1. Introduction

Welcome to L'amico: Language Friend ("we," "our," or "the app"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, date of birth (for age verification)
• Profile Information: Profile photo, native language, target language, language level, interests, motivation
• User-Generated Content: Ratings, feedback, and reports you submit

2.2 Automatically Collected Information

• Usage Data: Call duration, call frequency, streak data, practice minutes
• Device Information: Device type, operating system, app version
• Technical Data: IP address, crash logs, performance metrics
• FCM Token: For push notifications

2.3 Information We Do NOT Collect

• Call Audio: We do NOT record, store, or transmit your call audio
• Call Content: We do NOT monitor or analyze what you say during calls
• Location Data: We do NOT collect precise location information

3. How We Use Your Information

We use your information to:

• Provide and maintain the app's core functionality
• Match you with compatible language partners
• Send notifications about calls, friend requests, and app updates
• Calculate rankings and display leaderboards
• Track your learning progress (streaks, practice minutes)
• Improve app performance and fix bugs
• Enforce our Terms of Service and prevent abuse
• Respond to your support requests

4. How We Share Your Information

4.1 With Other Users

The following information is visible to other users:

• Display name, profile photo, native language, target language, language level
• Interests and motivation (for matching purposes)
• Average rating and rating count
• Online/offline status (when you're available for calls)

4.2 With Service Providers

We use third-party services that may access your data:

• Firebase (Google): Authentication, database, storage, analytics, crash reporting
• Twilio: TURN server for WebRTC connectivity (no call content stored)
• SendGrid (optional): Transactional emails (verification, password reset)

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Investigate fraud or abuse
• Respond to emergency situations

5. Data Security

We implement security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Firebase Security Rules to restrict unauthorized access
• WebRTC peer-to-peer encryption for calls (DTLS-SRTP)
• Regular security audits and updates

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your profile information at any time through the app's settings.

6.2 Delete Your Account

You can request account deletion by contacting us at [email protected]. We will delete your data within 30 days, except:

• Data required for legal compliance
• Anonymized analytics data
• Backup copies (deleted within 90 days)

6.3 Opt-Out of Notifications

You can disable push notifications in your device settings or app settings.

6.4 Data Portability (GDPR)

EU users can request a copy of their data by emailing [email protected].

7. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Profile data: Deleted within 30 days
• Call history: Deleted within 30 days
• Ratings: Anonymized (no longer linked to your account)
• Crash logs: Retained for 90 days for debugging

8. Children's Privacy

L'amico is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we discover that a user is under 18, we will immediately delete their account and data.

9. International Data Transfers

Your data may be stored and processed in:

• Europe: Firebase Storage (europe-west3)
• United States: Firebase Cloud Functions (us-central1)

We ensure appropriate safeguards are in place for international transfers, including Firebase's compliance with GDPR and Privacy Shield frameworks.

10. Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via:

• In-app notification
• Email to your registered address
• Updated "Last Updated" date at the top of this page

Continued use of the app after changes constitutes acceptance of the updated policy.

12. Your California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information we collect and how we use it
• Request deletion of personal information
• Opt-out of the sale of personal information (we do NOT sell your data)
• Non-discrimination for exercising privacy rights

To exercise these rights, contact us at [email protected].

13. European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights:

• Right to access: Request a copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to certain data processing
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected].