Privacy Policy
nawana is a language-learning app that clones your voice — once, with your explicit consent — so you can practice speaking with a fluent version of yourself. Your voice is the most personal data there is, and this policy explains exactly what we do and don't do with it.
The short version
- One 60-second recording at setup. The app never records you outside a conversation or exercise you started yourself.
- Your learning data stays on your iPhone. Sessions, transcripts, drill cards, vocabulary, and progress are stored on your device, not on our servers.
- No ads, no tracking, no analytics SDKs. We don't sell or share your data for advertising, and the app contains no third-party tracking.
- Delete anytime. Re-recording your voice permanently deletes the old clone. Deleting your account removes your voice clone and account data.
What we collect and why
| Data | Why | Where it lives |
|---|---|---|
| Apple ID sign-in (user identifier, email) | Your account, subscription entitlement, invite credits | Our backend (Supabase) |
| 60-second voice recording | Creating your personal voice clone | Processed by ElevenLabs; the app keeps only a reference to your voice |
| Speech during conversations and shadowing | Transcription, fluent rewrites, and pronunciation scoring — the core features | Transcribed on-device where possible; conversation text is processed per-request and results are stored on your iPhone |
| Subscription and credit balance | Powering conversations, voice generation, and shadowing | Apple (purchase) + our backend (balance) |
Your voice, treated carefully
- Voice cloning happens only after you deliberately record the 60-second setup sample. There is no passive listening.
- Your clone reproduces only your own voice. nawana cannot be used to clone anyone else.
- Re-record anytime — creating a new clone permanently deletes the previous one.
- Delete your voice or your entire account anytime from the app (Me → Account).
Who processes data on our behalf
The app never talks to AI providers directly — every request routes through our own backend, so no provider API keys ever live on your phone.
- Supabase — authentication, subscriptions, and secure relay of AI requests.
- ElevenLabs — voice cloning and speech synthesis of your fluent lines.
- Google (Gemini) — conversation replies, fluent rewrites, and session analysis. Text only; your audio is not sent to Google.
- Apple — Sign in with Apple, subscriptions, and on-device speech recognition.
These processors act under contract for us and may not use your data for their own purposes.
What we don't do
- No advertising, no data sales, no cross-app tracking.
- No third-party analytics SDKs inside the app.
- No recording outside an activity you started.
- No use of your voice or conversations to train our own or third-party AI models.
Retention and deletion
- Learning data (sessions, drills, progress) lives on your device and disappears when you delete the app.
- Your voice clone exists until you replace it, delete it, or delete your account.
- Account deletion (in the app: Me → Account → Delete account) removes your voice clone, account record, and credit balance. Purchase records are retained by Apple per their policy.
Your rights (GDPR)
Dear RoRo (Munich, Germany) is the data controller. You have the right to access, correct, export, restrict, or delete your personal data, and to lodge a complaint with a supervisory authority. Voice data is processed on the basis of your explicit consent, which you can withdraw at any time by deleting your voice or account.
Children
nawana is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
Changes and contact
If this policy changes materially, we'll note it in the app or on this page. Questions or requests: hello.dearroroapp@gmail.com