages for learning
- Practice History: Information about when you last practiced a set and your progress
- App Settings: Theme preferences, UI language, and other customization settings
Automatically Collected Information
- Usage Data: Information about how you interact with the App, including game modes played and features used
- Device Information: Device type, operating system, and app version for troubleshooting and compatibility
- Anonymous Analytics: Aggregated, non-personally identifiable usage statistics to improve the App
Guest Mode
If you use the App without creating an account (Guest Mode):
- No email address or personal information is collected
- Your vocabulary sets are stored locally on your device only
- Data is not synchronized across devices
- Data may be lost if you uninstall the App or clear app data
How We Use Your Information
We use the information we collect to:
- Provide Services: Enable account creation, data synchronization, and app functionality
- Improve User Experience: Personalize your learning experience and remember your preferences
- Generate AI Content: Use OpenAI's API to generate vocabulary suggestions and example sentences based on themes you provide
- Maintain Security: Authenticate users and protect against unauthorized access
- Communicate: Send important updates about the App (we do not send marketing emails without your consent)
- Troubleshoot: Diagnose technical issues and improve app performance
Data Storage and Security
Storage Location
Your data is stored securely using Supabase, a cloud-based database service:
- Location: Data is hosted on secure servers managed by Supabase (powered by AWS infrastructure)
- Encryption: All data is encrypted in transit using HTTPS/TLS protocols
- Access Control: Row-Level Security (RLS) policies ensure you can only access your own data
- Backups: Regular automated backups to prevent data loss
Security Measures
We implement industry-standard security measures including:
- Secure authentication using JWT tokens
- Password hashing using bcrypt or similar algorithms
- HTTPS encryption for all data transmission
- Access logging and monitoring for suspicious activity
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Third-Party Services
Supabase (Database and Authentication)
We use Supabase to store and manage user data:
- Purpose: Cloud database, user authentication, and data synchronization
- Data Shared: Email, user ID, vocabulary sets, practice history
https://supabase.com/privacy
OpenAI API (AI-Powered Features)
We use OpenAI's API to generate vocabulary suggestions and example sentences:
- Purpose: AI-powered content generation for learning materials
- Data Shared: ONLY the themes or topics you request (e.g., "food", "travel")
- Important: We do NOT send your personal information, email, user ID, or existing vocabulary sets to OpenAI
- Data Usage: OpenAI processes requests transiently and does not use your data for model training (as per our API agreement)
https://openai.com/privacy
Expo (Development Platform)
We use Expo for app development and deployment:
- Purpose: App infrastructure and updates
- Data Shared: Minimal crash reports and anonymous usage statistics
https://expo.dev/privacy
Data Sharing and Disclosure
We do NOT sell, rent, or trade your personal information to third parties.
We may share your information only in the following circumstances:
- With Your Consent: When you explicitly choose to share vocabulary sets with other users
- Service Providers: With trusted third-party services (Supabase, OpenAI) as described above
- Legal Requirements: If required by law, court order, or government regulation
- Business Transfers: In the event of a merger, acquisition, or sale of assets (you will be notified)
- Safety and Security: To protect the rights, property, or safety of Calleo, our users, or others
Shared Vocabulary Sets
When you choose to share a vocabulary set:
- A unique share code is generated
- Anyone with the share code can view and copy the set
- Your email and personal information are NOT included in shared sets
- You can view how many times your set has been viewed and copied
- You can stop sharing a set at any time by deleting the share code
Your Rights and Choices
You have the following rights regarding your data:
Access Your Data
You can view all your vocabulary sets and account information within the App
Modify Your Data
Edit or update your vocabulary sets, language preferences, and app settings at any time
Delete Your Data
You can request complete deletion of your account and all associated data:
- In-App Deletion: (coming soon): Navigate to Settings > Account > Delete Account
- Email Request: Contact us at viacheslav@exquizite.app with the subject "Data Deletion Request"
- Include your registered email address
- We will confirm your identity and delete all data within 30 days
- Deletion is permanent and cannot be undone
Export Your Data
To request a copy of your data, contact us at viacheslav@exquizite.app with the subject "Data Export Request"
Guest Mode
If you used Guest Mode, you can delete your local data by:
- Clearing the app's cache and data in your device settings
- Uninstalling the App
Children's Privacy
Calleo is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at viacheslav@exquizite.app, and we will delete such information immediately.
International Data Transfers
Your data may be transferred to and stored on servers located outside your country of residence, including the United States. By using the App, you consent to the transfer of your data to countries that may have different data protection laws than your country.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date at the top of this policy
- Displaying an in-app notification for material changes
- Sending an email notification (if you have an account)
Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. If you delete your account:
- Personal data is deleted within 30 days
- Some data may be retained for legal or security purposes (e.g., to prevent fraud)
- Shared vocabulary sets may remain accessible to users who previously copied them
Your Consent
By using Calleo, you consent to this Privacy Policy and agree to its terms.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
Email: viacheslav@exquizite.app
Developer: Calleo Development Team
Response Time: We aim to respond to all inquiries within 7 business days.
Summary of Key Points
For your convenience, here's a quick summary:
- What we collect: Email, vocabulary sets you create, language preferences
- Why we collect it: To provide learning features, sync across devices, generate AI content
- Where it's stored: Supabase cloud servers (AWS-powered)
- Third parties: Supabase (database), OpenAI (AI generation - no personal data sent)
- Your rights: Access, modify, delete your data anytime
- Contact: viacheslav@exquizite.app
Thank you for trusting Calleo with your language learning journey!