Privacy Policy

Last updated: 14 November 2026

1. Who We Are

Immerso ("we", "our" or "us") provides the Immerso language learning apps for iOS and Android, the Immerso web app and this website. We are the controller of the personal data described in this policy.

This policy explains what we collect, why, who we share it with, how long we keep it and the rights you have. You can contact us about anything in it at privacy@getimmerso.com.

2. Information We Collect

Account information

When you create an account we collect your email address and, if you give them, your name and username. You can sign in in three ways:

  • Email and password: we store your password only as a one-way (BCrypt) hash, never in readable form, and we email you a code to confirm your address.
  • Sign in with Apple: Apple gives us an account identifier and an email address, which may be a private relay address if you choose to hide yours.
  • Sign in with Google: Google gives us an account identifier, your email address and your name.

You can also start as a guest before creating an account. A guest account holds the same learning data, without an email address.

Learning data

We store your native and target languages, level, interests and the topics you explore, your lesson and course progress, vocabulary, mistakes we use for review, XP, streaks, game results, rewards and app settings (such as audio speed, time zone and reminder time).

Conversations and content you create

When you chat with an AI tutor or take part in a roleplay, debate or discussion, we store the text of the conversation and the feedback on it so you can carry on later and review your corrections. If you create a lesson from your own text, a web link or a document, we process that material to build the lesson.

Microphone and speech

Speaking exercises and live tutors use your microphone, but only after you grant permission. See section 4 for how speech is handled.

Purchases

Subscriptions and credit purchases in the apps are processed by Apple or Google. We never receive your card details. We receive and store a record of what you bought: the plan or product, whether it is a trial, its start, renewal and expiry dates, and its status.

Notification tokens

If you allow notifications, your device gives us a push token, which we store with your account so we can send reminders (for example, streak and trial reminders). We delete it when you sign out or turn notifications off.

Usage, device and diagnostic data

We record how the apps and website are used: screens and features opened, lessons started and finished, purchases started, app version, device type, operating system and approximate location derived from your IP address. In the apps these events are linked to your account, including your email address and name, so we can understand how learners use Immerso and support you. We also record errors and performance data from our servers.

Emails

We send account emails (welcome, verification codes, password resets, email change notices) and trial reminders.

3. How We Use Your Information

We use your data to:

  • Provide your account, lessons, AI tutors, games and progress tracking (to perform our contract with you)
  • Personalise lessons, reviews and recommendations to your level and interests (contract)
  • Process and verify purchases and manage your subscription (contract)
  • Send push notifications and reminders you have agreed to (consent)
  • Understand how Immerso is used, fix problems and improve the product (our legitimate interests)
  • Prevent abuse, fraud and excessive AI usage, and keep the service secure (legitimate interests)
  • Meet our legal, tax and accounting obligations (legal obligation)

Where we rely on consent you can withdraw it at any time, for example by turning off notifications or microphone access in your device settings.

4. Microphone and Speech Data

  • Speaking exercises in the iOS and Android apps: your speech is turned into text by your device's speech recognition (Apple or Google). Where the device can, this happens on the device; otherwise Apple or Google may process the audio on their servers under their own privacy terms. The apps send us only the resulting text, which we compare with the expected answer to score your pronunciation.
  • Live tutors in the iOS and Android apps: your speech is transcribed in the same way and the text is sent to the tutor. The tutor's spoken reply is generated by Google Gemini.
  • Web app: speech may be recognised by your browser, or the audio may be sent through our servers to Microsoft Azure Speech (for speaking exercises) or Google Gemini (for live tutors) to be transcribed and answered.

We do not keep recordings of your voice. Audio sent to our servers is passed on for recognition and is not saved. We store the text of your answers and conversations as described in section 2.

5. AI Features

Lessons, explanations, AI tutors, roleplays, images and spoken audio are generated by AI models from the providers listed in section 6. When you use these features we send the provider what it needs to respond: your messages, the lesson or text you are working on and learning context such as your languages and level. We do not send your email address or password to AI providers.

We keep a technical log of AI requests for up to 30 days to monitor cost, quality and abuse. AI output can be wrong; see our Terms of Service.

6. Who We Share Data With

We do not sell your personal data or use it for third-party advertising. We share it only with service providers that process it for us, under contract:

  • Microsoft Azure (UK South region): hosting our servers and database
  • Google (Gemini), OpenRouter, OpenAI and Together AI: AI text, tutor and image generation
  • Google Cloud, Microsoft Azure Speech, ElevenLabs and OpenAI: speech synthesis (text-to-speech) and, for Azure, speech recognition in the web app
  • Cloudflare (R2): storing generated audio and images, and files you upload to create lessons
  • Apple and Google: sign-in, in-app purchases and on-device or cloud speech recognition
  • RevenueCat: managing subscriptions and verifying purchases, using your Immerso account ID
  • Google Firebase Cloud Messaging: delivering push notifications
  • PostHog (EU hosting): product analytics
  • Sentry: server error monitoring
  • Postmark: sending account and reminder emails

We may also disclose data where the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold.

7. International Transfers

Our servers and database are in the United Kingdom. Several providers above, including the AI, speech, purchase and email providers, are based in or process data in the United States and other countries. Where data leaves the UK we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

8. Security

Data is encrypted in transit, passwords are stored only as hashes and access to our systems is restricted. No system is completely secure, but we work to protect your data against unauthorised access, loss or misuse.

9. How Long We Keep Data

  • Account and learning data: until you delete your account
  • Guest accounts that never sign up: deleted automatically after 30 days
  • AI request logs: deleted after 30 days
  • Detailed feed activity: trimmed after 30 days
  • Analytics and error data: kept by PostHog and Sentry for their standard retention periods
  • Purchase records held by Apple, Google and RevenueCat: kept under their own terms and for tax and accounting obligations

10. Deleting Your Account

You can delete your account in the app from your Profile, or by following the steps on our account deletion page. Deletion happens immediately and permanently removes your account, progress, vocabulary, conversations, purchase records, push tokens and settings from our database. If you used Sign in with Apple, we also revoke Immerso's access to your Apple ID.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it in your store settings first. If you cannot use the app, email support@getimmerso.com and we will delete your account for you.

11. Your Rights

Under UK data protection law (the UK GDPR) you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to our processing, including for analytics
  • Receive your data in a portable format
  • Withdraw consent at any time, where we rely on it

To use any of these rights, email privacy@getimmerso.com. We will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

12. Children

Immerso is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will post changes on this page with a new "Last updated" date and, where a change is significant, let you know in the app or by email.

14. Contact Us

For questions about this policy or your data, contact us at privacy@getimmerso.com.