tahutuPrivacy Policy
Last Updated: May 7, 2026
Summary
- Third-party AI services: Voice audio and conversation text are sent to OpenRouter, Deepgram, and Soniox to provide AI-powered language tutoring. You must explicitly consent in-app before any data is shared.
- On-device processing available: Text-to-speech runs entirely on your device. On-device speech recognition is available as an alternative to cloud ASR.
- Optional account: Sign in with Apple or Google for proxy mode, or use your own API keys without an account
- Local data storage: Conversations, practice sessions, notes, and vocabulary are stored locally on your device
- Encrypted communications: All API calls use secure HTTPS connections
- No AI training: Your data is never used to train AI models by Tahutu or its service providers
Introduction
Tahutu Assistant ("we", "our", "us", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
Information We Collect
Voice Data
- Microphone Access: The App requires microphone permission to capture your voice for speech recognition
- On-Device Processing (Default): When using on-device speech recognition, all ASR and TTS processing happens entirely on your device. Your voice audio is never transmitted to external servers
- Cloud Processing (Optional): If you choose cloud-based speech recognition, your audio data is transmitted to the respective provider's servers for transcription
Text Data
When you interact with the assistant, your transcribed text queries are sent to AI language model providers to generate responses. The specific provider depends on your selection in the app settings.
API Keys
If you provide your own API keys, they are stored securely on your device using platform-specific encrypted storage (iOS Keychain / Android Keystore). API keys are:
- Never transmitted to our servers
- Never logged or shared
- Removable at any time through settings
Authentication (Optional)
The App offers optional sign-in via Apple or Google through Firebase Authentication. When you sign in:
- What we receive: A unique user ID and authentication token from Firebase
- What we do NOT receive: Your email, name, or other personal profile information
- Purpose: Enables "proxy mode" where API calls are routed through our server, eliminating the need for you to manage your own API keys
- Data stored: Only your Firebase user ID for authentication purposes
Learning Data
If you use the learning features (practice scenarios, vocabulary, notes), this data is:
- Stored locally: All learning data is saved in a SQLite database on your device
- Never uploaded: Practice sessions, notes, and vocabulary are never sent to our servers
- Fully deletable: Uninstalling the app removes all learning data
What We Do NOT Collect (Tahutu Servers)
The following data is NOT collected or stored on Tahutu's own servers:
| Data Type | Stored on Tahutu Servers? | Notes |
|---|---|---|
| Personal information (name, email, phone) | No | Not collected even with sign-in |
| Device identifiers | No | - |
| Location data | No | - |
| Usage analytics | No | Performance metrics are local-only |
| Advertising data | No | - |
| Crash reports | No | - |
| Conversation history | No | Stored locally on your device |
| Learning progress | No | Stored locally on your device |
| Notes and vocabulary | No | Stored locally on your device |
Important: While Tahutu's servers do not store your data, voice audio and conversation text are transmitted to third-party AI services (OpenRouter, Deepgram, Soniox) to provide the app's core functionality. See Third-Party AI Data Sharing below for full details.
What IS Stored Locally
The following data is stored on your device in a local database:
| Data Type | Purpose | Retention |
|---|---|---|
| Conversation history | Resume previous conversations | Until you delete or uninstall |
| Notes and vocabulary | Learning and review | Until you delete or uninstall |
| Practice sessions | Track learning progress | Until you delete or uninstall |
| Mastery levels | Spaced repetition scheduling | Until you delete or uninstall |
You can delete individual conversations and notes within the app, or uninstall the app to remove all local data.
