This policy explains what data the Dialo Android app processes, why, who receives it, and what you can do about it. Dialo is a language-learning app in which you speak with an AI partner, describe pictures, and take a practice test.
When you tap the microphone, Dialo uses your device's speech recognition service (on most Android devices this is provided by Google) to turn your speech into text. The audio is handled by that service under its provider's terms. Dialo itself does not record, store, or upload audio files; it only receives the resulting text.
To generate replies, corrections and feedback, Dialo sends the following to OpenAI's API: the text of what you said, the conversation so far, your selected learning and translation languages, and — in the picture exercise — the exercise picture supplied by the app. Dialo does not access your camera or your photo library, and never sends your own photos.
To read replies aloud, the reply text is sent to OpenAI's text-to-speech API and the returned audio is played on your device.
You can use Dialo without an account. If you choose to sign in (email and password, Google, Facebook, or Apple), authentication is handled by Firebase Authentication (Google). It stores your email address, display name if provided, a user identifier, and the sign-in provider. Your password is processed by Firebase and is never visible to us. For security, Firebase also processes IP addresses and device information.
Subscriptions are sold and billed by Google Play. We receive only the purchase status needed to unlock premium features. We never receive your payment card details.
Your practice history and results, completed scenarios, language settings, and subscription status are stored in the app's private storage on your device. PDF reports are created on your device and are shared only when you choose to share them.
Android backup: if you have enabled device backup in your Android settings, Android may include this app data in the backup of your own Google account. That backup is controlled by you and Google; we have no access to it.
| Purpose | Legal basis |
|---|---|
| Providing the conversation, picture and test exercises you start, including corrections and spoken replies | Performance of contract, Art. 6(1)(b) |
| Optional account sign-in and account deletion | Performance of contract, Art. 6(1)(b) |
| Unlocking subscription features | Performance of contract, Art. 6(1)(b) |
| Protecting sign-in against abuse | Legitimate interest, Art. 6(1)(f) |
| Meeting legal and tax obligations | Legal obligation, Art. 6(1)(c) |
We do not sell your data and we do not use it for advertising or profiling.
Some of these providers process data in the United States. Such transfers are based on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.
In the app: Profile → Delete account. This permanently deletes your Dialo account from Firebase Authentication. To remove data stored on your device, clear the app's data or uninstall the app. Details and an email option: Delete account.
You can change permissions at any time in Android Settings → Apps → Dialo → Permissions.
Dialo is intended for users aged 13 and older. It is not directed at children under 13, and we do not knowingly process data of children under that age. Users who have not yet reached the age of digital consent in their country (16 in Germany; between 13 and 16 elsewhere in the EU) may only create an account or subscribe with the consent of a parent or guardian. If you believe a child has created an account without such consent, write to us and we will delete it.
Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. Write to smetin.karaduman@gmail.com; we respond within one month. You may also lodge a complaint with a supervisory authority; for us this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
All connections to the services above use TLS encryption. No system is completely secure, but we take reasonable measures to protect your data.
If this policy changes materially, we will update the date above and show a notice in the app.