The short version:
EngliMate is a free English-learning app published by EXO Studio. You can use it without creating an account.
To power the AI conversation partner, the text you type and the speech you record (converted to text) are sent to our servers and our AI provider to generate replies.
We use Firebase Crashlytics (crash reports) and Firebase Remote Config (app configuration). We do not use third-party analytics or sell your data.
EngliMate shows ads through Google AdMob. On iOS we ask for your permission (App Tracking Transparency) before any tracking for personalized ads — the app works the same if you say no.
You can delete all your data at any time by uninstalling the app, or email us to request deletion of anything stored on our servers.
This Privacy Policy explains how EXO Studio ("EXO Studio", "we", "us", or "our") collects, uses, and shares information when you use the EngliMate — Learn English mobile application ("EngliMate" or the "App"). EXO Studio is the data controller responsible for your information under applicable data-protection laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
This Policy applies to the EngliMate iOS app and is incorporated into our Terms of Service. By using the App, you acknowledge this Policy. If you do not agree, please do not use the App.
EngliMate is designed to collect as little as possible. You do not need to create an account, and we do not ask for your name, email, phone number, or postal address to use the App.
Data
Details
Practice content
The messages you type to the AI partner, and the speech you record during voice practice (which your device converts to text). This content is sent to our servers and AI provider to generate replies and feedback.
Learning preferences
Choices you make during onboarding and in Settings (e.g., your native language, English level, daily goal, chosen persona). These are stored on your device.
Support & reports
If you email us, or use the in-app "Report" action to flag an AI message, we receive the message you send and the content you chose to report.
Data
Purpose & source
Crash & diagnostic data
If the App crashes, Firebase Crashlytics collects a stack trace, device model, operating-system version, and app state to help us fix bugs. It does not identify you.
App configuration data
Firebase Remote Config fetches settings and feature flags. This sends an app-instance identifier and basic device data to Google.
Advertising identifier (IDFA)
Used by Google AdMob to show and measure ads. On iOS, the IDFA is only used for cross-app tracking if you grant permission through the App Tracking Transparency prompt (see Section 5).
Approximate, non-precise data for ads
Ad networks may receive a coarse/truncated IP address and ad-interaction data to serve and measure advertising. We do not collect your precise location.
We do not collect your precise location, contacts, photos, health data, or financial/payment information. EngliMate does not access your camera. The App has no login, so we hold no passwords or social-login profiles.
Purpose
Data used
GDPR legal basis
Provide the AI conversation, feedback, and translation features
Practice content (text & transcribed speech)
Performance of a contract / our legitimate interest in providing the App
Convert your speech to text for practice
Microphone audio (processed by Apple's on-device speech recognition where available)
Consent (microphone & speech permission)
Diagnose crashes and improve stability
Crash & diagnostic data
Legitimate interest
Deliver app configuration and the secure API token
App-instance identifier, device data
Legitimate interest / contract
Show advertising that keeps the App free
Advertising identifier, ad-interaction data
Consent (where required, e.g., ATT / EU consent)
Review reports of inappropriate AI content and keep the App safe
Reported message content you send us
Legitimate interest
Send study reminders you enable
On-device notification scheduling (no data leaves your device)
Consent (notification permission)
We do not use your practice content to build advertising profiles, and we do not sell it.
We use the following Firebase services, provided by Google LLC:
Service
What it does
Data
Firebase Crashlytics
Crash reporting and stability diagnostics
Stack traces, device state, app-instance ID
Firebase Remote Config
Delivers app settings and the rotating API token
App-instance ID, coarse device data
We do not use Firebase Analytics, Firebase Cloud Messaging, or Firebase Performance Monitoring. Learn more: Firebase Privacy & Security.
We display advertisements through Google AdMob. AdMob may collect your advertising identifier (IDFA on iOS, only with your ATT permission), a truncated IP address, and ad-interaction data to deliver and measure ads. Learn more: AdMob & data and Google Ads Privacy.
