Privacy
What Kuulo keeps about you, where, and how to get it or delete it. Short version: only what the app needs, only for you, and you can delete all of it yourself at any time.
What we keep
- Your account: your email address, your name if Google gives one, and your passkeys (a public key — never your fingerprint or face).
- Sign-in sessions: when you signed in, the device type and IP address, so you stay signed in and we can stop misuse.
- Your progress: listening log, sound bits, cards, stories, conversation log, weekly checks and settings.
- Your audio: the podcast pieces you turned into lessons, and the voice recordings you make in the app.
- Feedback you send: your message, your email (so we can reply), the page you were on, and — only if you leave "Include details" on — your device type, screen size and the last error.
The app has no ads, no tracking and no analytics. The only cookie is the one that keeps you signed in.
Who can see it
Only you. Every piece of your data is tied to your account, and the app only ever shows your own. There is no feature to look at another person's data or to sign in as them. Your data is not end-to-end encrypted: the person who runs the service could technically read it, but doesn't.
Where it is stored, and who helps
- Cloudflare runs the app and stores your data (database in Western Europe; files in Cloudflare R2). Cloudflare also turns your spoken answers into text (Workers AI); that audio is not kept for that step.
- Resend sends the sign-in emails (your email address and the link), and forwards feedback you send to the person who runs the app.
How long
As long as you have an account. When you delete something in the app (a lesson, a recording, a card, a story), it is deleted from the server too, not only from your phone. Database backups are kept for at most 30 days, so deleted data is fully gone after that.
Your rights
- See and download your data: Me → Account → Download my data.
- Delete everything: Me → Account → Delete account. It happens right away: your files, progress, recordings, feedback, passkeys and account. (A feedback email already sent can't be unsent; ask and it will be deleted.)
- Correct or ask anything: iamnavidev@gmail.com.
Under the GDPR you can also complain to the Swedish data protection authority, IMY (imy.se).