Privacy Policy

1. Introduction

EnglishCall.ai ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered English conversation practice service.

2. Information We Collect

2.1 Information You Provide

• Phone Number: Required for account verification and service access
• Email Address: Optional, used for notifications and account recovery
• Name: Optional, used for personalization
• Payment Information: Processed securely through Stripe (we do not store card details)

2.2 Information Collected Automatically

• Call Records: Call duration, timestamp, phone number (hashed for privacy)
• Conversation Transcripts: Audio transcriptions of your practice sessions
• Usage Statistics: Practice time, word count, session frequency
• Technical Data: IP address, device type, browser information

2.3 Audio Data

We process your voice audio in real-time using OpenAI's GPT-4o Realtime API. Audio is:

• Transmitted securely via encrypted connections
• Transcribed to text for your practice records
• Not stored as audio files (only text transcripts are saved)
• Processed in accordance with OpenAI's data policies

3. How We Use Your Information

We use your information to:

• Provide the Service: Enable AI conversations and practice sessions
• Account Management: Verify your identity, manage subscriptions
• Send Notifications: SMS/email for verification, alerts, session summaries
• Improve Service: Analyze usage patterns to enhance features
• Support: Respond to your inquiries and technical issues
• Compliance: Meet legal and regulatory requirements
• Billing: Process payments and manage subscriptions

4. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process your data based on:

• Contract: To provide the service you requested
• Consent: For SMS/email notifications (you can withdraw anytime)
• Legitimate Interest: To improve our service and prevent fraud
• Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We share your information only with:

Service Providers:

• Twilio: Phone call and SMS infrastructure
• OpenAI: AI conversation processing
• Firebase (Google): Database and file storage
• Stripe: Payment processing
• Resend: Email delivery

We DO NOT:

• Sell your personal data to third parties
• Share your conversation content for marketing purposes
• Use your data to train AI models without consent

Legal Requirements:

We may disclose your information if required by law, court order, or to protect our rights and safety.

6. Data Retention

• Account Data: Retained while your account is active
• Transcripts: Stored indefinitely unless you request deletion
• Call Records: Retained for 2 years for billing and support
• Payment Data: Retained per legal requirements (typically 7 years)

After account deletion, we may retain anonymized data for analytics and legal compliance.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we use your data
• Objection: Object to data processing for legitimate interests
• Withdraw Consent: Opt-out of SMS/email notifications anytime

To exercise these rights, contact us at support@englishcall.ai

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest
• Phone numbers hashed using SHA-256
• Secure authentication and access controls
• Regular security audits and updates
• Compliance with SOC 2, GDPR, and CCPA standards

However, no internet transmission is 100% secure. Use the service at your own risk.

9. International Data Transfers

Your data may be transferred to and processed in:

• United States (primary infrastructure)
• Countries where our service providers operate

For EU users, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) and service providers' GDPR compliance.

10. Children's Privacy

Our service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children. If we discover we have collected data from a child, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us immediately.

11. Cookies and Tracking

We use minimal cookies for:

• Essential: Session management, authentication
• Analytics: Usage statistics (anonymized)

You can disable cookies in your browser settings, but this may affect service functionality.

12. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any information.

13. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if we sell or share your data (we don't)
• Right to delete your personal information
• Right to opt-out of data sales (not applicable)
• Right to non-discrimination for exercising privacy rights

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via:

• Email notification
• SMS notification
• Prominent notice on our website

Continued use of the service after changes constitutes acceptance of the updated policy.

15. Contact Us

For privacy-related questions, data requests, or concerns:

• Email: privacy@englishcall.ai
• Support: support@englishcall.ai
• Phone: +1-681-202-2898
• Website: https://www.englishcall.ai

For EU/EEA users, you also have the right to lodge a complaint with your local data protection authority.