Learning with Ailulang
This notice covers the Ailulang learning service and its account, study, tutor, voice, Studio, and payment features. The information processed depends on which features you use. Guest learning can save progress on your device; an account enables cloud synchronization.
Ailulang is operated by an independent developer who determines how personal information is used for the service.
Operator and privacy contact: legal name and a monitored contact address to be added before publication.
Information we use, and why
Service providers process information to operate the features below. A model name identifies the AI model; it does not necessarily identify the company receiving your information.
| Information | How it is used and where it goes |
|---|---|
| Account & sign-in | Email, username, account identifier, authentication credentials, and Google sign-in information are processed using Google Firebase Authentication and our Cloudflare API. Password creation and reset requests can pass through our API to Firebase. We do not receive your Google password. |
| Learning & preferences | Study progress, answers and review history, settings, XP, and saved Studio decks and articles are stored on your device and/or in Google Firestore through our Cloudflare API, to save and personalize your learning. |
| Leaderboard | Your display name, total and weekly XP, and any developer badge can be shown to other signed-in learners. Eligible accounts can appear automatically after earning XP; opening the leaderboard or changing a username can also publish a row. |
| Tutor conversations | Messages, recent conversation history, and relevant learning context are sent through our API to DeepInfra to generate replies. This can include text transcribed from your speech and study material shown in the tutor. |
| Microphone recordings | When you use speech recognition, audio is sent to ElevenLabs Scribe, either through our API or directly using a temporary realtime token. Transcripts are returned for the feature you are using. |
| Spoken replies & articles | Text is sent directly to MiniMax to generate audio, including tutor replies and Studio article text. A developer-only experimental setting can use xAI instead for tutor speech. These speech-generation requests send text, rather than your microphone recording. |
| Studio photos | Photos you upload are temporarily stored in private Cloudflare R2 storage and sent to DeepInfra, which serves the Qwen vision model for text extraction. Extracted text can become saved decks or articles. The configured OCR route does not send photos directly to Alibaba or Qwen. |
| Article timing | Generated article audio and its text may be sent to ElevenLabs to align words with playback. Temporary audio and timing results are stored in private Cloudflare R2 storage. |
| Payments | Stripe collects payment details using its hosted or embedded checkout. We exchange account identifiers and purchase information with Stripe, and keep subscription status and billing identifiers to manage access. Card entry is handled by Stripe. |
| Account and billing emails | Resend processes your email address and message contents to deliver verification, password reset, email-change, security, subscription confirmation, cancellation, and renewal reminder messages. |
| Security & diagnostics | Cloudflare processes IP addresses, network and request information, rate-limit records, and diagnostic logs. Google Firebase App Check and reCAPTCHA process browser/device and interaction signals to help detect abuse. Browser error reports are scrubbed and reduced before being written to Cloudflare logs. |
| Password checks | Have I Been Pwned’s Pwned Passwords service receives the first five characters of a password hash to check for known breaches. It is not sent your password or the complete hash. Some checks run in the browser, so that provider also receives the browser’s network request. |
| Feedback & reports | Reports you submit, relevant study or issue details, and your account ID and email can be stored in Firestore for support and moderation. Authorized administrators can review them. |
| Page resources | Google Fonts, Google-hosted SDKs, cdnjs, and jsDelivr receive ordinary browser requests when they supply fonts or code, including network information such as your IP address. |
Purposes and legal bases
Where European or UK data protection law applies, the proposed bases are performance of the service contract for accounts, cloud learning, requested AI features, and purchases; legitimate interests in protecting the service, diagnosing faults, and responding to support requests; and legal obligations for records we are required to keep. Where consent is required for an optional use or device storage, it must be obtained separately and can be withdrawn.
Before publication, the operator must confirm these bases, including the basis for automatic leaderboard participation, and any required consent flows. A microphone permission or a link to this policy is not blanket consent to all processing.
How long information is kept
- Account and saved learning data: kept to maintain your account and saved work until you delete the relevant content or account, subject to records needed for legal, billing, security, or dispute purposes.
