Privacy Policy for Galito

Last updated: August 5, 2026

Galito ("the App," "we," "us") is a mobile app for learning European Portuguese (pt-PT), operated by an individual sole proprietor based in Washoe County, Nevada, United States. This policy explains what information the App collects, how it's used, and your choices.

Information We Collect

• Account information. When you create an account, we collect the email address (or the email associated with your Apple or Google sign-in) and authentication details needed to sign you in. We use Supabase as our authentication and database provider.
• Learning progress. Your lesson progress, streak, XP, hearts, and achievements are tied to your account and stored in our database (via Supabase) so your progress follows you across devices. This data is restricted to your account by row-level security — no other user or app can read it — and is permanently deleted if you delete your account.
• Microphone & speech recognition. If you use pronunciation practice, the App uses your device's built-in speech recognition to check what you said. Audio is processed by your device's operating system to produce text; we do not record, store, or transmit your voice recordings to our servers.
• AI tutor conversations ("Falar com o Galo"). When you chat with the AI tutor, the text you type or speak is sent to our server, which forwards it to Anthropic's Claude API to generate a reply, then returns it to the App. We do not retain a permanent log of these conversations beyond what's needed to process the request, and we don't use them to identify you personally.
• Payment information. If you purchase a subscription, your payment is handled directly by the Apple App Store or Google Play — we never see or store your card details. We use RevenueCat to manage subscription status (active, expired, renewal date), which is linked to your account so the App can unlock the right features.
• Photo library. The App may request access to your photo library only if you choose to save or share an image from the App. We don't access your photos for any other purpose.

What We Don't Do (Today)

• We don't use third-party analytics or advertising SDKs.
• We don't sell your data, or share it with third parties for their own marketing purposes.

If this changes — for example, if we add analytics to understand app usage — we'll update this policy and the "Last updated" date above.

Email Communications

We may email you about your account (e.g. purchase receipts, security notices) and, if you don't opt out, about your learning activity and Galito news (e.g. monthly streak recaps, new features). Every marketing email includes an unsubscribe link — see our Email Preferences page. Account and transactional emails (like receipts) aren't part of the marketing opt-out, since they relate to your account rather than promotion.

Third-Party Services

• Supabase — authentication and database hosting for your account and progress data.
• Anthropic — processes text you send to the AI tutor, solely to generate its reply.
• RevenueCat, Apple, and Google — process and manage subscription purchases.

Your Rights & Choices

You can review and update your account information from the App's Profile tab. To delete your account and all associated data, contact us at the email below — deleting your account permanently removes your progress data from our database.

If you're located in the European Economic Area or United Kingdom, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing, under the GDPR/UK GDPR. Our legal basis for processing account and progress data is performance of our contract with you (providing the App's features); for marketing emails, our basis is your consent, which you can withdraw at any time.

Children's Privacy

Galito is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Data Retention & Security

We retain account and progress data for as long as your account is active. We use industry-standard safeguards (including row-level security on our database, so your data is only ever accessible to your own authenticated account) to protect your information, but no method of transmission or storage is 100% secure.

Changes to This Policy

We may update this policy as the App evolves. Changes will be posted on this page with an updated "Last updated" date. Material changes will be highlighted in the App or via email where appropriate.

Contact Us

Questions about this policy, or want to exercise a data right? Email our support email.