Privacy policy

What this covers

This policy explains what Credolay Ltd (“Credolay”, “we”) collects when you use the app, why, and what choices you have. It applies to the website and the app at credolay.com.

What we collect

Account details. Your name and email address, through our sign-in provider (Neon Auth), and the language setup you give us: the language you speak, the one you are learning, your goal in your own words, and a stated level.

What you say and write. Your side of every conversation with the coach, your answers in lessons and Recall, and anything you enter or photograph in Phrase Coach. These are sent to an AI model (Azure OpenAI) to produce the coach’s reply, the Replay, the lesson, or language coaching. They are not used to train that model.

How you respond. This is the part that makes Credolay different, so it is stated plainly. For every turn, recall attempt and lesson step, we record timings: how long after the prompt you began responding, how long you took, how many words you produced, how many pauses the speech recogniser saw, whether you were corrected, and the confidence you rated yourself at. These signals are used to estimate your Language Profile. They are stored as rows you can see and download from the Twin page at any time.

Your voice. When you use the microphone, speech is recognised in your browser where it supports that. Where it does not, the audio is sent to our server for transcription and is not kept afterwards. We do not store audio recordings.

Practice activities in the app. Credolay does not use your camera for eye-tracking, does not read wearables, and does not collect any biometric or health data. Phrase Coach uses the camera only for the photograph you choose to take.

What we use it for

• Running the product: the coach, Replay, lessons, Recall, and Phrase Coach.
• Estimating and updating your Language Profile, and setting the difficulty and exercise mix from it.
• Sending a Monday learning summary at 10am UK time: what you did last week, and where to pick up. You can turn this off from the email itself or in Settings.
• Keeping you signed in and your account secure.
• Improving the product, in aggregate. If we ever ask to use your data in a research study, we will ask you specifically, separately, and you can say no without losing anything.

Who we share it with

Our infrastructure providers, under contract, to the extent needed to run the service: Neon (database and sign-in), Microsoft Azure (AI models and speech), Resend (email delivery), and our hosting provider. We do not sell your data, and we do not share your conversations or your signals with advertisers or data brokers.

Your rights

You can download your signal log and Twin from the Twin page. You can delete individual items from your bank. You can ask us to export or delete everything by emailing the address below; we will do so within 30 days. Under UK GDPR you also have the right to correct your data, to object to processing, and to complain to the ICO.

How long we keep it

For as long as you have an account. Conversations, items and signals are kept because the Twin is built from them and would be meaningless without them. Delete your account and all of it goes within 30 days, except what we are legally required to keep.

Cookies

We use a session cookie to keep you signed in and nothing else. No advertising or third-party tracking cookies.

Changes to this policy

If we change what we collect or why, we will update this page and tell you in the app before the change applies.

Contact

Questions about your data: privacy@credolay.com.