Privacy Policy

The short version

• We keep an account so your progress is saved and syncs between your devices.
• When you practise speaking, your recording is sent to our server to be scored. We don’t store your recordings. We keep the text of what was heard, with your account.
• We use analytics and crash reports to improve the app, and measure our ads with Meta.
• We don’t sell your personal information.
• You can delete your account and its data at any time, in the app or from this website.

What we collect

Your account

When you start CantoGo we create an account for you, so your progress can be saved. You can then sign in with Apple (iPhone), Google, or an email and password. We store:

• Your email address, from the sign-in method you chose. From Apple we ask for your email only.
• Your Google account’s basic profile, if you sign in with Google.
• If you sign in with Apple, a token from Apple. We keep it only so we can revoke CantoGo’s access with Apple when you delete your account.

What you tell us during setup

Your first name, why you’re learning (for example family, travel or work), your Cantonese level, how many minutes a day you want to practise, and whether and when you’d like a daily reminder. We save these as you go through setup, so they may be stored even if you don’t finish it.

Your learning progress

Your lessons, words, flashcard reviews, saved and starred phrases, XP, streak and app preferences. We keep daily snapshots of your progress for 30 days, so we can restore it if something goes wrong.

Your voice

CantoGo uses the microphone only when you tap it to practise speaking. Here’s what happens to a recording:

1. The app records the line, checks it on your phone, and trims the silence at each end.
2. It sends the recording, with the line you were practising, to our server. Our server passes the audio to ElevenLabs for speech recognition. If ElevenLabs is unavailable, Microsoft Azure Speech is used instead.
3. Our own scoring compares what was heard with the line and marks each character.
4. The recording is deleted from your phone after use. We don’t store the audio on our servers.

We do keep a record of each attempt with your account: the line, the text the speech recognition heard, the score and technical details such as timings and recording quality. We use it to fix scoring problems and improve scoring. It’s deleted when you delete your account.

The voice you hear in the app is an AI voice from ElevenLabs. Those clips are made ahead of time and built into the app, so nothing you do is sent anywhere to play them.

Subscriptions

If you subscribe to CantoGo Pro, Apple or Google handles the payment. We never see your card details. We receive your subscription status (for example trial, active or expired) and purchase records through RevenueCat.

Notifications

If you allow notifications, we store a push token for your device so we can send your daily reminder. Tips, new lessons and offers are sent only if you said yes to them. You can turn them off at any time in the app’s Settings (“Tips & offers”) or in your phone’s settings.

Usage, diagnostics and device information

How you use the app (screens viewed, lessons started and finished, setup and paywall steps), crash and error reports, and device information such as the model, operating system, language and IP address. Some usage and error reports include a short screen recording of the app with text and images masked.

Who helps us run CantoGo

We share data with these providers only so they can do their job for us:

• Supabase: our database, sign-in and server. Your account, progress and speaking attempts are stored with Supabase in the United States.
• ElevenLabs: speech recognition for scoring your speaking. It receives your recordings.
• Microsoft Azure Speech: backup speech recognition, used only when ElevenLabs is unavailable. It receives your recordings when used.
• Apple and Google: sign-in, payments, and push notification delivery.
• RevenueCat: manages subscriptions. It receives purchase records, your account ID and device identifiers.
• OneSignal: sends reminders and notifications. It receives your account ID, push token, language and a few labels such as whether you’ve finished setup and your subscription state.
• PostHog: product analytics and masked session recordings, linked to your account ID.
• Sentry: crash and error reports, with a masked recording of the moments before an error.
• Meta: measuring which ads bring people to CantoGo. Meta receives app events such as installing the app, signing up, finishing a level and subscribing. On iPhone it also receives your device’s advertising identifier, but only if you allow tracking when asked. On Android it receives your device’s advertising ID, which you can reset or delete in Android settings.

Each provider handles data under its own privacy policy. Our account ID is a random identifier. We don’t send your name or email to analytics, crash reporting, notifications or Meta.

We may also share information if the law requires it, or to protect CantoGo, our users or others. If CantoGo is ever sold or merged, your information may move with it under this policy.

How long we keep it

• Your account, setup answers, progress and speaking attempts: until you delete your account.
• Daily progress snapshots: 30 days.
• Recordings: not stored on our servers.
• Data held by our providers (analytics, crash reports, notification and purchase records) is kept for as long as their retention settings allow. It’s no longer linked to you on your device after you delete your account. Email us if you’d like us to ask them to delete it.

Your choices and rights

• Delete your account: in the app, go to Settings, then Delete Account. Or request it from this website.
• Microphone, notifications and tracking: you can allow or turn these off at any time in your phone’s settings.
• Access, correct or export your data: email us. Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to or restrict how we use your data, or to complain to your data protection authority.

We use your information to provide the app and keep it working, to save and sync your progress, to score your speaking, to send the reminders and messages you agreed to, to improve CantoGo and to measure our ads.

Where your data is processed

We and our providers process data in the United States and other countries, which may have different data protection laws from where you live. Backup speech recognition with Microsoft Azure runs in East Asia.

Security

Data is sent over encrypted connections, and each account can only read its own data. No system is perfectly secure, but we work to protect your information.

Children

CantoGo is not directed at children under 13, and we don’t knowingly collect their personal information. If you think a child has given us personal information, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If the changes are significant, we’ll also let you know in the app.

Contact

Questions or requests: support@cantogo.app.