Privacy

Privacy policy

Last updated: 5 October 2026

Louddy is a language app where you practise speaking out loud with Lou, an AI tutor. This policy explains what data the Louddy app and this website handle, why, and the choices you have.

Who we are

The data controller for Louddy is EDSDEV INC. ("we", "us"). Louddy is published under the name Catio Apps. For any privacy question or request, email support@catioapps.com.

The short version

No sign-up. Louddy doesn't ask for your name, email or password. The app creates an anonymous ID on first launch.
Your voice goes to Google only while you hold the talk button. It is streamed to an AI model run by Google so Lou can answer. Louddy does not record or store your audio or transcripts on its servers.
Lou's memory of you is stored only on your phone. During a conversation it is included in the instructions sent to Google so Lou can build on past lessons. You can switch it off or delete it in the app (menu → My progress & settings).
Location is optional and off by default. If you turn it on, only your approximate city is used: it's kept on your phone and mentioned to Google's AI during conversations, never sent to our servers.
Delete your server data from the app with "Delete my data", or by email.
No ads. We don't show ads in the app and we don't sell your data.
Payments are handled by Apple, Google or RevenueCat/Stripe. We never see your card details.

What the app collects and why

Data	What it is	Why
Anonymous user ID	A random ID from Firebase Authentication (anonymous sign-in), created on first launch. Not linked to your name or email.	To keep your subscription, usage limits and notifications tied to your install. The app shows it as your support ID ("Copy support ID") so you can quote it when you contact us.
App integrity check	Firebase App Check asks Apple (App Attest) or Google (Play Integrity) to confirm requests come from a genuine copy of the app.	To protect the service from abuse and fraud.
Voice during conversations	Microphone audio while you hold the talk button, plus the instructions for Lou (see below).	To run the spoken conversation with Lou.
Talk-time and usage counters	Seconds of conversation per day and in total, a record per conversation (your anonymous ID, the date and seconds used), and daily counts of voice-playback requests.	To apply the daily and per-plan talk limits and keep costs under control.
Subscription status	Your plan (weekly or yearly), status (trial, active, expired…), expiry and renewal dates, where you bought it (App Store, Google Play or web) and the store's transaction ID. Purchase receipts are processed by RevenueCat, linked to your anonymous ID.	To unlock Premium, restore purchases and handle renewals, cancellations and refunds.
Notification token (only if you allow notifications)	A Firebase Cloud Messaging token, your platform, app language, the language you learn, your native language, your tutor mood, your time-zone offset, when you were last active and when we last sent a push.	To send practice reminders at a sensible local time, in the right language. Daily reminders are also scheduled on your phone.
Analytics	Google Analytics for Firebase: events such as onboarding steps, paywall views and purchases, conversation start/end with duration and number of turns, mood, language and topic choices, settings switches and permission answers; user properties (language you learn, native language, mood, whether you subscribe); and what the SDK collects automatically (app-instance ID, device model, OS and app version, approximate country/region, sessions). On Android, the SDK may also collect your device's advertising ID, subject to your device's ad settings. On iOS we don't ask for tracking permission, so the advertising identifier (IDFA) isn't collected.	To understand how the app is used and improve it. We never send what you say to analytics.
Reports about Lou's replies (only if you send one)	When you use "Report Lou's reply": the reason you pick, your optional comment, optionally the last few lines of the conversation transcript, and the mood, language and session details, stored with your anonymous ID.	To review harmful or wrong AI responses and improve Lou's safety instructions.
Remote configuration	Firebase Remote Config fetches settings for the app (for example, required-update checks).	To adjust the app without a new release.
Technical logs	Our servers (Google Cloud Functions) log technical events such as errors and purchase-notification outcomes.	To run, debug and secure the service.

The app does not include crash-reporting or advertising SDKs, and it doesn't access your contacts, photos or files. RevenueCat receives your Firebase app-instance ID so subscription events (trial started, renewal) can appear in our analytics.

Your voice and the AI conversation

Lou runs on a generative AI service from Google Cloud, in Google's US data centres. When you hold the talk button, your microphone audio is streamed to Google, and Lou's spoken reply streams back. Along with your audio, the app sends the instructions it builds on your phone: the language you learn, your native language, your tutor mood and topic, and, if those settings are on, your local time and time zone, your city and country, and Lou's memory of you (level, words, mistakes, topics). This context is read from your phone each time and goes only to Google for that conversation; it is not uploaded to Louddy's servers.

Louddy does not record, store or listen to your conversations, and keeps no transcripts on its servers. If you switch on "Show transcript", the text is generated by Google and shown on your phone only. The one exception: if you report a reply and choose to include the last few transcript lines, those lines are sent to us with the report.
Under Google Cloud's terms, Google does not use this data to train or fine-tune its AI models without our permission (Google Cloud Service Specific Terms, "Training Restriction").
To let a conversation continue after a dropped connection, Google caches the session (including audio and replies) for up to 24 hours.
Google runs automated safety classifiers and, if they flag possible abuse, may log prompts for up to 90 days solely to check for policy violations.

Lou's voice in lessons. For lesson phrases and some of Lou's lines, the app sends the text (never your voice) to our server, which turns it into speech with a Google Cloud speech service. The generated audio is cached by its text for up to 90 days so the same phrase isn't generated twice; the cache isn't linked to you.

