Privacy Policy

Effective date: 29 April 2026. Last updated: 29 April 2026.

FluencyFlow ("we", "our", "us") helps people practise spoken languages by connecting them with partners for short voice conversations. This policy explains what we collect, why, and the choices you have. Questions: fluencyflow2251@gmail.com.

1. Information we collect

• Account details — name, email, password (hashed), gender. You provide these at signup.
• Profile data — display name, partner ratings you receive, streak count, XP, lesson progress.
• Connections — friend requests, friends list, blocked users, chat messages you send.
• Calls and rooms — start/end times, duration, who you matched with. We do not record or store the audio of your calls. Voice is streamed peer-to-peer between participants.
• Device and technical data — IP address, device type, OS version, app version. Used for security, abuse prevention, and crash diagnostics only.
• Reports — if you report another user, we keep the report and the context (chat message, call session id) so we can review it.

2. How we use your information

• To match you with practice partners.
• To run your account, friends list, ratings, and progress.
• To enforce our rules — investigate reports, block abusive users, prevent fraud.
• To respond to your support requests.
• To improve the app — diagnose crashes, fix bugs, plan features.

We do not sell your personal information, and we do not use it for advertising or share it with advertisers.

3. Third parties we share data with

• Google (Sign in with Google) — only the basic profile info you authorise (name, email, profile picture).
• Google Cloud Platform — our servers run on GCP. Account data and database backups are stored on their infrastructure.
• Crash reporting — we may send anonymised crash diagnostics to a service like Sentry to find bugs.

We do not share data with anyone else unless required by law (court order, legal process) or to protect users from imminent harm.

4. Children

FluencyFlow is for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has signed up, contact us and we will delete the account. Users in the EU and UK must be 16 or older without verifiable parental consent.

5. Voice calls and rooms

Voice in 1-on-1 calls and group rooms is streamed directly between participants over WebRTC. We help establish the connection (signaling) and may relay traffic via TURN servers when direct peer-to-peer fails, but we do not record, store, transcribe, or analyse the audio.

6. Your rights

• Access — see what we hold about you. Email us.
• Correction — fix anything wrong from inside the app or by emailing us.
• Deletion — delete your account and all associated data from inside the app (Settings → Delete Account) or by visiting our account deletion page.
• Portability — request a copy of your account data by email.
• Withdraw consent — stop using the app and request deletion at any time.

If you are in the EU/UK you have rights under GDPR; if you are in India you have rights under the Digital Personal Data Protection Act, 2023. Email us to exercise any of them.

7. Data retention

We keep account data while your account is active. When you delete your account, we remove your profile, friends, ratings, chat history, and call history within 30 days. We may keep limited records longer where required by law (for example, abuse reports tied to legal complaints).

8. Security

Connections to our servers use HTTPS/TLS. Passwords are stored hashed (bcrypt). No system is perfectly secure — please use a strong, unique password and enable device-level protections.

9. Changes to this policy

We may update this policy as the app evolves. The "Last updated" date at the top reflects the most recent change. Material changes will be announced inside the app.

10. Contact

For privacy questions, data requests, or anything else: fluencyflow2251@gmail.com.