Privacy Policy
Last updated: September 25, 2026
This policy explains what Blabu collects, why, who receives it and how you stay in control. We wrote it to be read, not skimmed past.
1. Who we are
Blabu is a speaking-first language learning app for iPhone. In this policy "Blabu", "we" and "us" mean the operator of the Blabu app and blabu.app. You can reach us at support@blabu.app.
2. Voice and text in conversations (OpenAI, USA)
Blabu's conversations are powered by OpenAI, L.L.C., located in the United States. Before your first conversation the app asks for your explicit consent and shows what is sent and to whom. Nothing is sent before you agree.
When you talk with Blabu, your voice audio, the text of what you said and Blabu's replies, the conversation theme and your learning language are sent to OpenAI to recognize speech, generate replies, spoken audio, corrections and meaning subtitles.
OpenAI processes this data on our behalf under its API terms. Under those terms, API data is not used to train OpenAI's models. OpenAI may retain API data for up to 30 days for abuse monitoring before deleting it.
You can withdraw consent at any time in the app settings. Without consent the conversation features do not send any data, and you can still use the parts of the app that do not need them.
3. What else we collect
Account data: an account identifier, and your email address if you sign in with it or with Sign in with Apple.
Learning data: your chosen languages, level, themes, saved words, conversation minutes used and short conversation history needed for word memory.
Analytics events: in-app events such as screen views, conversation started or finished, paywall shown and trial started. They are tied to a random identifier and used to understand and improve the product. We do not use them for third-party advertising.
Crash reports: if the app crashes, a diagnostic report (device model, OS version, app version, stack trace) is sent to Sentry (Functional Software, Inc., USA) so we can fix the problem. We configure it not to include your conversations.
Push notification token: if you allow notifications, Apple gives us a device token so we can send reminders and updates. You can turn notifications off in iOS Settings at any time.
4. Purchases (Apple and RevenueCat)
Subscriptions are sold and billed by Apple through your Apple ID. We never see your card details.
We use RevenueCat, Inc. (USA) to check whether your subscription is active. RevenueCat receives an anonymous app user identifier and Apple's purchase receipts and transaction data.
5. We do not sell your data
We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising. We share data only with the service providers listed in this policy, only as needed to run Blabu, or when required by law.
6. How long we keep data
Account and learning data are kept while your account exists. Conversation audio is not stored on our servers after a reply is generated. Conversation text needed for word memory is kept for up to 12 months or until you delete it.
Analytics events are kept for up to 24 months. Crash reports are kept for up to 90 days. When you delete your account, your personal data is deleted within 30 days, except records we must keep by law (for example tax records of purchases, which Apple holds).
7. Deleting your account
You can permanently delete your account in the app under Settings, Account, Delete account. You can also email support@blabu.app from the address linked to your account. Deleting the account does not cancel an Apple subscription, please cancel it in your Apple ID settings. See blabu.app/delete-account for details.
8. Children and Kids mode
Blabu's AI conversations are intended for users aged 13 and over. Kids mode is a separate space for children aged 7 to 12, meant to be set up by a parent or guardian.
Kids mode runs fully on the device: it uses no cloud AI and no audio is uploaded. Children's voice recordings are not sent to our servers or to OpenAI, and Kids mode does not show ads or collect data for advertising.
If you believe a child has given us personal data without a parent's consent, contact us and we will delete it.
9. Your rights
Depending on where you live (for example under the GDPR or KVKK) you have the right to access, correct, delete or export your data, to object to or restrict processing and to withdraw consent. Write to support@blabu.app and we will respond within 30 days. You can also complain to your local data protection authority.
10. International transfers and security
Our providers are located in the United States. Transfers are protected by the providers' data processing terms, including Standard Contractual Clauses where required. Data is encrypted in transit and access is limited to people who need it.
11. Changes and contact
If we change this policy we will update the date above and, for important changes, tell you in the app. For any privacy question, write to support@blabu.app.
Questions? Write to support@blabu.app.
