Privacy Policy

1. Who we are

This privacy policy applies to the Bhasha app for mobile devices (the "Application"), created and operated by SmallDreamz Pvt Ltd. (the "Service Provider", "we", "us", or "our") as a Freemium service, with free features and optional paid subscriptions. This service is intended for use "AS IS", subject to the rights described in our Terms & Conditions and applicable law.

Bhasha helps you learn Indian languages. This policy covers the Bhasha iOS and Android apps and bhasha.xyz, including account creation, lessons, pronunciation practice, subscriptions, and support. The Service Provider is responsible for the personal information described here.

Contact us at contact@bhasha.xyz about your information. The Terms & Conditions explain the rules for using Bhasha.

2. Google sign-in data

If you choose Sign in with Google, Bhasha requests basic sign-in permissions (openid, email, and profile). We receive your Google account identifier, name, email address, and an authentication token to verify your identity through Firebase Authentication. The sign-in response and authentication profile may also include your Google profile picture URL. Bhasha's learning profile uses your name, email address, and account ID.

We use this information to create and recognize your Bhasha account, keep you signed in, and associate your learning progress and subscription with your account across devices. We do not receive your Google password. Bhasha does not request access to your Gmail messages, Google Drive files, Google Calendar, or Google Contacts.

Your account profile is stored in Firebase Authentication, and your name, email address, and Bhasha user ID are stored with your learning profile in Cloud Firestore and in the app's local storage. Authentication credentials are handled by the Google and Firebase sign-in services.

Account information received through Google sign-in is also used in the services described below: account-linked analytics and diagnostics (Mixpanel, PostHog, and Sentry), messages and reminders (OneSignal), and subscription management (RevenueCat). Depending on your region and privacy choices, your account ID, name, and email may also be provided to Meta for advertising matching and measurement. These uses are in addition to authentication; see Services and data sharing.

You can remove Bhasha's Google connection in your Google Account connections. This stops future access through that connection but does not itself delete your Bhasha account or information already stored. See Retention and deletion for deletion options. Google sign-in is subject to the Google API Services User Data Policy.

3. Other information we collect

• Account and onboarding information: your name, email, sign-in provider, account ID, and joining date; the age range, gender, language, learning level, and how you found Bhasha that you provide during onboarding. These onboarding answers are saved with your account in Cloud Firestore and synchronized across devices. Sign in with Apple may provide your name and an email address, including an Apple private relay address if you choose one.
• Learning activity: course, lesson, letter, and speaking progress; activity results, XP, hearts, streaks, rewards, league state, preferences, and feedback. We store this to resume and synchronize learning.
• App, device, and usage information: screen visits, taps, session and purchase events, app version, operating system, device and installation identifiers, advertising identifiers where available, IP address, device locale/country, crash reports, errors, and performance measurements. Identifiers can include Firebase installation IDs, analytics app-instance IDs, Android advertising IDs, and push notification tokens. Providers may infer an approximate location from your IP address. We do not request GPS or precise-location permission. Some identifiers are collected automatically when you use the app, including when you do not record audio or view an ad.
• Voice practice: when you grant microphone permission and record an answer, the app records audio on your device and sends it to Google Cloud Speech-to-Text or Bhashini for transcription. The returned transcript is used to evaluate your pronunciation or response. Lesson text is also sent to Google Cloud or Bhashini to generate spoken audio. These speech services are separate from Google account sign-in.
• Purchases: subscription plan, purchase and transaction identifiers, entitlement status, and purchase history from your app store and RevenueCat. Apple or Google processes your payment; Bhasha does not receive your full payment card details.
• Notifications: push subscription/device tokens, permission status, reminder preferences, and notification interactions, linked to your account and learning activity to deliver relevant messages.
• Contacts and saved images: if you allow contacts access, the Invite Friends feature reads names and phone numbers on your device to show an invitation list. This list is not uploaded to our account database. When you share an invitation, the app you select handles it. Photo-library access is used when you choose to save a sticker or referral image.
• Support: your name, email, message, feedback, and submission time when you contact us. Website contact-form submissions are stored in a Google Sheet used by our team to handle requests.
• Website visits: Google Analytics, Vercel Analytics, and Vercel Speed Insights collect usage and performance information such as visited pages, referring pages, browser/device information, and page loading metrics. Google Analytics uses cookies or similar identifiers; browser settings can restrict these.

