Privacy Policy

1. Introduction

Welcome to GBTalk ("we", "us", "our"). GBTalk is a language-learning chat application that uses an AI language model to help you practice natural conversation, pronunciation feedback, corrections, and translation. This Privacy Policy explains what personal data we collect when you use the GBTalk app and this website, why we collect it, who we share it with, and the choices and rights available to you.

By using GBTalk, you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following categories of information:

• Chat content — the messages you send, the conversation topic/situation you select, and the AI-generated replies, corrections, and translations. This is sent to OpenAI so it can generate a response (see "International Data Transfers" below).
• Learning profile — your target language, proficiency level, and native language, used as parameters for generating AI responses.
• Authentication identifier — an anonymous user ID created by Firebase Authentication, used to identify your account and manage usage limits.
• Email address — if you choose to link a Google account or create an email/password account, used for account linkage and sign-in.
• Subscription and billing information — managed by RevenueCat, used to determine your subscription status.
• Chat history and favorites backup — only if you use the optional backup feature, used to restore your data when you change devices.
• Crash logs and device information — collected via Firebase Crashlytics, used to investigate and fix bugs.
• Device integrity signals — collected via Firebase App Check (Google Play Integrity), used to verify requests come from a genuine, unmodified copy of the app and to block abusive automated traffic.
• Installation identifier — a Firebase Installation ID, used to enforce per-device usage limits and to prevent quota abuse (for example, deleting and recreating an account to reset a limit).
• Hashed IP address — we compute a one-way hash of your IP address on our servers when you make an AI request; we do not store the IP address itself. Used to limit how many new accounts can be created from the same network in a day.
• Usage counters — the number of AI requests you make and their approximate cost, used to enforce usage limits and detect abuse.

3. Information We Do Not Collect

We do not collect your precise location. We do not request access to your contacts, camera, or microphone — GBTalk has no speech-to-text feature of its own and relies on your device's own keyboard dictation, if you choose to use it. We do not use any advertising SDKs.

4. How We Use Your Information

We use your information to:

1. Provide and operate the AI conversation, correction, and translation features.
2. Authenticate you and keep your account secure.
3. Manage your subscription and entitlements.
4. Back up and restore your chat history, if you enable that feature.
5. Diagnose and fix crashes and bugs.
6. Enforce fair-use limits and prevent abuse of our AI infrastructure.

5. Who We Share Your Information With & International Data Transfers

We share information with the following service providers, each acting on our behalf:

• OpenAI, L.L.C. (United States) — processes chat content to generate AI responses.
• Google LLC / Firebase (Google Cloud) — provides authentication, database, file storage, crash reporting, and app integrity verification.
• RevenueCat, Inc. (United States) — manages subscription and entitlement status.

GBTalk is intended primarily for users in Japan. GBTalk itself is operated by an individual developer based outside Japan, and some of our service providers are located, or process data, outside of your country of residence, including in the United States. We do not enter into separate data transfer agreements of our own; instead we rely on each provider's own contractual and security commitments (including their standard data processing terms) for how they handle data transferred internationally.

We do not sell your personal data.

6. Your Rights and Account Deletion

Subject to applicable law, you may have rights to access, correct, or delete your personal data.

You can permanently delete your account and its associated data (subscription/entitlement records, backup data, and your authentication record) at any time:

• In the appSettings > Delete Account
• On the webWithout installing the app, via our Delete Account page

Deleting your account does not delete the anonymous, per-device usage counters described in "Data Retention" above, and does not automatically cancel an active Google Play subscription — please cancel any active subscription separately from Google Play if you want to stop being billed.

7. Children's Privacy

GBTalk requires users to be at least 16 years old, as stated in our Terms of Service, and the Service is not directed at children under 16. Note that GBTalk's Google Play content rating reflects only the suitability of in-app content for different age groups and may show a general-audience rating (for example, "Everyone"); this content rating is separate from, and does not override, the minimum-age requirement in our Terms of Service. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us using the details below so we can delete it.

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections, access controls enforced by Firebase Security Rules, and app integrity verification. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the app.

10. Contact Us

GBTalk is operated by fia (individual developer). If you have questions about this Privacy Policy or wish to exercise your rights, contact us at fia.614835417525@gmail.com. Our registered business address is not published here, but will be provided without delay upon a reasonable request sent to that address.