Privacy Policy

01Information we collect

• Account information: Your email address used for code-based sign-in, account identifier, name, selected preset avatar, and account creation and update times. Selecting an avatar does not require uploading a photo.
• Learning records: Courses studied, question progress, selected answers, results and answer times. We use these to calculate learning days, streaks and the activity heatmap. Heatmap requests also include your phone’s time zone.
• Content feedback: Feedback categories and descriptions you submit, the related course and question, and submission time.
• Authentication and technical information: Sign-in sessions, verification-code information, and IP addresses and device or browser information that the authentication service may record. Service logs contain request identifiers, API paths, status, duration and error types for service maintenance.
• Data on your phone: Sign-in credentials are stored in iOS Keychain. The app also stores account caches, pending answers, preferences, reminder times and local learning-completion records. These support persistent sign-in, interrupted connections and reminders.

The current app does not use advertising SDKs, third-party behavioral analytics SDKs or cross-app tracking. We do not collect your contacts, precise location, photo-library contents or payment information. This privacy webpage does not set analytics cookies or load third-party tracking scripts.

Luna realtime conversations

When you connect to Luna, voice and text are sent through Vokumi to Alibaba Cloud Qwen. We store account-linked transcripts, summaries, vocabulary and review status, learning goals, English level, interests, and facts you explicitly ask Luna to remember. We do not store call recordings or log conversation content. Summaries are generated through separate background text-model requests. You can edit or delete memories and delete vocabulary in the learning journal; memory changes apply to your next call. Deleting your account deletes these transcripts, summaries, vocabulary and memories. When you ask to discuss a public webpage, our backend reads its content and shares it with the model; the website receives a request. If local proxy DNS cannot be used safely, Cloudflare public DNS may resolve the website hostname. Alibaba Cloud may process and retain requests under its policies, including outside your region.

Grammar tips: after each sentence you say, our backend sends the speech-recognition text of that sentence to the TypeSafe Jev decision model on OpenRouter and to an Alibaba Cloud Qwen text model, to decide whether a correction helps and to write a more natural version. Corrections and explanations are stored in your account as “A more natural way” in the learning journal and are deleted with your account. “Listen” sends the sentence to Alibaba Cloud Qwen text-to-speech; the audio is cached by sentence content and is not linked to your account. OpenRouter and model providers may process and retain requests under their own policies.

Feedback

When you send feedback from the home screen, we store the feedback type, what you write, any screenshots you choose to attach (up to 3), and the app version, system version, device model and app language, so we can understand and investigate issues. Feedback is linked to your account and is only read by our team; we do not email you about it. Screenshots are kept in our private storage. Deleting your account deletes your feedback and screenshots.

AI reading partner

Imported EPUBs and reading positions are stored on your device. When you agree to use Luna, Vokumi sends only the selected text, nearby passage, book title and author, current chapter title and bounded table of contents, your question, recent conversation, and app language to OpenRouter and the selected model provider to generate an explanation. Our explanation endpoint does not store these passages or responses or include them in application logs. OpenRouter and model providers may process and retain requests under their own policies; processing can occur outside your country or region. AI explanations may contain mistakes. You can read without AI, remove a book from your bookshelf, or turn off AI content sharing in Reading options. Feature access grants are stored with your account and removed when your account is deleted. Signing out or deleting your account does not remove device-local books. Removing a book in the app removes its local copy and reading position.

Voice input is optional. After you consent and grant microphone access, a recording of up to 60 seconds is temporarily saved on your phone and sent through our backend to OpenRouter and the speech model provider for transcription. The local recording is deleted when recording finishes or is cancelled. Our transcription endpoint does not persist or log audio or transcript contents. You can edit the transcript before sending it to Luna. Providers may retain submitted audio under their own policies.

OpenRouter privacy policy

02How we use information

We use the information above to verify your identity, send sign-in and account-deletion codes, save and restore progress, show achievements, handle feedback, maintain security and investigate problems. We do not sell personal information or use learning records for targeted advertising.

Daily learning reminders use local notifications on your iPhone. The reminder setting and time are stored on your phone. The app uses local answer results and synchronized learning records to decide whether to remind you that day. Enabling reminders does not require sending a notification device token to a push server.

03Service providers and processing

• Railway: Hosts the API, account and learning databases, and course-image storage. The API and database are currently deployed in Singapore. See Railway’s privacy policy for its processing practices.
• Resend: Sends sign-in and account-deletion code emails, processing the recipient address, email content and related delivery records. See Resend’s privacy policy.
• Apple: iOS provides Keychain and local notifications. Apple processes App Store and TestFlight download and testing information under its policies. See Apple’s privacy policy.

The app communicates with the server over HTTPS. Providers process necessary information to deliver their services. We require providers involved in processing personal information to provide appropriate data protection. Depending on your location and their processing arrangements, information may be processed outside your country or region.

04Retention and deletion

While your account is active, we retain account information, learning records and feedback to provide ongoing service. Sign-in and account-deletion codes expire after 10 minutes and cannot then be used for verification. Expiry does not mean all email delivery records are deleted at the same time.

After you select “Delete account” in Profile and confirm using an email code, the app deletes your account information, authentication records, all sessions, course progress, answers, personal feedback and related code information from the online database. It clears locally stored sign-in and learning data and cancels pending reminders for that account. Public courses and course images remain available.

Account deletion does not automatically remove providers’ email delivery records or platform technical logs; those follow the providers’ retention rules. Any recovery backups are cleaned up according to backup retention settings. Information required by law may be retained for the necessary scope and period. Contact us to learn about or request handling of related records.

05Your choices

• Edit your profile: Change your name and preset avatar in Profile.
• Disable reminders: Turn off Daily reminder in Profile or revoke notification permission in iPhone settings.
• Sign out: Clear the app’s stored sign-in state. Signing out does not delete server-side learning records.
• Delete your account: Submit a deletion request in Profile. Your previous learning records cannot be restored after deletion; registering again creates a new account.
• Other data requests: Use the email below to request information about, access to, correction or deletion of your data. We may need to verify your identity. Do not send sign-in codes or credentials by email.

You can browse the public course list without signing in. Learning, saving progress and viewing personal achievements require an account. If you no longer want us to process information needed for account services, delete your account or contact us.

Minors should use the service in accordance with applicable local rules and guidance from a guardian. Guardians with questions about a minor’s account or data can contact us.

06Updates and contact

This policy applies to Vokumi and its supporting services. When our processing practices change, we will update this page and the date above. For significant changes, we will provide appropriate notices as required.

For privacy questions, account-data requests or deletion requests, contact Vokumi:

contactus@vokumi.xyz