Privacy Policy

1. Contact and scope

Contact contact@hellobilvo.com for privacy questions, requests, or support.

This policy covers the Bilvo app distributed through Apple’s App Store, hellobilvo.com, and communications you send to us. Apple and our service providers also publish their own privacy information, linked below.

2. What we do and do not collect

You do not need to create a Bilvo account. We do not require your legal identity, email address, phone number, or postal address to use the app. A name or other profile detail you enter for your local learning experience is not sent to our analytics or purchase providers.

We do not show advertisements, sell personal data, share it for targeted advertising, or use advertising identifiers to track you across other companies’ apps and websites. We do not collect your contacts or precise GPS location.

We do process app usage events and purchase information through PostHog and RevenueCat. These services use technical identifiers and receive network information. Even without your name, those records can be personal data under privacy law; we do not describe them as completely anonymous.

3. Learning data and microphone use

Your learning profile, progress, preferences, saved sentences, notes, and practice answers are stored on your device. App usage analytics are collected separately, as explained below, and do not include the content of your notes, answers, recordings, or transcripts. The app may make selected learning information available to its widgets and Live Activities on the same device.

Microphone access is requested when you choose a recording or spoken-practice feature. Your practice recordings and speech transcripts are processed on the device and are not sent to Bilvo, PostHog, or RevenueCat. Some on-device speech features may need a language resource download from Apple. You can change microphone permission in your iPhone’s Settings.

Practice recordings are temporary. The app is designed to delete them when they are replaced or the recording session is released, or after spoken recall is processed or cancelled. An interrupted session or an unsuccessful cleanup can leave temporary files until the app or operating system removes them. They are not a permanent recording archive. Local data may also be included in device backups according to your Apple settings; we do not operate a cloud backup of your learning content.

4. App analytics — PostHog

We use PostHog’s EU service to collect app usage and interaction data to understand and improve Bilvo. Collection starts automatically. The app currently has no analytics consent prompt or on/off setting.

Analytics includes generated installation and session identifiers and technical information about the app, device, and operating system. PostHog also receives your IP address, which may be used to derive approximate location depending on its settings. We do not request location permission for analytics.

Analytics does not include your name, email address, notes, written answers, audio, or speech transcripts. Session replay is disabled.

Learn more in PostHog’s Privacy Policy.

5. Purchases and subscriptions — Apple and RevenueCat

Apple handles App Store billing. RevenueCat helps validate purchases, determine which features you can access, restore purchases, and understand subscription performance.

RevenueCat processes an automatically generated app user identifier, purchase receipts or transaction information, product identifiers, purchase and renewal dates, subscription status, and information about cancellations, refunds, and entitlements. It can also receive technical app, platform, storefront, and connection information needed to operate the service. RevenueCat may receive updated transaction status from Apple after the app is closed or uninstalled, for example when a subscription renews or is refunded.

We do not send a name or email address to RevenueCat as a customer attribute, and we do not receive your full payment-card number or Apple Account password. Purchase information is still collected even though you do not create a Bilvo account.

See RevenueCat’s Privacy Policy and Apple’s Privacy Policy. Apple also handles App Store and device analytics under its own settings and policies.

6. Website visits and support

The website does not run PostHog, RevenueCat, advertising pixels, or visitor analytics scripts. It does not set analytics or advertising cookies or collect information through account or contact forms. Fonts, images, and video are served with the site.

Cloudflare provides website delivery and security. Serving a page necessarily involves connection information such as an IP address, requested URL, request time, and browser or device headers. Cloudflare may process security and operational logs; this is separate from app usage analytics. See Cloudflare’s Privacy Policy.

If you email us, we receive your email address, your message, and any information or attachments you choose to send. We use them to respond and handle your request, through our email service. Please do not send passwords, payment-card numbers, or unnecessary sensitive information.

Links to the App Store and other external websites take you to services with their own privacy practices.

7. Why information is processed

We use purchase and entitlement information to provide the paid service you request, relying on performance of our contract with you. We process support information to answer your request or fulfil that contract, and otherwise for our legitimate interest in helping users and resolving issues.

Our legitimate interests also include securing the website and purchase service, preventing abuse, and establishing or defending legal claims. We balance those interests against your rights. Information required for legal or accounting obligations is processed to meet those obligations.

PostHog usage analysis and RevenueCat subscription-performance analysis help us understand and improve Bilvo. These are separate purposes from validating a purchase or restoring paid access. They are not used for advertising. Accepting the Terms & Conditions does not by itself give consent to optional analytics.

8. Service providers and international processing

PostHog, RevenueCat, Cloudflare, and our email service process the information needed for the purposes described above. Apple separately operates the App Store and Apple Account services. We may also disclose information when legally required, to protect rights and security, or to professional advisers handling a legal obligation or dispute.

PostHog’s EU hosting does not mean that every provider processes all information only within the European Economic Area. RevenueCat processes customer data in the United States, and providers and their subprocessors may operate in other countries.

The providers publish their processing terms, including international-transfer provisions, in the PostHog Data Processing Agreement and RevenueCat Data Processing Addendum. Where a transfer relies on safeguards such as Standard Contractual Clauses, you may contact us for information or a copy, subject to necessary redactions.

We do not use these records to make decisions with legal or similarly significant effects about you through automated processing.

9. How long information is kept

We keep information only as long as it is needed for the purposes described in this policy, subject to legal obligations. Retention depends on the type of information:

• Local learning data: remains on your device until you remove the relevant content or delete the app’s local data. Offloading an app can retain its documents and data; it is different from deleting the app. Resetting course progress does not delete all notes, bookmarks, or provider records. Backups are controlled through your device and Apple settings.
• Practice audio: is temporary, as described above; it is not uploaded to our analytics or purchase services.
• Usage events: we retain app usage analytics for one year from collection. We use these records to compare usage over time, investigate issues, and evaluate improvements. You can contact us to request deletion.
• Purchase records: are retained as needed to validate or restore access, handle refunds or disputes, prevent fraud, and meet applicable legal obligations. Cancelling a subscription does not automatically erase its transaction history.
• Support correspondence: is kept until the request and any related follow-up are resolved, and longer only where needed for a dispute or legal obligation.
• Hosting and security records: are retained according to the operational and security purpose of the record and the provider’s applicable retention practices.

Deleting Bilvo does not automatically delete information already held by providers. You can request deletion using the contact details below. We may retain information we are legally required to keep and genuinely anonymous aggregate statistics that can no longer be linked to you.

10. Changes and contact

We will update this policy if our processing changes and revise the date above. Material changes will be brought to your attention where required, and where a new purpose requires consent, we will obtain that consent before beginning the new processing. Merely publishing an updated policy does not grant that consent.

For questions or requests, contact contact@hellobilvo.com.