Privacy Policy

Last updated: February 2026

Overview

Dímelo (“we”, “our”) is committed to protecting the privacy of all users, especially children. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Account data: Email address, display name, birthdate (for age verification), and avatar emoji selections.

Learning data: Conversation messages with our AI tutor, vocabulary encountered, error patterns, session duration, XP scores, streak counts, and achievement progress.

Technical data: Basic device information for app functionality. We do not use tracking cookies or third-party analytics.

How We Use Your Data

Your data is used exclusively to provide and improve the language learning experience: personalizing AI conversations to your level, tracking progress, maintaining streaks, and enabling social features like grupo leaderboards.

Children's Privacy (COPPA)

We comply with the Children's Online Privacy Protection Act (COPPA). Children under 13 may only use Dímelo under a parent or guardian's account. We do not:

• Collect personal information from children beyond what is needed for the learning experience
• Share or sell children's data to third parties
• Allow children to make their data publicly available
• Require children to provide more data than necessary

Parents can review, delete, or refuse further collection of their child's data by contacting us.

Parental Rights Under COPPA

Parents of children under 13 have the right to:

• Review their child's personal information
• Request deletion of their child's data
• Refuse further collection of their child's data
• Withdraw consent at any time

To exercise these rights, contact us at privacy@dimeloapp.com or use the “Download My Data” and “Delete Account” options in Settings.

AI Conversations

Conversations with our AI tutor are processed by Google (Gemini API) to generate responses. The content of conversations, including text typed or spoken by users, is sent to Google's servers for processing. We do NOT send users' real names or email addresses to AI providers. Google may use conversation data per their API terms. We encourage parents to review Google's privacy practices.

Data Storage and Security

Your data is stored securely on Supabase (hosted on AWS). We use encryption in transit and at rest. Access to data is restricted to authenticated users within their account.

Your Rights

You have the right to:

• Access your data and your children's data
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your data in a portable format

Data Retention

We retain your data for as long as your account is active. Upon account deletion, all data including conversation history, progress, and personal information is permanently deleted within 30 days.

Changes to This Policy

We will notify you of significant changes via the app. Continued use after changes constitutes acceptance.

Contact

For privacy questions or to exercise your rights, contact us at privacy@dimeloapp.com.