To generate replies, corrections, and feedback, your practice content is sent over an encrypted connection to our backend service, which uses a third-party large-language-model (AI) provider to produce responses. Your practice content is processed only to provide these features and is not used to serve you ads. We instruct our AI provider not to use your content to train their general models where such controls are available.
Voice practice uses Apple's Speech framework to convert what you say into text. EngliMate requests on-device recognition where your device supports it; in some cases Apple may process audio on its servers to perform recognition. This is governed by Apple's Privacy Policy.
When ads are enabled, EngliMate shows the iOS system prompt asking whether you allow us to track your activity across other companies' apps and websites. We use this permission for personalized advertising. If you decline, you will still see ads, but they will not be personalized using your IDFA, and the App works exactly the same. You can change your choice anytime in Settings → Privacy & Security → Tracking → EngliMate.
Where the GDPR/UK GDPR and ePrivacy rules apply, we (and our ad partners) will ask for your consent before using your device identifier for personalized advertising, and you may withdraw consent at any time.
Sharing advertising identifiers with ad networks for personalized advertising may be considered a "sale" or "sharing" under California law. You may opt out by declining the ATT prompt on iOS, or by emailing exostudio.feedback@gmail.com. We honor opt-out preference signals where required.
We share information only as described here: (a) with service providers who process data on our behalf (Google/Firebase, Google AdMob, our AI backend provider, and hosting providers); (b) to comply with law, a valid legal request, or to protect rights, safety, and the integrity of the App; and (c) in connection with a merger, acquisition, or asset sale, in which case we will notify you. We do not sell your practice content.
Practice content sent for AI processing is retained only as long as needed to provide and secure the feature, and for a short period for abuse-prevention and debugging, after which it is deleted or anonymized.
Crash logs (Crashlytics) are retained up to 90 days by default.
On-device data (settings, saved words/sentences, progress) remains on your device until you delete it or uninstall the App.
Reports you email us are kept as long as needed to investigate and improve safety.
We use industry-standard safeguards, including encryption in transit (HTTPS/TLS) for all communication with our servers, and secure storage of the API token in the iOS Keychain. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to it.
EXO Studio is based in Vietnam, and our service providers (including Google) may process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. By using the App, you understand your information may be processed in countries with different data-protection laws than your own.
You have the right to access, correct, delete, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent. You may also lodge a complaint with your local data-protection authority.
You have the right to know, delete, and correct personal information; to opt out of "sale"/"sharing" (see Section 5.3); to limit the use of sensitive personal information; and to non-discrimination for exercising your rights. We respond within 45 days.
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of targeted advertising.
Because EngliMate has no account, much of your data lives only on your device and can be removed by uninstalling the App. For anything we hold on our servers, email exostudio.feedback@gmail.com and we will verify and respond to your request.
EngliMate is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age required to consent in your country (16 in parts of the EU), please use the App only with the involvement of a parent or guardian. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it within 30 days. Contact us at exostudio.feedback@gmail.com.
EngliMate does not require an account, so you remain in control of your data:
Delete all on-device data: uninstall the App. This removes your settings, saved words and sentences, progress, and consent flags.
Delete server-side data: email exostudio.feedback@gmail.com to request deletion of any practice content retained on our servers. We will action verified requests within 30 days; backups are purged within 90 days.
Turn off tracking: decline or revoke the ATT prompt in iOS Settings.
If you enable study or vocabulary reminders, EngliMate schedules local notifications on your device. These are generated on-device and are not sent through a remote push server, so no data leaves your device to deliver them. You can turn them off anytime in the App's Settings or in iOS Settings.
EngliMate stores your settings and learning data locally using iOS UserDefaults and on-device files (for example, your saved words, saved sentences, personas, and progress). This information stays on your device and is included in your device backups under your control.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the App. Your continued use of EngliMate after changes take effect means you accept the updated Policy.
If you have questions or requests about this Policy or your data, contact:
EXO Studio
Hanoi, Vietnam
Email: exostudio.feedback@gmail.com