Privacy Notice
Aura coder · LanguageTutor
Effective 23 October 2026
Who controls your data
Aura coder is the data controller for personal data processed to operate LanguageTutor. This notice covers account, learning and support data. Paddle separately processes payment data as Merchant of Record under its own privacy notice.
Data we collect and why
Account data includes name, email, authentication information and language-learning preferences. We use it to create and secure accounts and personalise lessons. Learning data includes messages, transcripts, saved words, correction history, pronunciation word-match results, lesson progress and practice statistics; it supports tutoring and saved progress. Subscription identifiers, status and usage counters administer access. Support messages, problem reports and hearing mismatch reports help investigate issues. Technical data such as IP address, device/browser information and operational logs helps deliver the service, prevent abuse and diagnose faults.
Microphone audio
Microphone access requires your permission. Audio is sent to ElevenLabs for speech-to-text with an explicit speaking language. We do not store learner recordings in our database or file storage. Hear-yourself playback remains in device memory for that session and is discarded when the session ends. Confirmed transcripts and any hearing reports may be retained as learning or support data. Tutor-generated speech may be cached separately; it is not a recording of your voice.
Legal bases
We process account, lesson and subscription data to perform our contract with you. Security, service reliability and support processing rely on legitimate interests, balanced against your rights. Optional microphone access and reminder emails rely on consent, which you may withdraw through device permissions or reminder settings/unsubscribe. Records needed for legal or regulatory obligations are processed on that basis.
Who receives data
Lovable Cloud provides hosting, authentication and data storage; AI and speech providers, including ElevenLabs, process the text or audio needed for tutoring and transcription. Providers of operational analytics or support tooling may process relevant technical or support data when used to operate the service. Paddle receives data needed for product sales, subscription management, payments, tax compliance and invoicing. Card details are entered in Paddle’s checkout and never pass through our servers. Relevant information may also be shared with professional legal or accounting advisers, or authorities where required by law. We do not sell your personal data.
Retention
Account and saved learning data are retained while your account is active so you can resume learning. Session-only learner audio lasts only for the session. Support and security records are retained only while needed to resolve issues and protect the service. Following an account-deletion request, data no longer needed is deleted or anonymised, subject to necessary legal, fraud-prevention and dispute records; backup copies may persist until the backup cycle expires. Required financial records follow applicable statutory retention periods, with Paddle retaining its own payment records. We do not promise a fixed deletion deadline that has not been established.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent without affecting prior lawful processing. You may complain to your local data-protection authority. UK/EEA users have these GDPR rights and ordinarily receive a response within one month, subject to lawful extensions. Requests may require identity verification. Contact Aura coder using the seller contact details on our Contact page; a direct privacy contact address has not yet been supplied.
Security and international processing
We use appropriate technical and organisational safeguards, including encrypted connections, authenticated access and owner-scoped data-access controls. Secret credentials remain server-side. No service can guarantee absolute security. Our providers may process data internationally. Where UK/EEA transfer rules apply, legally required safeguards such as adequacy decisions or Standard Contractual Clauses must apply; this notice does not claim that a particular provider contract or transfer arrangement has been independently verified.
Cookies and device storage
Essential cookies and browser storage support sign-in, security and saved preferences such as voice settings. Blocking essential storage may prevent sign-in or disrupt the service. We do not use this notice as consent for optional analytics or marketing cookies; such cookies require any legally required choice before use. Manage cookies through your browser and microphone access through device settings.