Conversetta privacy notice

Notice version mvp-0.12 · 1 November 2026.

Last updated: 9 November 2026

This notice explains what Conversetta collects, why, who else handles it, how long we keep it, and what you can do about it. We have tried to write it so you don't need a lawyer to read it.

1. Who we are

Conversetta is run by Conversetta Khomenko, a sole proprietorship, Seenerstrasse 199, 8405 Winterthur, Switzerland ("we", "us"). We are responsible for your personal data.

2. The short version

3. What we collect

Profile and settings

Examples
Birth year (to confirm you're 18 or over), time zone, language, region, the goals and hard moments you picked, reminder time, display name if you set one
When
Onboarding and settings

Account details

Examples
Email address, or your Apple or Google sign-in ID; a password hash if you use a password
When
Only if you create an account

Progress

Examples
Lessons and scenes finished, XP, streak days and the free chats a streak has earned, skill estimates, review schedule, the direction you chose
When
As you use the app

Practice chats

Examples
What you and the AI character said, the scene, how it went, the feedback you got, your realism and helpfulness ratings
When
Only with AI practice on

Speech features

Examples
Words per minute, filler words and talk time, worked out from the text of what you said
When
Only in voice practice

Missions

Examples
Your plan (when, where, what you'll do), your predictions, your debrief (what happened and what you learned), the coach's reply
When
When you plan or debrief a mission

Coach memory

Examples
Short notes the coach keeps to remember you, which you can view, edit and delete
When
As you use the coach

Check-ins

Examples
Your answers to the self-reflection questions
When
When you do a check-in

Safety events

Examples
That a chat was paused for safety: the level, the kind of concern, where it happened and when. Not what you wrote, unless "Check paused chats" is on (in the EU, the rest of the EEA and the UK you turn it on yourself; elsewhere it starts on)
When
Only if a safety check triggers

Replies you report

Examples
The AI reply you reported, the reason you picked, anything you wrote in the box, and which scene it happened in. Not the rest of the conversation
When
Only when you report a reply

Buddy links

Examples
Who your buddy is, and the events you share with them: mission done (title and level), cheers and nudges
When
Only if you invite or accept a buddy

Purchases

Examples
Whether you have Premium, which plan, when it ends, and weekly and monthly usage counts for the free allowance
When
If you view or buy a plan

Ads (free accounts)

Examples
Which ad was shown and whether you watched it to the end, which we log with ids only. Google's ad code on your phone also reads your device's advertising ID (if you allow it), IP address and device details to choose and measure the ad; Google collects these, we do not receive them
When
When an ad is shown, never with Premium

Consent records

Examples
Which consent you gave or withdrew, the notice version, app version, language and time
When
Each time you choose

Research data

Examples
An anonymous ID, when the app was installed, app version, and events such as "lesson completed" with ids, levels and ratings — including the time you set a reminder for, and that a subscription started, with the plan and whether it began as a free trial. Never free text, transcripts, check-in answers or what a reminder says
When
Only while "Help improve Conversetta" is on (it starts off in the EU, the rest of the EEA and the UK, and on elsewhere)

Performance data

Examples
How long the app took to start and how long a voice reply took, with your platform
When
Only with research data on

Technical data

Examples
IP address, device ID we generate, and request times, used for security and rate limits
When
When the app talks to our server

Website visits

Examples
On conversetta.com we count page views: the day, the page, the site that linked to it, whether it was a phone or a computer, and whether it was your first page that day. To tell that, we briefly mix your IP address and browser type with a random value that changes every day and is never saved. We store no IP address, no ID and no cookie, and can't tell who you are from what we keep
When
When you visit our website

What we don't collect: your contacts, your location beyond the region you pick or your device's region setting, your advertising ID (only Google's ad code reads it, with your permission, and only in the free version), or recordings of your voice.

Voice. In voice practice your phone turns your speech into text, and only that text reaches us. We never receive or store audio, and we never try to read your emotions from your voice. To turn speech into text, your phone uses its built-in speech service: Apple on iPhone, Google (or your phone maker's service) on Android, and your browser's service on the web. That service may send the audio to its servers to transcribe it, under its own privacy terms. You can always type instead of talking.

