← Back to Idiosync

Privacy Policy

Last Updated: July 2026

⚠️ DRAFT — REQUIRES REVIEW BY QUALIFIED LEGAL PROFESSIONAL BEFORE PUBLIC LAUNCH

Who we are

Idiosync is operated by Ronnie Lashley, based in Surrey, United Kingdom. Contact us at privacy@idiosync.chat.

1. What data we collect

  • Full name and email address (collected at sign-up)
  • Language preferences — native language, target language(s)
  • Voice preference (male/female/no preference)
  • Messages sent within the app (stored to enable chat functionality)
  • XP, progress, streak, and badge data
  • Profile photo (only if you choose to upload one)
  • Device type and browser (session data only, not stored long-term)

2. How and where we store it

All data is stored via Supabase (servers located in EU-West, Ireland). Data is encrypted in transit (TLS) and at rest. We do not store data outside the EU/UK.

3. Why we use your data

  • To provide and run the app and its features
  • To personalise your language learning experience
  • To send magic link authentication emails
  • To send group chat invite emails on your behalf when you invite others
  • To track your learning progress and award XP/badges

4. Third-party services we use

Supabase (EU-West, Ireland) — database and authentication.

OpenAI (gpt-4.1-mini) — powers translations, scenario practice, quiz generation. Messages may be processed by OpenAI’s API solely to provide these features. OpenAI does not retain your data for training purposes under our API agreement.

Vercel — app hosting (edge network).

We do not sell, rent, or share your personal data with any third party for marketing purposes.

5. Your rights under UK GDPR

You have the right to: access your data, correct inaccurate data, delete your account and all associated data, export your data in a portable format, and object to or restrict how we process your data.

Contact privacy@idiosync.chat — we will respond within 30 days.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where required by law.

7. Cookies

Essential session cookies only — required for the magic link login system to function. No advertising, tracking, or analytics cookies.

8. Children

Idiosync is not intended for users under 18. We do not knowingly collect data from anyone under 18. Contact privacy@idiosync.chat if you believe a minor has created an account.

9. Changes to this policy

We may update this policy as the app evolves. Active users will be notified of significant changes via email.

10. Contact

Privacy enquiries: privacy@idiosync.chat

⚠️ DRAFT — REQUIRES REVIEW BY QUALIFIED LEGAL PROFESSIONAL BEFORE PUBLIC LAUNCH