This policy explains what data Dialo collects, why, and what you can do about it. It applies to the Dialo iOS app.
Controller:
Voice recordings. When you speak in a conversation, image description, or placement test, your audio is recorded and sent to our servers for transcription and to generate a reply.
Images. Photos you select or capture for the image description exercise are sent to our servers for analysis.
Conversation content. Transcripts of what you said and what Dialo replied, along with any corrections generated.
Account data. [E.g. email address, sign-in identifier, or "Dialo does not require an account" — describe your actual setup.]
Learning data. Target language, level estimates, exercises completed, and progress over time.
Purchase data. Subscription status, provided by Apple. We never receive your payment card details.
Technical data. Device model, iOS version, app version, language settings, crash reports, and general usage events.
Purpose
Legal basis (GDPR Art. 6)
Providing the core features you request
Contract, Art. 6(1)(b)
Estimating your level and tracking progress
Contract, Art. 6(1)(b)
Processing subscriptions
Contract, Art. 6(1)(b)
Diagnosing crashes and keeping the app stable
Legitimate interest, Art. 6(1)(f)
Improving accuracy and quality
[Consent, Art. 6(1)(a) — if you use content for improvement]
Meeting legal and tax obligations
Legal obligation, Art. 6(1)(c)
We do not sell your data and we do not use it for advertising.
To deliver Dialo's features we share data with the following providers, under data processing agreements:
[AI provider, e.g. OpenAI, Anthropic, Google] — [country]. Receives audio, transcripts, and images to generate responses. [State whether they may use it for model training — usually "no" under enterprise/API terms.]
[Speech recognition provider, if separate] — [country]. Receives audio for transcription.
[Hosting provider, e.g. AWS, Hetzner] — [country/region]. Stores and processes data on our behalf.
[Analytics or crash reporting, e.g. Firebase, Sentry] — [country]. Receives technical and usage data.
Apple — handles all purchases and subscriptions under its own privacy policy.
Some processors are located outside the European Economic Area, including in the United States. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You may request a copy of the safeguards in place by writing to smetin.karaduman@gmail.com
Voice recordings: [e.g. deleted immediately after transcription / retained for 30 days]
Images: [e.g. deleted immediately after analysis]
Transcripts and corrections: [e.g. retained while your account is active]
Learning data: retained while your account is active
Crash and usage data: [e.g. 90 days]
Invoicing records: retained as required by law, generally [10 years] under German commercial and tax rules
When you delete your account, associated data is removed within [30 days], except records we are legally required to keep.
Dialo is not directed at children under [16]. We do not knowingly collect data from children under that age. If you believe a child has provided us with data, contact [privacy@dialo.app] and we will delete it.
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Withdrawing consent does not affect processing carried out before the withdrawal.
To exercise any of these rights, write to [privacy@dialo.app]. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In North Rhine-Westphalia this is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW.
Microphone — required to record your speech during exercises.
Camera and photo library — required only when you choose an image for the description exercise.
Notifications — optional, used for practice reminders if you enable them.
You can change any of these at any time in iOS Settings → Dialo.
Data is encrypted in transit using TLS and stored on servers with access limited to personnel who need it. No system is completely secure, but we take reasonable measures to protect your data.
If we make material changes, we will update the date above and notify you in the app before the changes take effect.
smetin.karaduman@gmail.com