Privacy Policy

Blabu is a speaking-first language learning app for iPhone. In this policy "Blabu", "we" and "us" mean the operator of the Blabu app and blabu.app. You can reach us at support@blabu.app.

Blabu's conversations are powered by OpenAI, L.L.C., located in the United States. Before your first conversation the app asks for your explicit consent and shows what is sent and to whom. Nothing is sent before you agree.

When you talk with Blabu, the following are sent to OpenAI: your voice audio, what you say and type, Blabu's replies, words you look up or search for, your saved words and interests, your goals and level, the conversation theme, and your learning and native languages. OpenAI uses them only to recognize speech, generate replies, spoken audio, corrections and meaning subtitles, and check your progress.

OpenAI processes this data on our behalf under its API terms. Under those terms, API data is not used to train OpenAI's models. OpenAI may retain API data for up to 30 days for abuse monitoring before deleting it. OpenAI is bound by its API terms and data processing addendum to protect this data with the same or equal level of protection as this policy describes.

You can withdraw consent at any time in the app settings. Without consent the conversation features do not send any data, and you can still use the parts of the app that do not need them.

OpenAI is also used, only with a parent's permission, to identify objects in Kids mode Word Hunt photos. Section 9 explains exactly how.

Account data: an account identifier, and your email address if you sign in with it or with Sign in with Apple.

Learning data: your chosen languages, level, goals, interests, themes, saved words and conversation history are stored on your device. Our servers keep only the conversation minutes you have used.

Analytics events: in-app events such as screen views, conversation started or finished, paywall shown and trial started. They are tied to a random identifier and used to understand and improve the product. We do not use them for third-party advertising.

Crash reports: if the app crashes, a diagnostic report (device model, OS version, app version, stack trace) is sent to Sentry (Functional Software, Inc., USA) so we can fix the problem. We configure it not to include your conversations.

Ad measurement: when you use the adult app, the Meta SDK (Meta Platforms, Inc., USA) tells Meta that Blabu was installed and opened, that onboarding and a first conversation were completed, and RevenueCat reports trials and subscriptions to Meta. This lets us see which of our ads lead to installs. It uses a random Meta identifier and your IP address, never your advertising identifier (IDFA), and we do not ask for tracking permission. Nothing about what you say or write is sent. Kids mode never starts the Meta SDK and sends nothing.

Push notification token: if you allow notifications, Apple gives us a device token so we can send reminders and updates. You can turn notifications off in iOS Settings at any time.

Recorded voice: some fixed sentences and words in the app are spoken in a voice generated by fal.ai and ElevenLabs (USA). Only text written by the app, including words found in Word Hunt, is sent, never anything you say or type.

Subscriptions are sold and billed by Apple through your Apple ID. We never see your card details.

We use RevenueCat, Inc. (USA) to check whether your subscription is active. RevenueCat receives an anonymous app user identifier and Apple's purchase receipts and transaction data.

We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising. We share data only with the service providers listed in this policy, only as needed to run Blabu, or when required by law.

Account data and your conversation minutes are kept while your account exists. Conversation audio and text are not stored on our servers: your conversation history and saved words stay on your device until you delete them.

Analytics events are kept for up to 24 months. Crash reports are kept for up to 90 days. When you delete your account, your personal data is deleted within 30 days, except records we must keep by law (for example tax records of purchases, which Apple holds).

You can permanently delete your account in the app under Settings, Account, Delete account. You can also email support@blabu.app from the address linked to your account. Deleting the account does not cancel an Apple subscription, please cancel it in your Apple ID settings. See blabu.app/delete-account for details.

Blabu's AI conversations are intended for users aged 13 and over. Kids mode is a separate space for children aged 7 to 12, meant to be set up by a parent or guardian.

Kids mode speech runs on the device: children's voice is recognized on the device and no audio is uploaded. Children's voice recordings are not sent to our servers or to OpenAI, and Kids mode does not show ads or collect data for advertising. The only Kids mode feature that uses a cloud service is Word Hunt, and only with a parent's permission, as described in section 9.

If you believe a child has given us personal data without a parent's consent, contact us and we will delete it.

Word Hunt lets a child point the camera at an object and learn its word. It works only after a parent grants permission behind the device passcode or Face ID. The parent can withdraw this permission at any time in the Kids parent settings, and Word Hunt then stops sending photos.

When the child taps "Find the word", the app sends one photo frame of the object (cropped, at most 512 pixels, JPEG) to Blabu servers. Our servers forward it to OpenAI, L.L.C. (USA) solely to identify the object and return the word, a translation, an emoji and a short sentence.

Blabu servers do not store or log the photo or the result. OpenAI is called with storage disabled. Under OpenAI's API terms, API data is not used to train its models, and it may be retained for up to 30 days for abuse monitoring.

The model is instructed not to identify or describe people. Photos that show people, unsafe items or documents return no word.

Found words are stored only on the device. Our servers keep only anonymous daily counters (a one-way hash of the day and a random account identifier, together with a count) to limit usage, plus our total daily spend.

Kids mode has no ads, no analytics and no crash reporting. We do not track children and we do not sell any data. Parents can write to support@blabu.app with any question or request.

Depending on where you live (for example under the GDPR or KVKK) you have the right to access, correct, delete or export your data, to object to or restrict processing and to withdraw consent. Write to support@blabu.app and we will respond within 30 days. You can also complain to your local data protection authority.

Our providers are located in the United States. Transfers are protected by the providers' data processing terms, including Standard Contractual Clauses where required. Data is encrypted in transit and access is limited to people who need it.

If we change this policy we will update the date above and, for important changes, tell you in the app. For any privacy question, write to support@blabu.app.