Data Processing
On-Device Processing (No Data Transmission)
The following processing occurs entirely on your device:
- Speech-to-text conversion (when using on-device ASR)
- Text-to-speech synthesis
- Audio capture and playback
- Conversation state management
Third-Party AI Data Sharing
Tahutu relies on third-party AI services for core functionality. You must explicitly consent in-app before any data is shared with these services. The table below summarises what data is shared, with whom, and for what purpose:
| Data Shared | Third Party | Purpose | Data Protection |
|---|---|---|---|
| Voice audio (your speech) | Deepgram or Soniox | Speech-to-text transcription | Audio encrypted in transit; not used for AI training; processed in real-time per provider policies |
| Conversation text (transcripts and AI responses) | OpenRouter (routes to Anthropic, Google, OpenAI, or DeepSeek) | Generate AI language tutor responses | Text encrypted in transit; not used for AI training by OpenRouter; subject to each model provider's API data usage policies |
| Learning profile (preferred name, interests, goals) | OpenRouter (included in AI prompt context) | Personalise AI tutor responses | Only sent as part of conversation context; not stored by third parties |
Third-Party Data Protection Commitments
Each third-party AI service we use has committed to data protection measures that provide the same or equal level of protection as described in this policy:
- OpenRouter: Zero data retention by default. API requests are not logged or stored. Routes to model providers with equivalent privacy commitments. Privacy Policy
- Deepgram: Audio processed in real-time; not stored after transcription. SOC 2 Type II certified. Privacy Policy
- Soniox: Audio processed in real-time; not retained. Privacy Policy
- Anthropic (Claude): API data not used for model training. SOC 2 Type II certified. Privacy Policy
- Google (Gemini): API data not used for model training by default. Privacy Policy
- OpenAI (GPT-4o): API data not used for training by default. SOC 2 Type II certified. Privacy Policy
- DeepSeek: Privacy Policy
In-App Consent
Before any data is sent to a third-party AI service, the app presents a consent screen that:
- Discloses exactly what data will be sent
- Identifies each third-party recipient by name
- Explains how the data is used
- Requires your explicit approval before proceeding
You may review this information at any time by tapping the privacy link in the app. If you do not consent, voice AI features that require cloud processing will not be available, but on-device features remain functional.
Backend Proxy Mode (Optional)
If you sign in and use proxy mode:
- Your text queries are routed through our server to AI providers
- We do NOT log or store your queries or responses
- We track only aggregate usage counts for rate limiting purposes
- Your Firebase user ID is used solely for authentication
- You can switch to direct mode (your own API keys) at any time
Data Retention
Local Data (On Your Device)
- Conversation History: Stored in a local SQLite database on your device and persists across app sessions
- Manual Deletion: You can delete individual conversations or clear all history within the app
- Notes & Vocabulary: Stored locally with spaced repetition data
- Practice Sessions: Session history and progress stored locally
- Retention Period: All local data is retained until you delete it or uninstall the app
- Complete Removal: Uninstalling the app removes all local data permanently
Server Storage
- Authentication only: If you sign in, we store only your Firebase user ID for authentication
- No query logging: We do not log or store your conversations on our servers
- Aggregate usage: For proxy mode, we track only request counts for rate limiting (no content)
- Third-party API providers may retain data according to their own policies
Data Security
We implement the following security measures:
- Encrypted Communications: All API communications use HTTPS/TLS encryption
- Secure Key Storage: API keys are stored using platform-native secure storage (iOS: Keychain Services, Android: EncryptedSharedPreferences with Keystore)
- Minimal Data Exposure: Voice processing occurs locally whenever possible
- No Logging: User queries and responses are not logged to files
Permissions Required
Microphone (Required)
- Purpose: Capture voice input for speech recognition
- Usage: Only active when you press the microphone button
- Storage: Audio is processed in real-time and not stored
Internet (Required for LLM features)
- Purpose: Send text queries to AI providers and receive responses
- Usage: Only when generating AI responses or using cloud ASR
- Offline Mode: On-device ASR/TTS works without internet
Children's Privacy
- The App does not collect personal information from any users, including children
- The App is suitable for all ages
- We comply with the Children's Online Privacy Protection Act (COPPA)
- If you are a parent or guardian and have concerns, please contact us
Your Rights
You have the right to:
- Deny Permissions: Deny microphone permission (the app will not function without it)
- Choose Processing: Select on-device or cloud-based speech recognition
- Select AI Provider: Choose which LLM provider processes your queries
- Clear Data: Clear conversation history and API keys at any time
- Delete All Data: Uninstall the app to remove all locally stored data
- Opt Out: Stop using cloud services by switching to on-device processing
Rights Under GDPR (EU/EEA Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: Request information about your data (all data is stored locally on your device)
- Right to Rectification: Correct inaccurate data by editing notes and conversations in the app
- Right to Erasure ("Right to be Forgotten"): Delete your data using in-app deletion features or by uninstalling
- Right to Restrict Processing: Switch to on-device mode to prevent cloud processing
- Right to Data Portability: Your data is stored locally and accessible via device backup
- Right to Object: You can stop using cloud services at any time
- Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time
- Right to Lodge a Complaint: You may file a complaint with your local data protection authority
Legal Basis for Processing (GDPR)
We process your data based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Voice processing (on-device) | Performance of contract (providing the service) |
| AI query processing | Performance of contract (providing the service) |
| Cloud ASR (optional) | Consent (you choose to enable cloud ASR) |
| Account authentication | Performance of contract (enabling proxy mode) |
| Rate limiting | Legitimate interest (preventing abuse) |
To exercise these rights, contact us at the email below or manage your data directly within the app.