4. How we use information

• Authenticate accounts, save progress, and provide lessons and practice features.
• Personalize learning, reminders, rewards, and account communications.
• Validate purchases, restore subscriptions, and provide Pro features.
• Understand feature usage, diagnose crashes, and improve app performance and content.
• Display ads in the free experience and measure and improve advertising campaigns.
• Respond to support and privacy requests, protect the service, and meet legal obligations.

Where applicable law requires a legal basis, we process information to provide the service you request, for legitimate interests such as security and service improvement, to comply with legal obligations, or with consent where required, including for certain advertising and device permissions.

5. Services and data sharing

Bhasha uses the following providers. Data shared with them can identify your account; it is not limited to anonymous or aggregated statistics. The information each provider receives depends on the feature you use, your device, and applicable privacy choices.

• Google / Firebase: authentication and account information, cloud-stored profiles and progress, installation and device information, analytics, crash and performance reports, and app configuration. Google also provides speech processing, AdMob ads, and storage for website support submissions as described in this policy. See Google's Privacy Policy and Firebase privacy information.
• Mixpanel and PostHog: account-linked usage events, device information, language, subscription status, and learning activity to understand and improve the app. Mixpanel receives your user ID, name, and email; PostHog receives your user ID and name. See Mixpanel's Privacy Policy and PostHog's Privacy Policy.
• Sentry: error, crash, and performance information, device context, and your user ID, name, and email to investigate problems. See Sentry's Privacy Policy.
• OneSignal: your user ID, email, first name, push subscription information, language, subscription status, and learning activity such as streaks and progress to deliver and measure reminders and account or promotional messages. See OneSignal's Privacy Policy.
• RevenueCat, Apple, and Google Play: purchase and subscription records to process payments, manage access, and restore purchases. RevenueCat receives your Bhasha user ID, device identifiers used for attribution, and Meta app-instance identifiers, and may receive your name and email during purchase setup. Its Meta integration can forward trial, subscription, renewal, and purchase events with attribution identifiers to Meta for advertising measurement, subject to the integration settings and applicable platform privacy controls. See RevenueCat's Privacy Policy, Apple's Privacy Policy, and Google's Privacy Policy.
• Bhashini: recorded speech, the selected language, and text used for speech recognition and spoken lesson audio when this provider is enabled. See Bhashini's Privacy Policy.
• Vercel: website hosting, request/device information, usage analytics, and performance measurements. See Vercel's Privacy Notice.

Advertising and Meta

The free app uses Google Mobile Ads (AdMob). Advertising services may process IP addresses, device and advertising identifiers, ad interactions, and consent signals to deliver, personalize where permitted, and measure ads and prevent fraud. Pro removes in-app ads; it does not automatically disable analytics or campaign measurement.

We use Meta App Events to measure campaign results, including sign-ups, lesson activity, paywall visits, and purchases. Meta may receive app and device identifiers and event information. Where enabled by regional consent settings and device tracking permissions, the app also provides your Bhasha user ID, email address, and first and last name to Meta's matching service. This can include the name and email received through Google sign-in. Matching helps associate app activity with Meta accounts for advertising measurement and personalization. See Meta's Privacy Policy.

Where available, use Ad privacy choices in your Bhasha profile to review regional advertising choices. You can also manage tracking and advertising permissions in your device settings. Changing these choices does not automatically delete data previously received by a provider.

