Privacy Policy

1. Who we are

Glot Cast("we", "us") is the controller of the personal data described in this policy. You can contact us any time at [email protected].

2. What we collect

Account data

When you sign in with Google or Apple, we receive a basic identity token containing your email address and a unique account identifier. We use this to create and authenticate your Glot Cast account.

Learning data

We store the data you generate by using the app: the episodes you play, the words you save to your vocabulary, your Leitner box state, and progress markers. This data is what powers your personalized review schedule.

Device & technical data

Like most apps, we receive basic technical information automatically: device type, operating system, app version, language, and crash logs. We use this to keep the app stable and improve performance.

Identifiers

To run the Service securely and to measure how well our marketing works, we receive or generate pseudonymous identifiers — for example, a randomly generated install ID, a subscription identifier issued by the App Store or Google Play, and, only where you have allowed it (such as through Apple's App Tracking Transparency prompt on iOS), your device's advertising identifier. These identifiers are not tied to your real name.

Purchase data

If you buy a subscription or other paid feature, the App Store or Google Play handles the payment itself. We receive a receipt that tells us which plan you bought, when it renews, and whether it is active. We do not receive or store your full payment card details.

Communications

If you email us, we keep your message and contact details so we can reply and follow up. We do not use your email for marketing without your explicit consent.

4. Why we use your data

• To provide the Service — playback, transcripts, vocabulary review;
• To remember your progress across devices;
• To diagnose crashes and improve the app;
• To respond to support requests;
• To comply with legal obligations.

5. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Contract — to provide the Service you signed up for;
• Legitimate interests — to keep the app secure and improve it;
• Consent — for anything optional, where we ask you first;
• Legal obligation — when the law requires us to retain or disclose data.

6. Service providers we work with

We rely on a small number of trusted vendors to operate, secure and improve the Service. They process limited data on our behalf, under contracts that require them to protect it and to use it only for the purpose we specify. The general categories are:

• Cloud hosting, storage and databases — to store your account and learning data;
• Authentication providers (Google, Apple) — to let you sign in;
• Crash reporting and performance monitoring — to diagnose problems and stability issues;
• Product analytics — to understand, in aggregate, how the app is used and where it can be improved;
• Subscription and receipt validation — to confirm and manage paid subscriptions purchased through the App Store or Google Play;
• Marketing measurement (install attribution) — to understand which marketing channel brought you to Glot Cast, in aggregated form.

We never let these partners use your data for their own advertising or sell it to anyone else.

7. Tracking, advertising identifiers and your choices

To measure how effective our marketing is, we may share a limited set of events with the platform we used to advertise Glot Cast — for example, that an install or a subscription occurred. Where the law requires consent for this, we ask first.

• On iOS, Apple shows its App Tracking Transparency prompt the first time we may use your advertising identifier for measurement. You can decline, and you can change your mind any time in Settings → Privacy & Security → Tracking.
• On Android, you can reset or delete your advertising ID, and opt out of personalized advertising, under Settings → Privacy → Ads.

We do not run third-party advertising networks inside Glot Cast, and we do not build cross-app advertising profiles about you.

8. How long we keep your data

We keep account and learning data for as long as your account is active. If you delete your account, we permanently remove your personal data within 30 days, except where we are legally required to retain it (for example, tax or fraud-prevention records).

9. Your rights

You can, at any time:

• Request a copy of the personal data we hold about you;
• Ask us to correct inaccurate data;
• Ask us to delete your account and personal data;
• Object to or restrict certain processing;
• Withdraw any consent you previously gave.

To exercise any of these rights, email [email protected] or visit our account deletion page. We respond within 30 days.

10. California residents

If you live in California, the California Consumer Privacy Act (CCPA/CPRA) gives you additional rights:

• The right to know what personal information we collect, use and disclose;
• The right to delete personal information we hold about you;
• The right to correct inaccurate personal information;
• The right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising — we do not sell your data, and the limited measurement signals we share with marketing partners are described in section 7, but you can still ask us to stop;
• The right not to receive discriminatory treatment for exercising any of these rights.

To exercise any of these rights, email [email protected].

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

12. International transfers

Your data may be processed in countries other than your own. When we transfer data internationally, we use safeguards required by applicable law — for example, the European Commission's Standard Contractual Clauses.

13. Security

We use industry-standard technical and organizational measures to protect your data — encryption in transit, access controls, and least-privilege principles. No system is perfect, but we work hard to keep yours safe.

14. Changes to this policy

If we make material changes, we will notify you in-app or by email before the changes take effect. The latest version will always be available on this page with its effective date.

15. Contact

For any privacy question, write to [email protected].