Dabotibi
Privacy Policy
Dabotibi is operated by Lagora Pte. Ltd., a private limited company incorporated in Singapore (UEN 202554924D) (“we”). This policy explains what we collect when you use the Dabotibi app, this website and its share pages, how we use it, who processes it, how long we keep it, and what you can do about it.
What we collect
- Account. On first open the app makes you an anonymous guest account; no email is needed. If you link an account, we receive your email and the account identifier Apple or Google provides, and keep any display name you set.
- Learning record. The lessons you take, your answer at each step (including what you typed), the words and expressions you have met, the steps you took on your map, your album, review schedule and study time.
- Speaking. The microphone is used only when you choose to speak. We keep the text your speech was turned into, never the recording. In a live conversation your voice is streamed to the speech model provider as you talk.
- Conversations with the AI. What you and the AI say in conversation lessons and practice.
- Settings and device. Your native language, the language you learn, your level, time zone, app version and store region.
- Purchases. Your subscription status and its dates. Payment is handled by Apple or Google; we never see your card.
- Analytics and error reports. With your consent, we record in-app usage events to improve the product (PostHog). Crash and error reports (Sentry) include your device model, system version and where the error happened. Analytics never receive what you typed or said.
- Sharing. When you share a card we record that the link is yours and which card it points to. When someone opens a share page, we keep only a salted hash of their network address, for up to 24 hours, so that the card can be handed to them when they install the app. The address itself is not stored.
- Network address. Our servers process the IP address of each request for security and rate limiting.
Why we use it
- To provide the service: write lessons for your level, check your answers, schedule reviews, and restore your progress on another device (performance of our contract with you).
- For security and to prevent abuse of the paid AI services we call (our legitimate interests).
- To improve the product through analytics, only with your consent.
- To manage subscriptions, answer support requests and meet legal obligations.
We do not sell your personal data or use it for third-party advertising.
Who processes it
We use the providers below to run the service. They process data on our instructions and may not use it for their own purposes. To write lessons and replies, the relevant text is sent to model providers.
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and server functions (servers in Mumbai, India) |
| OpenAI, Anthropic, and models reached through OpenRouter | Writing lessons, answering in conversations, checking answers, live voice conversations, spoken audio |
| Fish Audio, Google Cloud | Reading sentences aloud |
| RevenueCat | Subscription status (payments themselves go through Apple or Google) |
| PostHog | Product analytics, only if you allow it |
| Sentry | Crash and error reports |
| Apple, Google | Sign in with Apple or Google, purchases, push notifications |
| Cloudflare | This website and the share pages |
These providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
- Your account and learning record: until you delete your account.
- Deleting your account: it is deactivated at once and deleted for good, with all its data, 14 days later. You can undo it within those 14 days.
- Share-page visit hashes: up to 24 hours. Rate-limit records: hours to days.
- Error reports and analytics: per each provider’s retention, generally no more than 90 days.
Your choices and rights
- Export: in the app, Me → Settings → Privacy → Export My Data gives you a complete JSON file.
- Delete: see Delete your account.
- Withdraw analytics consent in the app’s privacy settings.
- Ask to access, correct, restrict or object to processing, or complain to your local data protection authority or to Singapore’s Personal Data Protection Commission. Write to [email protected]; we reply within 30 days.
Children
Dabotibi is not directed at children under 13. If you believe a child has given us data without consent, contact us and we will delete it.
Changes
If this policy changes in a meaningful way we will say so in the app or on this page and update the date above.
Contact
Lagora Pte. Ltd., a private limited company incorporated in Singapore (UEN 202554924D). Email: [email protected]