Privacy Policy

Last updated: 22 August 2026 · Effective immediately

Lisan is a subscription app for practising spoken languages with an AI tutor. To do that, we record and analyse your speech. This policy explains what we collect, why, how voice data is processed, and the rights you have under the laws of the United Arab Emirates and the wider Gulf region. Our promise: your voice is used to teach you — never sold, never used for ads.

1. Who we are

Lisan ("Lisan", "we", "us") is the data controller for the personal data described here. For any privacy request, contact us at privacy@trylisan.app.

2. The law we follow

We process personal data in line with:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its executive regulations;
• Saudi Arabia's Personal Data Protection Law (Royal Decree M/19) where users are located in the Kingdom;
• applicable Apple App Store and Google Play data and subscription policies; and
• the protections of your local data-protection law where you live elsewhere.

3. Information we collect

Account & profile

• Account details — your name, email, and the sign-in identifier from Apple or Google. We never receive your password.
• Learning profile — the language you're learning, your explanation language, level, tutor voice, speed, goals and progress.
• Subscription records — payments are handled by Apple (App Store) or Google (Google Play); we never receive your full payment-card details. We use RevenueCat to manage subscriptions: it receives your purchase and subscription status and an entitlement/app-user identifier so we can unlock the right access.

Voice & learning content

• Speech recordings you make during lessons, and the transcripts and pronunciation scores generated from them.
• Your messages and saved phrases within conversations and the phrasebook.

Automatically

• Device & technical data — app version, device type and basic diagnostics to keep the service stable.
• Usage data — lessons completed, minutes spoken and streaks. We do not use advertising trackers and do not track your location.

4. Your voice & how AI processes it

Speaking is the core of Lisan, so we treat your voice with extra care:

• We record your speech only while you are in a lesson or drill, to transcribe it, score pronunciation, and let the tutor respond.
• Lisan asks for your explicit permission before sending lesson content to third-party AI services. Before the first AI request, the app identifies Google Gemini and Fish Audio, explains the information each receives, and asks you to choose "Allow and continue" or "Not now." If you choose "Not now," no lesson content is sent to these providers. You can review or withdraw permission under Profile → AI Data Sharing. Withdrawing permission prevents further AI requests until permission is granted again.
• Lisan does not automatically attach your account name or email address to AI-provider requests. However, anything you say or type may contain personal information and is transmitted as provided.
• We do not sell your voice, do not use it for advertising, and do not build a biometric voiceprint to identify you.
• You can delete your stored recordings at any time from Profile → Delete recordings.

5. Why we use your data

• To run lessons, score your speaking, and personalise your plan.
• To manage your subscription, trial and account, and provide support.
• To keep the service secure, prevent abuse, and meet legal obligations.

Our legal bases are your consent (which you may withdraw anytime), the performance of our agreement with you, and our legitimate interest in running a safe, working service — as recognised under the UAE PDPL.

6. Service providers we use

We share limited data with the trusted processors below, who act only on our instructions under written agreements. We do not sell personal data, and we do not share it for advertising. We limit each service provider to the information needed for the stated purpose and require service providers that process personal information for Lisan to maintain privacy and security protections that are the same as, or equivalent to, the protections described in this Privacy Policy and required by applicable law.

• Supabase — provides authentication, database, and storage services. It receives and stores account and profile data, learning preferences, lesson content, progress, transcripts, scores, conversation data, and recordings while needed for processing or when recording storage is enabled.
• RevenueCat — subscription management; receives purchase/subscription status and an entitlement identifier.
• Google Gemini — receives speech recordings or transcripts, typed answers, recent conversation history, scenario context, learning language, explanation language, level, learning goals, weak sounds, and recent mistakes when needed to transcribe and evaluate speech, personalise lessons, and generate tutor replies.
• Fish Audio — receives your speech recordings, language selection, and technical audio format information for speech-to-text. It also receives generated tutor text, language, selected voice, and speaking speed to create spoken tutor audio. This applies to all supported learning languages (English, French and Arabic).
• Sentry — receives crash and diagnostic information only when enabled.
• Apple App Store & Google Play — process your payments and subscriptions.

7. Where your data is stored & transferred

Where data must be transferred outside the UAE or your country — for example to an AI provider — we only do so to destinations that provide an adequate level of protection, or under safeguards required by the UAE PDPL and Saudi PDPL, such as approved contractual clauses.

8. How long we keep it

• Voice recordings — raw speech recordings are normally deleted after processing. Transcripts, feedback, scores, progress, and conversation history may remain associated with your account so Lisan can provide learning history and personalisation. Any stored recordings can be deleted from Profile → Delete recordings.
• Account & subscription records are kept while your account is active and as required for legal or accounting obligations.

9. Your rights

Under the UAE PDPL, the Saudi PDPL, and similar laws, you may access, correct, delete ("right to be forgotten"), object to or restrict processing, withdraw consent, request portability, and lodge a complaint with the UAE Data Office or your local regulator. To exercise any of these, email privacy@trylisan.app.

Account deletion

You can permanently delete your account inside the app at Profile → Delete account. After confirmation, Lisan deletes your authentication account, profile, learning preferences, lessons, conversations, progress, saved content, and stored voice recordings. Account deletion does not require contacting support or visiting another website. Subscription cancellation is separate and must be completed through your Apple or Google subscription settings.

10. Security

We protect your data with encryption in transit, access controls, and private-by-default storage. No system is perfectly secure, but we work to industry standards and will notify you and the relevant authority of a personal-data breach where the law requires.

11. Children

Lisan accounts are for users aged 13 and over, and a subscription requires an adult (18+) to manage payment. If you believe a child has given us personal data without the right consent, contact us and we will remove it.

12. Changes to this policy

We may update this policy as the app and the law evolve. We will post the new version here with a revised date and, for material changes, notify you in the app.

13. Contact us

Privacy questions, requests or complaints: privacy@trylisan.app · for general help, hello@trylisan.app