Valento Apps
Tlumach Privacy Policy
Last updated: 2026-06-09
This Privacy Policy describes how the Tlumach mobile application (the "App") collects, uses, and protects information when you use it. By using Tlumach you agree to the practices described below.
If anything here is unclear, contact us at support@valentoapps.com (or whichever support address is shown in the App's Settings → Contact support screen).
1. Who we are
Tlumach is operated by the publisher of the Google Play listing
com.tlumach.app. References to "we", "our", or "us" mean that publisher.
2. What data we collect
We collect only what is necessary for the App to work and to keep your account secure.
2.1 Data stored on our servers
| Category | What it is | Why we need it |
|---|---|---|
| Account info | Your email address, Google sub identifier (via Google Sign-In), display name from your Google profile, and whether you completed the welcome onboarding. | Authentication and a consistent account experience across devices. |
| Learning paths | Titles, language pairs, CEFR level, and your current stage and topic in our communicative learning plan for each path. | Personalised AI-driven sentence generation and syncing paths when you sign in on a new device. |
| Usage & entitlements | Daily new-sentence count (UTC calendar day), daily review-time allowance, Pro / VIP subscription state, Google Play purchase verification tokens, refund events, and complimentary VIP grants when applicable. | To enforce Free-tier limits, grant Pro access, and prevent duplicate billing. |
| Ephemeral generation context | A capped list of recent practice sentence texts and related learning metadata sent with generation requests (no email, name, or device identifiers). | To avoid repeating similar sentences and to tune difficulty. Not kept as a permanent learner profile. |
| Shared sentence pool | Anonymised sentence lines we may reuse across learners when a suitable line already exists. | Faster delivery and lower generation cost. |
We do not embed a crash-reporting or analytics SDK in the App. Aggregated crash statistics may still appear in Google Play Console on Google's side; we do not receive identifiable crash logs from the App itself.
2.2 Data stored on your device
The App keeps most learning artefacts locally so practice stays fast and works offline where possible. This data is not uploaded to our servers as a permanent library unless described in section 2.1 (for example ephemeral recent sentences during generation).
| Category | What it is | Why we need it |
|---|---|---|
| Saved sentences | Lines you have practised, used for review mode and home statistics. | Replay saved content without re-generating it. |
| Vocabulary & grammar | Word glosses, encounter counts, grammar notes, and mastery flags ("Memories"). | Your personal library on this device. Cleared via Storage → Clear all. |
| Cached audio | MP3 clips for Pro cloud-voice sentences and comfort-language lines you have heard. | Faster replay; safe to delete and re-download. |
| Session & UI prefs | Practice-session snapshot; interface language; audio settings; theme (light / dark / optional pink); UI coach-tour progress; share-stats filters and card style; onboarding flags; practice-reminder metadata per account on this device. | Resume where you left off, personalise the App, and run optional local reminders. |
| Engagement counters | Local tallies for optional Google Play rating prompts (per account on this device). | Ask for feedback only after meaningful practice. |
Multiple accounts on one device: reminder, review-prompt, and onboarding preferences are stored separately per signed-in user.
We do NOT collect:
- precise location,
- device contacts, calendar, photos, or general file access,
- health, fitness, or financial data outside Google Play purchase tokens,
- voice recordings (the App only plays generated audio; it never records),
- the contents of Share your progress messages unless you contact us separately.
2.3 Device permissions and signals (Android)
| Permission / signal | Use |
|---|---|
Notifications (POST_NOTIFICATIONS) |
Optional evening practice reminders; Pro background-playback media controls. |
Boot completed (RECEIVE_BOOT_COMPLETED) |
Reschedule local practice reminders after device restart. |
| Foreground service & wake lock | Keep Pro audio practising when the screen is off. |
| Device time zone | Schedule evening reminders in your local time (on-device only). |
Evening reminders are optional (on by default; disable in Settings → Evening practice nudges). We do not upload your reminder schedule. Delivery is not guaranteed at an exact minute.
2.4 Optional links to third-party sites
Settings may open external pages (for example How Tlumach works, Report problem, the Valento Apps tester programme, or account-deletion forms). Those sites have their own privacy policies.
3. How we use the data
We use the data exclusively to:
- authenticate you,
- personalise the next sentence Tlumach prepares for you,
- enforce Free-tier limits and Pro subscription entitlements,
- verify Google Play purchases,
- show optional UI tips and build Share your progress cards you send via the share sheet,
- schedule optional local evening practice reminders when enabled,
- occasionally show Google Play's in-app review sheet or honour Rate the app in Settings,
- offer Google Play in-app updates when a newer version is available,
- comply with legal obligations.
We do not use your data for advertising, profiling unrelated to language learning, or training third-party AI models on your personal learning history.
4. Where the data lives
| System | Role | Region |
|---|---|---|
| Supabase | Backend database and edge functions (account, paths, entitlements, shared pool). | The Supabase project's configured region. |
| OpenAI | Practice sentence text and Pro cloud text-to-speech. Sentence text only — no account email or name. | OpenAI's processing region. |
| Google Cloud Translation | Comfort-language glosses and translations. Sentence text only. | Google's processing region. |
| Google Play | Billing, Sign-In, In-App Review, In-App Updates, aggregated Play Console diagnostics. | Google's region. |
| Your device | Saved sentences, Memories, cached audio, local notifications, and preferences (sections 2.2–2.3). | Stays on your phone or tablet. |
The App talks to Supabase over HTTPS with row-level security. Free-tier pronunciation uses your device's built-in text-to-speech. Pro may use cloud-synthesised audio (OpenAI TTS via our servers), cached on your device as MP3 files.
5. Sharing your data
We do not sell your data or share it for advertising. Processors acting on our behalf:
- Supabase (storage, authentication, edge functions),
- OpenAI (sentence generation and Pro cloud TTS) — ephemeral sentence text, no personal identifiers,
- Google Cloud Translation (comfort translations) — sentence text only,
- Google (Play Billing, Sign-In, In-App Review, In-App Updates, aggregated Play Console diagnostics).
Share your progress renders on your device; we do not receive what you send. Report problem may open a form or email — we receive only what you submit.
6. Children's privacy
Tlumach is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13.
7. Your rights
You may at any time:
- Access — local breakdown in Settings → Storage on this device; server data via email.
- Correct — edit in the App where possible, or contact us.
- Delete server-side data via Settings → Delete my account now. Local data remains until you clear Storage, use Delete all chats, or uninstall. Does not cancel Google Play subscriptions.
- Clear local storage — remove Saved sentences or Sentence audio by category, or Clear all (includes vocabulary and grammar). Delete all chats removes server paths too.
- Opt out of reminders — Evening practice nudges off or deny notification permission.
- Replay UI tips — Show UI tips again.
- Withdraw consent — uninstall and request account deletion.
Contact support@valentoapps.com.
8. Security
- HTTPS for all network traffic.
- Encryption at rest (Supabase Postgres).
- Google Sign-In (OIDC); we never see your Google password.
- Least-privilege access for backend services.
9. Retention
Server-side account data is removed within 30 days of deletion (purchase audit rows may be kept longer, stripped of personal identifiers). Local data persists until you clear it, delete all chats, or uninstall — account deletion alone does not wipe local caches automatically.
10. Changes to this policy
We may update this policy when the App changes. The "Last updated" date is the source of truth. Significant changes will be announced inside the App.
11. Contact
Questions or complaints? Email support@valentoapps.com.
For partnerships, press, and marketing inquiries: marketing@valentoapps.com.