Privacy policy

What we collect

• Account data: name, email, English level, interests, profession, and native language.
• Conversation data (only with your consent): your session transcripts, corrections, saved vocabulary, practice time, and your Spanish/English ratio.
• Payment data: processed securely by Stripe. We never see or store your card number.
• Basic technical data: the minimum device info needed for the app to work.

Your voice

When you talk with Coral, your audio is processed in real time to turn speech into text, generate the response, and play Coral's voice back.

By default we do not store your audio to train models. Training on your voice is a separate option that stays off unless you explicitly turn it on.

How we use your data

• Personalize your lessons: Coral remembers your progress and adapts to your level.
• Generate your Coral Notes, vocabulary, and progress tracking.
• Improve the product (always with your knowledge).
• Process your payment and provide support.

We don't sell your data and we don't use it for advertising.

Artificial intelligence: what is sent, and to whom

Coral runs on artificial intelligence. For you to hold a conversation, the app sends your voice and the conversation context (your messages, your first name, and your English level) in real time to xAI, the provider of the AI model that listens, understands, and answers with Coral's voice. Without this transmission the conversation cannot exist: it is the engine of the app.

• What is sent: your voice audio during the call, the conversation text, your first name, and your level.
• To whom: xAI (api.x.ai), the voice-model processor.
• What for: solely to generate the live conversation. xAI does not use your conversations to train its models and is contractually bound to a level of protection equivalent to this policy.
• Your permission: the app explains this and asks for your permission at your first sign-in, before your first conversation. You can withdraw storage consent at any time.

Who we share it with

We share the minimum necessary with the providers that make Coral work. Each one only processes what its function requires and provides equivalent protection:

• xAI: the voice AI model that talks with you (see the section above).
• Supabase: database and user accounts.
• Railway: hosting for our server.
• Stripe: payment processing (we never see your full card).
• Sentry: technical crash reports from the app (never the content of your conversations).
• PostHog: anonymous usage metrics (which screens are used, not what you say).

Your consent and control

When you start, we ask permission to store your conversations so Coral can remember your progress. You decide, and you can change your mind anytime from your Profile.

Your rights

These rights are always yours, and exercising them never affects the service you receive:

• Know: request a copy of the data we hold about you, and what we use it for.
• Correct: ask us to fix any of your data that is incomplete or wrong.
• Delete: erase your conversation history from your Profile anytime, or ask us to delete your entire account and all your data.
• Take your data with you: receive your data in a portable, readable format.
• Withdraw consent: turn off conversation storage at any time without losing access to the app.
• No sale of data: we do not sell or share your personal data for advertising: there is nothing you need to "opt out" of.
• No discrimination: you will never receive worse service, pricing, or treatment for exercising these rights.

To exercise them, email [email protected] from your account email. We respond within 45 days (we will let you know if we need an extension). If you live in California, these rights include those granted by the CCPA/CPRA; if your jurisdiction has its own privacy laws, we honor them as well.

How long we keep it

We keep your data while your account is active. When you delete your history or your account, we remove the corresponding data.

Security

We encrypt data in transit (HTTPS) and work with providers that meet recognized security standards. No system is 100% foolproof, but we handle your information with care.

Minors

Coral is intended for adults, or minors under the supervision of a responsible adult. It is not directed at children under 13.

Changes to this policy

We may update this policy. If we make material changes, we'll let you know in the app or by email.

Contact

Questions about your privacy? Email us at [email protected].