Other disclosures

We may disclose information when necessary to comply with law, respond to valid legal requests, investigate abuse, or protect users and the service. If the business is reorganized or transferred, information may be transferred subject to applicable law, notice, and any required consent. Information you choose to share through another app is handled by that app.

6. Storage and security

Bhasha stores account and learning information locally on your device and in Google Firebase services for synchronization. Our service providers also store the information they process for the purposes above. Processing may take place outside your country, including in countries where our providers operate. Applicable protections for international transfers depend on the service and relevant data-protection requirements.

We use HTTPS for network requests and authenticated access controls for cloud learning profiles. Local information is also subject to your device's security. No storage or transmission method is completely secure; keep your device and sign-in account protected.

7. Retention and deletion

We retain your account profile and synchronized learning progress while your account remains active, until you delete it or request deletion. Support records, diagnostic and analytics data, and transaction records may have separate retention periods based on their purpose, provider settings, and legal requirements. Records needed for accounting, fraud prevention, disputes, or legal compliance may be retained for those purposes. Backup copies may remain until the provider's deletion cycle completes.

Voice practice creates a recording file on your device and sends audio to the selected speech provider. Audio and transcripts are not saved as part of your synchronized learning profile. Local recording files may remain until overwritten or removed with app data; speech providers handle submitted audio under their own service terms and retention settings.

Delete your Bhasha account or data

You can request account deletion in either of these ways:

• In Bhasha, open Profile → Settings → Account → Delete Account. Successful deletion removes your Firebase sign-in account and cloud profile, including your name, email, onboarding answers, learning progress, streaks, rewards, and saved preferences, and resets your local account state. You may need to sign in again before this sensitive action can complete.
• Email contact@bhasha.xyz with the subject "Bhasha account and data deletion" and the email associated with your account. You can use this option without reinstalling the app. We may ask for information needed to verify account ownership; do not send your password.

Delete specific data without closing your account: email contact@bhasha.xyz with the subject "Bhasha data deletion request", your account email, and the information you want deleted, such as onboarding answers, learning progress, or a support message. Some account information is needed to keep your account working; we may need to clarify the scope of your request before proceeding. Do not send your password.

In-app account deletion does not automatically erase historical records held by every analytics, messaging, advertising, or subscription provider. Contact us to request deletion of associated personal data held by our providers; we will handle the request subject to identity verification, applicable legal requirements, and any necessary retention exceptions.

Uninstalling Bhasha, signing out, or disconnecting Google does not delete your cloud account. Deleting your account does not cancel an App Store or Google Play subscription; cancel it separately in the store to stop renewal. See subscription cancellation instructions.

8. Your choices and rights

• Update your display name in the app, or contact us to correct other account information.
• Revoke the Google connection through your Google Account settings.
• Manage microphone, contacts, photos, notifications, and tracking permissions in your device settings. Features that need a permission may be unavailable if you decline it.
• Adjust learning reminders in the app and disable push notifications in device settings. Use an unsubscribe option in promotional email, if provided, or contact us to stop promotional messages.
• Review available ad privacy choices and restrict website cookies in your browser.
• Contact us to request access, a copy, correction, or deletion of your personal information, or to withdraw consent or object to or restrict processing where applicable. Your rights depend on where you live; you may also be able to complain to a data-protection authority.

We may need to verify your identity before acting on a request. Withdrawing consent does not affect processing already carried out lawfully.

9. Children

Bhasha is not intended for children under 13, or anyone below the minimum age required to use the service in their country. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can investigate and arrange deletion. Minors who are eligible to use Bhasha should do so with a parent or guardian's permission.

10. Policy changes

We may update this policy as Bhasha changes. We will publish the revised policy here and update the date above. For material changes, we will provide additional notice and request consent where required before using previously collected information for a new purpose.

11. Contact us

For privacy questions, data requests, or concerns, contact SmallDreamz Pvt Ltd., the operator of Bhasha, at contact@bhasha.xyz or through our contact page.