Who is responsible
Inimbal operates this platform and is the controller of the personal data described in this notice. Inimbal is operated from England and Wales, United Kingdom; no personal names or postal addresses are published in connection with the platform. For privacy questions or rights requests, contact support@inimbal.com or use the in-app contact form. This notice describes our processing under the UK GDPR and Data Protection Act 2018; it is not a certification of compliance.
Data we use and why
We use your email and account identifiers to authenticate you and manage your account through Lovable Cloud authentication, provided using Supabase. We also process your profile, optional avatar, language preferences, saved phrases, chat history, generated missions, corrections, scores, XP and learning progress to provide the service. Passwords are handled by the authentication service, not displayed to Inimbal staff.
Mission telemetry includes completion results and pronunciation confidence when available. Practice events record listened fragments, completed guided pauses and pronunciation attempt counts; those practice events do not contain your speech or recordings. If you enable voice input, the browser’s speech-recognition service may process audio; transcripts and recognition alternatives may be sent to our AI service for feedback. In-app microphone recordings are held locally for playback, not uploaded by the recording feature.
Legal bases and device storage
Our basis for account management and requested lessons is performance of our contract with you (Article 6(1)(b)). We rely on legitimate interests (Article 6(1)(f)) for proportionate security and service diagnostics, balanced against your rights, and legal obligation (Article 6(1)(c)) where records are legally required. Where consent is required for optional tracking or other processing, it must be obtained separately: agreeing to these documents is not consent to marketing or non-essential tracking.
The app uses browser storage to retain your sign-in session, language pair and preferred device voice. Microphone access is optional and requires device permission. Your browser or voice provider may have its own data practices.
Sharing, transfers and safeguards
We never sell personal data to third parties. This does not mean data is never shared: hosting, authentication, storage and AI providers process information needed to deliver the service. Your conversation and relevant learning context are sent to AI providers to generate replies, corrections, missions and assessments. Avoid entering sensitive or confidential information.
Account data and learning records are stored through Lovable Cloud with authenticated access controls. No system is completely secure. Processor-specific retention, processing locations and any international-transfer safeguards are not yet specified in this notice; contact us for current information before submitting sensitive data. We do not claim UK-only storage or that AI providers never retain inputs.
Retention and your rights
Account and learning records are retained to provide your account and learning history, subject to necessary legal and security retention. Exact retention periods and processor details are still being finalised; request current details at support@inimbal.com or through the in-app contact form. Signing out does not delete your account. You can export your learning data in My Profile and request account deletion by contacting us.
Subject to the applicable conditions, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it without affecting previous lawful processing. We normally respond to rights requests within one month, subject to lawful extensions and identity checks. You may complain to the Information Commissioner’s Office at ico.org.uk. AI learning assessments do not make legal or similarly significant decisions about you.