Privacy Policy

1. Information We Do NOT Collect

We want to be clear about what we don't do:

• We do not sell your personal information.
• We do not use your data for third‑party advertising or behavioural ad profiling.
• We do not require access to your camera, photo library, or contacts for the App's core features. Microphone access is requested only where needed for Speaking voice input, as described below.
• For optional Speaking practice, the App may request microphone access so you can answer aloud. Microphone access is not used for advertising profiling. If you do not grant microphone access, Speaking voice input may not work, but other parts of the App can still function.
• On‑device translation (see below) does not send your exam text to our servers for translation; we do not operate a paid "cloud translation API" for the help‑language feature.

2. Information We Collect

We collect information needed to run the App, authenticate you, sync your progress, and (when you use certain features) process data on your device or with trusted providers.

Accounts (Firebase Authentication)

If you sign in with email and password (or other methods we support), we process authentication data handled by Firebase according to its terms. This typically includes a user identifier, email address, and related security data needed to keep your account secure.

Profile and preferences (Cloud Firestore)

We store information associated with your account, such as:

• Display name and language preferences (for example UI language and help/translation language).
• Exam type selection (for example PD2 or PD3).
• Entitlement flags needed to unlock paid content, consistent with your purchases and our rules.
• Reading practice progress (for example scores or completion tied to practice sets), so your progress can sync across devices when you are signed in.
• Speaking practice progress and related session records (for example attempts, transcripts where applicable, and scores), where you use Speaking while signed in.

Exam and learning content

Exam texts, questions, and tasks are delivered from our backend so the App can show lessons and exercises. This content is not provided by you as personal data, but it is loaded while you use the App.

On‑device translation (Google ML Kit)

If you choose to translate Danish study text into your help language, the App uses Google ML Kit Translate on your device. Text you translate is processed locally after any required language model is downloaded. We do not send that text to our own servers for translation. Google's ML Kit and device‑level processing are subject to Google's terms and policies for those services.

Speaking practice (microphone, speech recognition, and transcripts)

If you use Speaking practice, the App may process audio from your microphone to produce speech‑to‑text transcripts of what you say. Depending on your device and settings, speech recognition may be handled on your device and/or using platform speech services provided by Apple (iOS) or Google (Android), which are subject to those companies' applicable terms and privacy notices for speech features.

To deliver Speaking features (for example simulated examiner turns, feedback, scoring, and progress), the App may send text derived from your speech (transcripts), related session metadata (for example task identifiers, timestamps, and scores), and other inputs needed to run the exercise to our backend services. Our backend may use automated processing, including AI / large language model services (for example Google Gemini), to generate responses and grading outputs.

We may store Speaking‑related records in your account (for example so you can review attempts across devices). The exact fields depend on the feature, but may include transcripts, model outputs (such as feedback text and scores), and technical metadata needed to operate the feature.

In‑app purchases

If you purchase a subscription or other products, Apple (on iOS) and/or Google (on Android) process payment and subscription records according to their store rules. We receive information needed to confirm entitlement so we can unlock features in the App. We use RevenueCat as a third‑party entitlement service, which processes purchase and entitlement data on our behalf, according to its terms.

Diagnostics and service operation

Like most apps, our infrastructure providers may automatically log technical data (for example timestamps, app version, error reports, security events) when you use the App, to keep the service reliable and secure.

3. How We Use Your Information

We use the information above to:

• Authenticate you and protect access to your account;
• Deliver exam content, exercises, and practice flows;
• Sync your preferences and practice progress across devices;
• Enforce free vs paid access;
• Operate, secure, debug, and improve the App;
• Operate Speaking simulations, scoring/feedback, and related progress features;
• Run automated analysis (including AI‑assisted grading and dialogue generation) where those features are enabled;
• Enforce access rules for paid, subscription, or credit/token‑based features;
• Comply with law and protect the safety and rights of users and others.

4. Data Storage, Retention and Security

Data is handled using industry‑standard practices, including encryption in transit (HTTPS) where applicable, and Firebase security rules and authentication to limit access. Retention depends on how long you use the App and whether you ask us to delete data: account and progress data generally remain until you delete them or close your account, subject to backup and legal requirements.

Speaking records may be retained as part of your account history until you delete them, delete your account, or we delete or anonymize them when no longer needed.

No system is completely secure. If we become aware of a breach affecting personal data and we are required to notify you or regulators, we will do so as required by law.

5. Third-Party Services and Sharing

We do not sell your personal information. We use service providers who process data on our behalf, including:

• Google Firebase (Authentication, Firestore, and related services) — processed under Google's terms and privacy policy.
• Apple speech features (iOS) — where iOS speech recognition is used as part of Speaking input, subject to Apple's applicable terms.
• Google speech features (Android) — where Android speech recognition is used as part of Speaking input, subject to Google's applicable terms.
• Google AI / Gemini — where we send transcripts or other text inputs to generate Speaking feedback, examiner dialogue, or grading outputs, processed under Google's applicable terms.
• Google ML Kit (on‑device translation) — processing on device subject to Google's applicable terms for ML Kit.
• Apple (App Store) — purchase processing on iOS, subject to Apple's terms.
• Google Play — distribution and purchase processing on Android, subject to Google's terms.
• RevenueCat — to verify purchases and manage entitlements.

We may disclose information if required by law or to protect safety and rights. Providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

6. Children's Privacy

Bestå is not directed at children under the age where parental consent is required for data processing in your region. If you are a parent or guardian and believe your child has provided us with personal information in a way that should not have occurred, contact us at the email below and we will take appropriate steps.

7. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data we hold; to object to or restrict certain processing; to withdraw consent where processing is consent‑based; and to complain to a supervisory authority. To exercise rights that are not available directly in the App or device settings, contact us at the email below. We will respond within the time required by applicable law.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy and change the "Last updated" date. For material changes, we will provide additional notice where appropriate. Continued use of the App after the effective date means you accept the updated policy.

9. Contact Us

If you have any questions or suggestions about our Privacy Policy, please contact us at besta@productnoob.com.