This policy applies to Omily Speak for Android and the services used by that app. It does not replace the separate iOS policy. Effective 27 September 2026.
Information we process
- Account information: your Google account identifier and the name and email Google provides. A separately provisioned review/test account uses an app username and a salted password verifier, not your Google password.
- Learning information: level, language, preferences, goals, practice history, answers, writing, transcripts, corrections, feedback and progress.
- Voice and practice content: speech sent for live AI conversation, assessments and pronunciation, together with the text and learning context needed to provide feedback.
- Purchases: Google Play purchase tokens, product and order identifiers, subscription status, renewal/expiry information and the account binding used to apply access. We do not receive payment-card numbers.
- Service and safety information: usage duration and quota, app/device version, connection and error information, security events, and content you explicitly submit in a support or AI-content report.
- Optional notifications: if you enable supported notification features, Firebase may create a registration token linked to your account. A notification token does not guarantee that reply alerts are available. You can disable notifications in the app and Android settings.
Purpose, providers and AI permission
We use this information to authenticate accounts, run practice, preserve progress, verify subscriptions, enforce usage allowances, receive safety/privacy requests and prevent abuse. We do not sell personal information or use it for cross-app advertising.
Google provides sign-in, Google Play billing and Firebase messaging; Railway hosts the Android service; LiveKit transports real-time media. Google Gemini processes live speech and tutor responses. Configured Google Gemini or OpenAI services may process text and learning content for corrections and feedback. These providers may process information in countries other than yours. We use access restrictions, encrypted transport and contractual safeguards where required.
The app asks for AI-sharing permission before sending new AI practice content. You can decline or withdraw that permission in Profile. This is separate from microphone permission and any optional research consent. Withdrawing permission does not automatically erase existing history. Ordinary practice is not added to an Omily research or model-training dataset without separate explicit research consent.
Retention and deletion
Account, learning history, transcripts and attributed reports are retained while your account exists so you can return to them. Delete your account in Profile or use the web account-deletion instructions. Deletion removes attributable learner records, reports, notification registrations and active sessions. Limited purchase-security records and non-content deletion markers may remain where necessary to prevent transaction replay or deleted-account recreation, resolve disputes or comply with law. Backups and service-provider records follow their applicable retention/deletion cycles; they are not a way to reactivate a deleted account.
Deleting an Omily account does not delete your Google account and does not cancel a Google Play subscription. Cancel that subscription separately in Google Play.
AI-content reports are retained for up to 90 days, or removed earlier when the associated account is deleted. Only the report text you choose to submit is attached; audio, photos and full transcripts are not automatically bundled.
Your rights and choices
You can change preferences, revoke optional permissions, manage Play subscriptions, and request access, correction, export or deletion. Contact support@omily.ai; we may verify ownership without requesting a password or verification code. We respond within applicable legal deadlines. UK users may complain to the Information Commissioner's Office, and other users to their local data-protection authority.
Where required, processing is based on the service contract, legitimate security/reliability interests, legal obligations, or consent for optional features. The app is not directed at children under 13. Users below their country's digital-consent age need a parent or guardian where required.
We use TLS and protected real-time media transport, account separation, restricted access, revocable sessions and server-side purchase checks. No system is perfectly secure. Material changes to this policy will be published here.
Google sign-in information
When you choose Google sign-in, Google provides an account identifier and, when available, your name and verified email address. We store these details in the Android service’s account records hosted on Railway and link them to your learner profile. We use them to recognise your account, authenticate access and keep your saved learning information associated with you.
A protected Omily sign-in session is stored on your device so you can stay signed in. Google sign-in does not give Omily access to your Google password, Gmail messages, contacts, calendars or files.
Google provides authentication and Railway hosts the account records. The service-provider, retention, deletion and rights sections above also apply to this sign-in information. We do not sell it or use it for cross-app advertising.