(1) Account: social login (Google/Apple) identifier and email. (2) Profile: name (nickname), birth year, gender/preference, native and learning languages, bio, interests, exchange styles, photos, residence country and active city. Photos taken with the in-app camera are stored with a "taken in app" marker. (3) Location: city/country and the time it was confirmed, derived from GPS reverse-geocoding or an IP lookup — **we do not store raw GPS coordinates**. (4) Device identifier (duplicate-account deterrence). (5) Usage: swipes, matches, chat messages, media and voice notes, language corrections, reports. (6) Billing (only if you subscribe to Pro): Stripe customer/subscription identifiers on the web; store, product, purchase-receipt identifiers and expiration time in the apps; plus subscription status and translation usage counts. Card numbers are handled by Stripe, Apple, or Google and never held by us.

We process data to provide matching, safety operations (reports, blocking, duplicate-account handling, suspension), chat and notifications, and service improvement. Bases include performance of our contract to provide the service, legitimate interests in safety and fraud prevention, and your consent for sensitive features like location and camera. Profiles and photos are shown to other signed-in users for matching. To improve the service and its language AI, we may also collect and use the language corrections you send (original → corrected text and notes) in an anonymized form. This data contains no personal information — no name, photo, location, or account identifier, only the language pair and text — and stops immediately if you turn off "Contribute learning data" in your profile settings (on by default).

Data is stored in Google Firebase (Firestore, Storage, Authentication; Seoul region asia-northeast3). **Chat translation (important):** When you tap the 🌐 translate button, that message and **up to 6 preceding messages** from the conversation are sent — via our Cloud Functions — to an external AI translation provider (DeepSeek models accessed through CometAPI). The surrounding messages are included because context is what makes the translation read naturally. Translation does not run on your device. If you prefer not to share message content with the provider, simply do not use the translate button. **Location:** Your connecting IP address may be sent to IP geolocation services (ipwho.is, Cloudflare) to estimate your city. **Billing:** For a web Pro subscription, your email and subscription details are sent to Stripe to process payment. Apple or Google processes iOS and Android Pro purchases, and our server validates store purchase-receipt identifiers and product information to confirm subscription entitlement. As a U.S. company, we may transfer and process data internationally, including in the U.S., and you consent to this by registering.

Profiles and photos are visible to other users for matching. Sensitive data such as FCM tokens and device identifiers is isolated so only you can access it. We do not sell personal data; we share it only with the processors listed below, as required by law, or as necessary for safety and fraud prevention. · Google (Firebase) — storage, authentication, push, server execution · CometAPI / DeepSeek — chat translation (the message you asked us to translate, plus its context) · Stripe — web Pro subscription payments · Apple App Store and Google Play — app Pro subscription payments and entitlement confirmation · ipwho.is, Cloudflare — IP geolocation to estimate your city · Google Analytics — usage analytics (**only if you consent**; see section 6)

We retain your information while your account is active. You can delete your account at any time via "Delete account" in your profile. Upon deletion, your account is immediately deactivated (no further sign-in), your profile is no longer shown to other members, and all your matches are closed. Data associated with the deleted account (profile, photos, matches, chat messages, chat media, voice notes, swipes, blocks, device identifiers) is retained for 90 days from deletion for fraud prevention and dispute resolution, and is then automatically and permanently erased from our servers. This erasure is irreversible. Exceptions, retained minimally, are items we must keep by law and safety/anti-fraud report records (reports filed against you).

**Strictly necessary (no consent needed):** keeping you signed in (Firebase auth tokens), the Firestore data cache, the service-worker cache for offline use, and storing your language and consent choices. These are required to run the service and cannot be declined; clearing them in your browser signs you out. **Optional — usage analytics (only with your consent):** if you consent, we load Google Analytics (GA4) to measure how the product is used — screens visited, matching, chat, and translation activity. This stores `_ga`-family cookies and sends Google your member ID (Firebase uid) along with your native and learning languages, gender, residence country and active city, and subscription tier. Your name, photos, email, and chat content are never sent. **We do not load GA before you consent.** We ask with a banner on your first visit, and declining does not limit any feature. You can change the choice any time under Profile → "Allow usage analytics"; turning it off stops collection immediately and deletes the analytics cookies already stored. The legal basis is your consent, and withdrawing it does not affect processing carried out beforehand. We do not use advertising cookies or third-party ad/tracking pixels.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your data. California residents have rights under the CCPA; EEA/UK residents under the GDPR. You can withdraw location, camera, and notification permissions anytime in device settings (some features may be limited). To exercise rights, contact [email protected].

The service is not directed to anyone under 18 and we do not knowingly collect their data. If we learn we have collected a minor’s data, we delete it promptly.

mAI Depot, Inc. 2810 N Church St, Suite 4523, Wilmington, Delaware 19802, USA Privacy contact: [email protected]