Pričaj — Privacy Policy
Last updated: [PUBLISH DATE]
1. Who is responsible for your data
Pričaj, a sole proprietorship operated by Adem Barifi in the State of Illinois, United States, is responsible for the personal data described here. Contact for any privacy question or request: adembarifi@gmail.com.
2. What we collect
You give us:
- Your email address (to sign you in).
- A display name, your self-declared level, and which variant (Croatian, Bosnian, or Serbian) you are practising.
Created as you use the Service:
- Your spoken audio during a session. This is streamed live to our voice provider for speech recognition. We do not store your raw audio; it is processed in transit by ElevenLabs under their terms.
- Transcripts of your conversations with the tutor.
- Corrections and vocabulary items derived from those transcripts.
- A rolling summary: a short, continually rewritten profile of you as a learner — your name, why you are learning, your interests, people in your life you mention, and your current focus — built up from what you say across sessions.
- Practice records: session length, timestamps, your streak, your credit balance, and your credit purchase and usage history.
Payment data: handled by Stripe. We receive a record that a payment succeeded and for how much. We never receive your full card number.
Analytics: aggregate, cookieless page-view data via Vercel Analytics (which pages are visited, rough performance). It is not tied to your account and does not track you across other sites.
3. Who we send it to, and what they get
We use the following processors to run the Service. We do not sell your personal data and do not share it for advertising.
| Processor | Purpose | What it receives |
|---|---|---|
| ElevenLabs | Real-time voice (speech-to-text, the tutor's voice) | Your live microphone audio. And, at the start of every session, a briefing that includes your display name, level, target grammar, vocabulary due for review, your language variant, and your rolling summary — the rolling summary is sent to ElevenLabs on every session, not only stored by us. |
| Anthropic | (1) Post-session analysis; (2) on-demand translation | (1) After each session: the full conversation transcript plus your previous rolling summary, used to produce your corrections, vocabulary, and a rewritten rolling summary. (2) When you tap the English toggle during practice: the tutor's spoken lines from that session, to translate them. |
| Supabase | Accounts, database | Your email address, display name, level, variant, transcripts, corrections, vocabulary, rolling summary, streak, and credit ledger. |
| Stripe | Payments | Checkout and payment records. Card details go directly to Stripe and never reach us. |
| Vercel | Hosting and analytics | Standard server request data, and the cookieless page-view analytics described above. |
We access these providers through paid API plans and are bound by each provider's terms of service. We use each provider only for the purposes above. Under Anthropic's and ElevenLabs' terms for paid API access, the content we send them is not used to train their models. Supabase, Stripe, and Vercel process data only to provide their infrastructure to us. We do not use your content for advertising, and we do not sell it.
We may also disclose data if required by law, to enforce our Terms, or to protect the rights or safety of users.
4. Where data is processed
Your data is processed in the United States. If you access the Service from outside the US, you understand your data will be transferred to and processed in the US.
5. How long we keep it
- Raw audio: not retained by us. ElevenLabs' retention is governed by their terms.
- Transcripts, corrections, vocabulary, rolling summary, and practice records: kept for as long as your account exists.
- After you ask us to delete your account: the data above is erased within 30 days, and removed from backups within 90 days.
- Billing and transaction records: kept for 6 years to meet tax and accounting obligations, then deleted.
6. Your choices and rights
You can ask us to:
- see the personal data we hold about you;
- correct it;
- delete your account and its data.
To do any of these, email adembarifi@gmail.com from your account's email address. Deletion removes your profile, transcripts, corrections, vocabulary, rolling summary, and session content. Billing records are kept for the period in Section 5. We do not currently offer a self-serve delete button; we handle requests by email.
Depending on where you live you may have additional rights — for example, under the GDPR/UK GDPR (access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority) or under California law (know, delete, correct, and non-discrimination for exercising them). We honour these requests regardless of location. We do not "sell" or "share" personal data as those terms are defined under California law.
7. Children
The Service is for people 18 and older. We do not knowingly collect data from anyone under 18. If you believe a child has used the Service, contact us and we will delete the data.
8. Security
Access to your data is restricted, transmission is encrypted in transit, and database access rules prevent one account from reading another's data. No system is perfectly secure, but we take reasonable measures to protect your information.
9. Changes to this policy
If we change this policy we will update the date above and, where practical, note it in the app. Material changes will be made prominent.
10. Contact
Privacy questions or requests: adembarifi@gmail.com.