- Subscription consent: we keep the renewal terms you accepted, the acceptance time, account and billing identifiers, and associated notice records throughout the subscription and until the later of three years after acceptance or one year after termination. These records may remain after account deletion to meet legal obligations.
- Temporary Studio jobs: have a 24-hour expiry. Uploaded photos are removed from the stored job when the processing queue takes them for OCR. Expired jobs, temporary article audio, and timing files are scheduled for cleanup; deletion is not guaranteed at the exact expiry second. Saved decks and articles are separate from these temporary jobs.
- Voice and tutor requests: our transcription and tutor endpoints process requests without saving a permanent conversation or microphone recording in the application database. This does not mean providers retain nothing. Their terms, account settings, security records, and applicable law govern their processing.
- On-device data: browser storage and downloaded exports can remain until you clear or delete them. Clearing browser storage can remove unsynchronized learning progress.
Deleting an Ailulang account does not necessarily erase a payment provider’s required transaction records or every operational log immediately.
Retention periods for support reports, operational logs, security records, billing records, backups, and provider-side data must be confirmed before publication. This draft does not promise a verified deletion deadline for them.
Your choices and rights
- Review and correct: use Settings → Account to review your account and update available account details. Learning preferences are available in Settings.
- Export: use the learning-progress export in Settings. This is a learning backup, not a complete export of every record held by every provider.
- Delete: use Delete account in Settings. The app requires recent authentication, cancels an active recurring subscription before proceeding, and removes account and saved learning data. Wiping learning progress is a separate action and does not delete your account or subscription.
- Optional content: you can avoid uploading photos or using voice/tutor features. You can revoke microphone permission in your browser or device settings.
Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal information, restrict processing, object to processing based on legitimate interests, or withdraw consent without affecting earlier lawful processing. You may also complain to your local data protection authority; in the UK this is the Information Commissioner’s Office.
Account details are necessary to create and maintain an account; payment details are necessary for a purchase. Photos, voice input, and tutor messages are optional, but the related feature needs that input to work. Learning recommendations and XP are automated features; they are not intended to make decisions with legal or similarly significant effects.
A monitored privacy-request address must be added below so people can exercise rights beyond the existing self-service controls, including after losing account access.
Cookies, local storage, and tracking
The app and its authentication/security providers use browser storage and related technologies to maintain sessions, save preferences and progress, and protect the service. Blocking or clearing storage may affect these features.
Do Not Track: the current app does not change its behavior in response to browser Do Not Track signals. Do Not Track is distinct from legally recognized opt-out signals such as Global Privacy Control; this statement does not waive any applicable rights.
Advertising: the current main-app configuration does not load advertising. A separately hosted Ailulang ad page contains Google AdSense. If you visit that page, Google and its advertising partners may use cookies or identifiers to collect information about activity across sites and personalize or measure ads. See how Google uses information from partner sites.
Third-party services may collect network and browser information when their resources load. The absence of ads in the main app does not mean no information is sent to third parties.
Where processing happens
Providers can process information outside your country, including in the United States. DeepInfra’s privacy policy describes US processing. MiniMax’s international API policy identifies Nanonoble Pte. Ltd. in Singapore and describes US data-center storage. The model developer’s home country alone does not establish where your data is processed.
US processing can still be an international transfer for people in the EEA or UK. Storage location alone does not establish all processing locations, remote access, subprocessors, or the legal protections for a transfer.
Before publication, confirm actual provider regions, contracts and subprocessors, the applicable transfer mechanism for each provider (such as an applicable adequacy decision or executed contractual safeguards), and how users can obtain information or a copy of those safeguards. This draft does not claim that those arrangements are already in place.
Changes and contact
When this policy changes, its updated date will change. Material changes will be announced through a prominent notice in the app or an email to account holders. If a new use requires consent, it will be requested separately.
Contact the operator
To be completed: the developer’s legal name (trading as Ailulang), a monitored privacy email address, and any other contact or representative details required for the service. No request link is enabled until that inbox exists.