Privacy Policy

Welcome to Gablio. Your privacy is important to us. This Privacy Policy explains how Gablio ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application and related services (collectively, the "Service").

By using Gablio, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

Gablio creates an anonymous session on first launch so you can start learning immediately without signing up. If you later choose to sign in with a social login provider, we may collect:

• Name — as provided by your social login account (Apple or Google)
• Email address — as provided by your social login account
• Profile photo URL — if made available by your social login provider

Learning Data

As you use Gablio, we collect data related to your learning activity, including:

• Selected native and target languages
• Language proficiency level
• Lesson history and completion status
• Exercise results and scores
• Learning paths and grammar progress
• Spaced repetition review data and scheduling
• AI-generated stories and reading history
• Conversational messages with our AI tutor (Chat with Gabi), including AI-generated evaluations and feedback
• Streak data and daily engagement
• XP, levels, daily missions, and achievements
• Words learned and vocabulary progress
• Topic preferences and focus areas
• PDF export history

Device and Technical Information

We may automatically collect:

• Device identifier (anonymized)
• Device type and operating system version
• App version and build number
• Push notification token (for delivering notifications)
• Cumulative app usage time (for in-app review prompts)
• Microphone access status (when you use voice features)
• General usage analytics

2. How We Use Your Information

We use the information we collect to:

• Personalize your learning experience — generate AI-powered lessons tailored to your level, preferences, and progress
• Track your progress — maintain your learning history, streaks, scores, and achievements across devices
• Improve the Service — analyze usage patterns to enhance lesson quality, app performance, and user experience
• Manage your account — authenticate your identity and sync your data across devices
• Process subscriptions — manage premium subscription status and entitlements
• Communicate with you — respond to support requests and send important service updates

3. Third-Party Services

Gablio integrates with the following third-party services to provide and improve the Service:

Authentication

• Supabase Auth — handles user authentication and session management (including anonymous sessions)
• Apple Sign In — social login provider
• Google Sign In — social login provider

Data Storage

• Supabase — cloud database for storing user accounts, learning progress, and lesson data

AI Lesson Generation

• OpenRouter / Google Gemini — AI models used to generate personalized language lessons and power our AI tutor (Chat with Gabi). We send your language preferences, learning context, and conversation messages (not personal identity information) to generate content and responses.

API Processing

• Cloudflare Workers — our API backend processes lesson generation requests and AI tutor conversations. Only learning context and authentication tokens are sent; no personal identity information beyond your user ID is processed.

Subscriptions

• RevenueCat — manages Gablio Pro subscription billing, entitlements, and purchase verification. Payment processing is handled by Apple App Store and Google Play Store; we do not directly access your payment details.

In-App Analytics

• Firebase Analytics — collects anonymized usage data within the mobile app to help us understand feature usage and improve the learning experience.
• Mixpanel — collects anonymized usage data, routed through EU servers (api-eu.mixpanel.com) for GDPR compliance.

You can opt out of in-app analytics at any time from the Settings screen within the app. When opted out, no analytics events are sent to either service.

Advertising

• Google AdMob — displays optional rewarded ads that grant bonus lessons or features. On iOS, we request App Tracking Transparency (ATT) permission before any ad personalization. You can decline without affecting core app functionality.

Push Notifications

• Firebase Cloud Messaging (FCM) — delivers push notifications such as learning reminders and streak alerts. Your device push token is stored securely on our servers. Notifications can be disabled at any time from your device settings.

Translation

• Google Translate — powers the tap-to-translate feature within lessons and conversations. Individual words or phrases you tap are sent to Google Translate for real-time translation.

Voice Features

• On-device speech recognition and text-to-speech — voice input and pronunciation playback are processed entirely on your device using native iOS/Android capabilities. No audio data is sent to our servers or any third party.

Cookies & Tracking

Our marketing website (gablio.com) uses two categories of storage and tracking technologies:

Essential Storage

We use browser localStorage for essential site functionality that does not require your consent:

• Theme preference (gablio-theme) — remembers whether you prefer light or dark mode
• Cookie consent choice (gablio-cookie-consent) — remembers whether you accepted or rejected analytics so we don't ask you again

These are not cookies in the traditional sense, are never sent to our servers, and contain no personal information.

Google Analytics (Opt-In)

With your explicit consent, we load Google Analytics 4 (GA4, measurement ID G-EZC5JKD8K9) to understand how visitors use our marketing site so we can improve it.

• What it collects — anonymized usage data such as page views, referrer, approximate location (country/region), device type, browser, and aggregate session information. Google Analytics also sets its own cookies (e.g. _ga) in your browser.
• When it loads — only after you click "Accept all" on the cookie banner. Before consent, no Google Analytics scripts, requests, or cookies are created.
• If you reject — nothing from Google Analytics ever loads, and the banner will not show again on future visits (your choice is remembered in localStorage).
• How to withdraw consent — clear your browser site data for gablio.com (Settings → Privacy → Clear site data) or clear localStorage.gablio-cookie-consent in DevTools. The cookie banner will reappear on your next visit and you can choose again.
• Google's privacy policy — policies.google.com/privacy

Note: the cookies and tracking technologies described above (Google Analytics 4 with consent banner) apply only to our marketing website. The mobile app uses separate analytics services (Firebase Analytics and Mixpanel) as described in the "In-App Analytics" section above, with an independent opt-out control in the app's Settings.

Analytics

• Vercel Analytics — collects anonymized, cookieless website usage data for our marketing site. Does not require consent as no personal data or cookies are used.
• Google Analytics 4 — loaded only after you opt in via the cookie consent banner. See the "Cookies & Tracking" section above for full details.

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• User data is stored in a secure Supabase-hosted PostgreSQL database with row-level security policies
• All data transmission is encrypted using TLS/SSL
• Authentication tokens are managed securely and expire automatically
• Lesson data is cached locally on your device for offline access using local storage

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• With service providers — the third-party services listed above, solely to operate the Service
• For legal compliance — if required by law, regulation, or legal process
• To protect rights — to enforce our terms, protect our rights, or ensure user safety

6. Your Rights

You have the right to:

• Access your data — request a copy of the personal information we hold about you
• Correct your data — update or correct inaccurate information in your account
• Delete your data — request deletion of your account and associated data. You can do this directly in the app (Settings → Account → Delete Account) or by contacting us at support@gablio.com. See our Data Deletion Policy for full details.
• Withdraw consent — stop using the Service at any time and request data deletion
• Data portability — request your data in a portable format where technically feasible

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement purposes.

8. Children's Privacy

Gablio is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at support@gablio.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Gablio, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the app or on our website. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@gablio.com
• Website: gablio.com