Rights Under CCPA (California Users)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: You have the right to request deletion of your personal information
- Right to Correct: You have the right to request correction of inaccurate personal information
- Right to Opt-Out of Sale/Sharing: We do NOT sell or share your personal information for cross-context behavioral advertising
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
- Right to Limit Use of Sensitive Personal Information: You can limit the use of sensitive personal information (voice data) by using on-device processing only
Categories of Information (CCPA Disclosure)
| Category | Collected? | Sold? | Shared? |
|---|---|---|---|
| Identifiers (name, email, IP address) | No* | No | No |
| Commercial information | No | No | No |
| Biometric information (voice) | No** | No | Yes (transmitted to Deepgram/Soniox for transcription with consent) |
| Internet activity | No | No | No |
| Geolocation data | No | No | No |
| Audio/visual information | No** | No | Yes (voice audio transmitted to Deepgram/Soniox for transcription with consent) |
| Inferences | No | No | No |
| Sensitive personal information | No | No | No |
* Firebase authentication stores only a user ID, not personal identifiers.
** Voice audio is processed in real-time and not stored by Tahutu. It is transmitted to Deepgram or Soniox for transcription with your explicit in-app consent. These providers do not retain audio after processing.
To exercise your CCPA rights, contact us at the email below. We will respond within 45 days. You may also designate an authorized agent to make requests on your behalf.
International Users and Data Transfers
This App may process data through third-party services located in various countries, including the United States. By using the App, you acknowledge and consent to the following:
- Your text queries may be transferred to AI providers in different jurisdictions
- These jurisdictions may have different data protection laws than your country of residence
- We rely on the data protection commitments of our third-party providers (standard contractual clauses, adequacy decisions, or other appropriate safeguards)
- No personal data is collected or stored by us directly
Third-Party Data Protection
Our AI providers have committed to the following data protection measures:
- OpenRouter: Routes queries to various AI providers; does not store conversation content
- Anthropic (Claude): Committed to privacy; offers zero-retention API options
- Google (Gemini): Subject to Google's data processing agreements
- OpenAI (GPT): API usage is not used for training by default
For the most current information, please review each provider's privacy policy directly.
Data Breach Notification
In the unlikely event of a data breach affecting your personal information:
- We will notify affected users within 72 hours of becoming aware of the breach, where feasible
- Notification will include the nature of the breach and affected data categories
- We will provide information about steps you can take to protect yourself
- We will notify relevant supervisory authorities as required by applicable law
Note: Because we do not store personal data on our servers, the risk of a data breach affecting your personal information from our systems is minimal. However, this policy applies to any data we may process, including authentication data.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be indicated by:
- Updating the "Last Updated" date at the top
- Posting the new policy within the app or on our website
Continued use of the App after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: thucth.qt+aicraft@gmail.com
Consent
By downloading, installing, or using Tahutu Assistant, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.