Privacy policy

Last updated 1 November 2026

SinhalaLingo is an app and website for learning spoken Sinhala. It is run by Autochatic (Dinal Kurukulasooriya), the data controller for the information described here. Questions or requests:dinal@autochatic.com.

Short version: we keep only what the app needs to teach you, we don't show ads, we don't track you across other apps or sites, and we never sell your data.

What we collect and why

• Account details: your name, email address and a hashed (unreadable) password, so you can sign in and keep your progress.
• Learning data: lessons completed, XP, streak, daily goal, saved phrases and the answers you give in onboarding (why you're learning, level, age range, priorities), so we can build your path and show your progress.
• Voice recordings: when you tap the microphone, the recording is sent to our server and on to Google's Gemini API to check your pronunciation. We use it only to return your result and do not store it.
• Technical data: IP addresses are used briefly, in hashed form, to rate-limit requests and prevent abuse. Our hosting providers keep standard request logs for a short time.
• On your device only: app settings, sound and reminder preferences, and (on the website) the phrases you practise. Daily reminders are local notifications scheduled on your phone; we don't send push messages.

Legal bases (GDPR): providing the service you asked for (contract) for account, learning and voice data; our legitimate interest in keeping the service secure for technical data.

Who processes it

• Supabase: hosts our database and server.
• Google (Gemini API): generates lesson audio and checks pronunciation recordings.
• Expo: delivers app updates.
• Netlify: hosts this website.
• Apple and Google: distribute the app through their stores under their own privacy policies.

These providers may process data outside your country, including in the United States, under standard contractual clauses or equivalent safeguards. We have no advertising or analytics partners.

How long we keep it

Account and learning data are kept until you delete your account. Voice recordings are not kept. Rate-limit records expire within minutes; provider logs within a few weeks.

Deleting your account

In the app, go to Me → Delete account and confirm with your password. Your account and all learning data are deleted immediately. You can also ask us to delete it by email.

Your rights

You can ask to access, correct, export or delete your data, or object to how we use it, by emailingdinal@autochatic.com. We reply within 30 days. If you're in the EU you can also complain to your data protection authority (in France, the CNIL).

Children

SinhalaLingo can be used by families learning together. If you are under 16 (or the age of digital consent where you live), a parent or guardian should create and manage the account. If you believe a child has given us personal data without consent, contact us and we'll delete it.

Changes

If we change this policy we'll update this page and the date above, and tell you in the app if the change is significant.