Running lessons, progress, reminders, missions, buddies

Data
Profile, progress, missions, buddy links
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Performing our contract with you

AI practice, feedback and coach replies

Data
Practice chats, mission text, debriefs, coach memory
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Your explicit consent (you can withdraw it any time; scripted practice still works)

Checking chats for safety and showing support

Data
Chat and debrief text (checked as it happens), safety events
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Your explicit consent to AI practice, and our legitimate interest in protecting you and others; vital interests in an emergency

Checking a paused chat ("Check paused chats")

Data
The paused chat's transcript
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Your consent, given when you allow AI practice (it starts off in the EU, the rest of the EEA and the UK, and on elsewhere; you can change it any time in Privacy)

Confirming you're an adult

Data
Birth year
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Legal obligation and legitimate interest

Subscriptions and the free allowance

Data
Purchase and usage data
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Contract; legal obligation for tax records

Improving the app, developing new features, and research on whether the practice works ("Help improve Conversetta")

Data
Research data, performance data, progress, practice results and scores, and check-in answers, with your name and email removed. Never what you write or say
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Your consent, given when you allow AI practice (it starts off in the EU, the rest of the EEA and the UK, and on elsewhere; switching it off in Privacy stops any further use)

Showing ads in the free version and paying for it

Data
Advertising data, collected by Google (§3), and our log of which ads were shown
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Your consent, through Google's consent form (EU, UK, Switzerland) and Apple's tracking prompt (iPhone). Elsewhere, our legitimate interest in funding the free version, with the choices in §8

Security, fraud and abuse prevention

Data
Technical data
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Legitimate interest

Knowing how many people visit our website and where they came from

Data
Website visits
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Legitimate interest. The counts identify no one

Keeping proof of what you consented to

Data
Consent records
Legal basis (GDPR / UK GDPR; revFADP principles apply in Switzerland)
Legal obligation and legitimate interest

We don't make decisions about you that have legal or similarly significant effects based only on automated processing. The AI's feedback is practice advice, and a safety pause only changes what the app shows you.

5. Who else handles your data

We share data only with the service providers below. All of them work for us under contracts that limit their use to running Conversetta, except Google's ad network, which decides for itself how it uses what its ad code collects, under its own terms.

OpenAI

What they do
Provides the AI models for characters, feedback, coach replies and safety checks
Data
Practice chat text, mission and debrief text, goals you picked. OpenAI doesn't use it to train its models and keeps it for up to 30 days to check for abuse
Where
United States

DeepInfra

What they do
Gives the characters their voices in voice practice: runs the Kokoro speech model on its own servers, and passes requests for the MiMo speech model on to Xiaomi
Data
What the characters say in voice practice. Not your audio or what you typed, though a character's reply can repeat something you said. DeepInfra doesn't store it
Where
United States

Xiaomi

What they do
Provides the MiMo speech model that gives the characters their voices in voice practice, reached through DeepInfra
Data
What the characters say in voice practice, as above. No account details or device identifiers
Where
Possibly China; Xiaomi has not said where its service runs

Convex

What they do
Hosts our database and sign-in
Data
Everything stored with your account. A chat under way is also kept there, in a copy our AI server encrypts first so that Convex cannot read it
Where
European Union (Ireland)

Google Cloud

What they do
Hosts our AI server
Data
Requests in transit; chats in memory for up to an hour
Where
European Union

Cloudflare

What they do
Connects our AI server to our own Phonon voice server in Switzerland
Data
What the characters say and the generated replies as audio, in transit. A character's reply can repeat something you said. Our voice server processes these in memory and does not save the text or audio
Where
Cloudflare's global network; voice generation in Switzerland

RevenueCat

What they do
Manages subscriptions
Data
Your account ID, purchases
Where
United States

Apple, Google

What they do
App stores, payments, sign-in, notifications on your phone, and the phone's speech service in voice practice
Data
Purchases, sign-in ID, audio in voice practice (transcribed by them; not sent to us)
Where
Their own privacy terms apply

Resend

What they do
Sends sign-in emails
Data
Email address
Where
United States

Google AdMob

What they do
Shows ads in the free version and tells our server that a video was watched
Data
Collected by Google's ad code on your phone: advertising ID (if you allow it), IP address, device details, the ad and what you did with it. We send it only a scrambled ID of ours, so that a watched video unlocks a chat for the right account. Never what you write or say, check-in answers, your email or your name
Where
Worldwide; Google's own privacy terms apply

We may also disclose data if the law requires it, or to protect someone's life in an emergency.

Transfers abroad. Some providers are in the United States. We rely on the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, and on standard contractual clauses otherwise, to protect your data there. In voice practice, what the characters say may also be processed by Xiaomi outside Europe and the United States, including in China, and we don't know how long Xiaomi keeps it. We rely on standard contractual clauses for that.

6. The AI

Conversetta's characters and coach are AI. They are not people. We tell you this before your first AI practice and show it in every chat. Read the AI notice for how the AI works, what it can't do, and how safety checks work.

7. How long we keep it

A chat under way: in our AI server's memory, and as an encrypted copy in our database so that a restart of the server does not end it

How long
Up to 1 hour, then gone

Chat transcripts saved to your account

How long
90 days, then deleted automatically. The summary (scene, result, feedback) stays with your progress

Flagged chat shared for safety review (only with your permission)

How long
Until a reviewer closes the item, then deleted. The record of the review (what was flagged and what we did, without the chat) is kept for 3 years

Server logs (IP address, device, request details, never the content of your chats)

How long
30 days

Records of safety incidents and data breaches

How long
3 years

Everything else in your account

How long
Until you delete your account

Replies you report

How long
Until we've looked at the report. After we close it, 12 months, then deleted

Consent records

How long
With your account. If you delete your account, we keep only these choices (what you agreed to or withdrew, the notice version, and when), without your name or email, for 3 years, as proof of what you agreed to

After you delete your account

How long
You're signed out at once. Your data is erased within 30 days (apart from the consent records above), and from backups within 90 days

Research data

How long
13 months (pseudonymous; see §8)

Data used with "Help improve Conversetta"

How long
As long as it is in your account. Anything we take out of the app to study has your name and email removed and is kept for up to 10 years

AI usage records (cost and speed, with a scrambled caller ID)

How long
90 days

Website visit counts (no IP address or ID)

How long
25 months

Our record that a rewarded video was watched (a transaction ID and the time)

How long
24 hours

What Google's ad code collects

How long
By Google, under its own terms; we do not hold it

Records we must keep by law (e.g. tax)

How long
As long as the law requires

Without an account, your progress is only on your phone. Uninstalling the app deletes it.

8. Your choices and rights

In You → Privacy you can:

On iPhone you can also change whether ads may use your advertising ID in Settings → Privacy & Security → Tracking; on Android, in Settings → Privacy → Ads. Premium has no ads.

Reminders are in You → Settings.

In Account you can:

You also have the right to ask us to:

Write to privacy@conversetta.com. We answer within 30 days.

Research data is linked to an anonymous ID, not to your name. To delete it, send us the anonymous ID shown under "Help improve Conversetta" in Privacy and we will erase those events.

You can complain to a data protection authority: in Switzerland the FDPIC, in the EU the authority where you live, in the UK the ICO.

US residents

You have the rights above wherever you live. Many US states add their own rights, and we give them to every US user, whether or not a particular state law applies to us.

To use a right, write to privacy@conversetta.com from the email address on your account, so we can check it is you. Someone can ask for you with your written permission. We answer within 45 days; if a request is hard we may take 45 more and tell you why. If we say no, reply with "appeal": we answer within 45 days, and if you are still not satisfied you can contact your state attorney general.

What we collected in the last 12 months. The categories in §3, which in California's terms are identifiers (email address, sign-in ID, device ID, IP address), commercial information (purchases and usage counts), internet activity (how you use the app, and, in the free version, the ads shown), your region but not your precise location, what you wrote in chats, debriefs and check-ins, and the sensitive information described above. We got them from you and your phone. We use them for the purposes in §4, and we disclosed them for those purposes to the providers in §5, which work for us under contract.

Consumer health data (Washington, Nevada and Connecticut)

Some of what you give Conversetta can count as "consumer health data" under Washington's My Health My Data Act and similar laws, such as Nevada's and Connecticut's: your check-in answers, and what you write in chats and debriefs about how you feel. In short:

9. Age

Conversetta is for adults, 18 and over. If we learn that someone under 18 is using it, we end AI practice, review the account, and delete the account and its data if they are under 18.

10. Security

We use encryption in transit, encrypt debrief text and chats under way separately in storage, restrict who can access data, and test our security. No system is perfect. If a breach puts you at risk, we'll tell you and the authorities as the law requires.

11. Changes

If we change this notice in a way that matters, we'll tell you in the app before it takes effect, and ask again where the change needs your consent.