Speaking exercises. Some exercises check what you said with your phone's built-in speech recognition (Apple Speech on iPhone, your Android device's speech service). Depending on your device and language, Apple or Google may process that audio on their servers under their own privacy policies.

What is stored only on your phone

Lou's memory. At the end of a conversation, Lou's AI writes a short summary (your level, new words, things to work on, topics) that is saved only on your phone, never on our servers. At the start of each later conversation it is included in the instructions sent to Google, so Lou can build on it. Turn it off with My progress & settings → "Remember my conversations", or delete it with My progress & settings → "Delete Lou's memory".
Location (off by default). If you turn on "Use my location", the app reads one approximate (coarse) location fix, your phone's geocoding service (Apple or Google) turns it into a city, and only the city and country are kept, on your phone. We never store coordinates. During conversations, the city and country are included in the instructions sent to Google's AI, for small talk.
Time and region. "Use my time and region in conversations" (on by default) includes your local time and time zone in the instructions sent to Google's AI, for small talk. Turn it off in My progress & settings.
Your progress, word list, streaks and settings are stored on your phone. Uninstalling the app deletes them.

Our website

Cookies and pixels. Google Analytics 4, the Meta Pixel and the TikTok Pixel load only after you click Accept on our cookie banner, to measure visits and ad campaigns. If you reject, none of them load. Change your choice any time with "Cookie settings" in the footer. Your choice is saved in your browser's local storage.
Speaking check. The quick speaking check on the website uses your browser's speech recognition. In Chrome, your audio is sent to Google to turn it into text. Louddy doesn't record or store it.
Quiz and checkout. Your quiz answers and speaking-check score are kept in your browser for the session. If you subscribe on the website, checkout is run by RevenueCat Web Billing with Stripe as the payment processor: they collect your email and payment details. We attach your quiz answers, speaking-check result and campaign parameters (such as utm_source or click IDs) to the purchase so we can set up your course and measure campaigns. An anonymous purchase ID is stored in your browser.
Our hosting provider (Firebase Hosting, Google) processes standard server logs such as IP address and browser type.

We don't sell or rent your personal data. We share it only with providers that run Louddy for us:

Google (Firebase Authentication, App Check, Analytics, Cloud Messaging, Remote Config, Hosting, Cloud Functions, Firestore; Google Cloud generative AI and speech services). Firebase privacy · Google Privacy Policy
RevenueCat (subscription management, web checkout). RevenueCat privacy
Stripe (payments on the website). Stripe privacy
Apple and Google (App Store and Google Play purchases), under their own terms.
Meta and TikTok, only on the website and only if you accept cookies.

We may also disclose data if the law requires it, or to protect our rights and users' safety.

Legal bases (EEA, UK and Switzerland)

Contract: running the conversation, lessons, subscription, usage limits and restoring purchases.
Legitimate interests: security and fraud prevention (App Check, logs), product analytics in the app, and controlling costs. You can object at any time.
Consent: notifications, location, microphone, and cookies/pixels on the website. You can withdraw consent at any time in your phone settings or our cookie settings.
Legal obligation: keeping purchase records where tax or accounting law requires it.

How long we keep data

Voice audio: not stored by Louddy. Google's session cache lasts up to 24 hours, and flagged prompts up to 90 days (see above).
Usage counters, conversation records and notification tokens: for as long as you use the app, until you tap "Delete my data" or ask us (see Delete your data).
Subscription records: while your subscription is active and afterwards as long as needed for renewals, refunds and tax or accounting law.
Reports about Lou's replies: as long as needed to review them and improve Lou; ask us with your support ID to delete them sooner.
Cached lesson audio: up to 90 days; it isn't linked to you.
Analytics: under the retention period set in Google Analytics.
Data on your phone: until you delete it in the app or uninstall the app.

Your rights and choices

Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, delete or receive a copy of your data, to restrict or object to processing, and to withdraw consent. Email support@catioapps.com; we answer within 30 days. Because Louddy has no accounts, please include your support ID (menu → My progress & settings → "Copy support ID") so we can find your data. You can also erase your server data yourself with "Delete my data". You can also complain to your local data-protection authority.

Choices in the app: "Delete my data"; turn off "Remember my conversations", "Use my time and region" and "Use my location"; delete Lou's memory; turn off reminders; deny microphone, notification or location permission in your phone settings.

Children

Louddy is not directed to children under 13 (or under 16 in the EEA and UK) and we don't knowingly collect their data. If you think a child has used Louddy, contact us and we will delete what we hold. The "No Filter" mood is for adults only (18+): it uses profanity and must be switched on with an age confirmation.

International transfers

Our providers, including Google and RevenueCat, process data in the United States and other countries. The AI conversation runs in Google's US region (us-central1), our database (Cloud Firestore) is stored in the United States, and our server functions run in Google's EU region (Belgium). Where data leaves the EEA or UK, transfers rely on the providers' safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

Security

Data is encrypted in transit. Our server functions only accept requests from genuine copies of the app (App Check), and the app contains no AI service keys. No system is perfectly secure, but we work to protect your data.

Changes and contact

We'll update this page when our practices change and change the "Last updated" date above; for important changes we may also tell you in the app. Questions: support@catioapps.com.