1. Who this policy covers
This policy applies to the Qelumi mobile apps, progressive web app, website and associated services at qelumi.com. Qelumi is the data controller for the personal data described here. For privacy questions or requests, contact support@qelumi.com.
In plain language: Qelumi needs an account and learning data to remember your vocabulary and personalise practice. You can use some features anonymously, export selected learning data and permanently delete your account.
2. Information we collect
| Account information | Firebase user ID, email address, email-verification status, authentication provider, display name and, if you create one, your unique Qelumi username. |
|---|---|
| Translation and learning content | Words, expressions and text you submit; selected source and destination languages; translations; search history; saved examples; lists; recall schedules; weak words; mistakes; game results; pronunciation and learning-session results. |
| Language Lab content | Text, transcripts, grammar checks, writing reviews, Context Lens requests, read-aloud items and conversations you choose to save. |
| Voice, images and camera input | Audio, photographs or images are accessed only after you choose the relevant feature and grant permission. Content needed for transcription, image understanding, pronunciation assessment or translation may be sent securely for processing. |
| Connected conversations | Your username, selected languages, invite/room information, transcribed text and translations exchanged in a two-device conversation. Other participants may save their own copy. |
| Feedback and support | Your feedback text, category, optional reply email, account identifier, date and any attachment you deliberately include. |
| Operational information | Request timestamps, feature or model used, latency, token counts, cache status, outcome and error details. Our hosting providers may also process standard network and security information such as IP address and user agent. |
| Device preferences | Interface language, speech voice/accent and speed, optional confidence display, study scope, notification permission and local app settings. |
Qelumi does not ask for your password outside the secure Firebase sign-in interface. Password credentials are handled by Firebase Authentication and are not visible to Qelumi administrators.
3. Device permissions
Microphone and speech
Used when you dictate, transcribe, practise pronunciation, shadow speech or use Conversation Mode. Qelumi starts listening only after you press a microphone or recording control.
Camera and photos
Used when you photograph or upload text for translation or Context Lens. Qelumi does not scan your photo library in the background.
Notifications
Used only if you enable study or recall reminders. You can disable them in your device settings at any time.
Speech output
Read Aloud and speaker controls use voices available through your device or browser. Voice availability and processing can depend on your operating-system provider.
4. How we use information
- Authenticate you, keep your account secure and sync private learning data across devices.
- Translate, validate source language, explain meanings, generate examples and provide grammar or writing guidance.
- Deliver speech, transcription, pronunciation assessment and bilingual conversation features.
- Build spaced-repetition schedules, recommendations, learning dashboards and personalised games.
- Operate a shared global dictionary so a complete, previously generated translation can load faster for other users. Shared dictionary entries contain linguistic content, not the original user’s identity.
- Prevent abuse, enforce rate limits, diagnose errors, measure reliability and improve Qelumi.
- Respond to support requests and deliver feedback notifications.
- Meet legal obligations and protect users, Qelumi and the public.
5. Legal bases
Where UK or European data-protection law applies, Qelumi relies on:
- Performance of a contract to provide the account, translation, synchronisation and learning services you request.
- Legitimate interests to secure, maintain and improve the service, prevent abuse and understand aggregate performance, balanced against your rights.
- Consent where your device asks you to grant microphone, camera, photo, notification or similar permission. You can withdraw device permission at any time.
- Legal obligation where records must be kept or disclosed under applicable law.
6. Service providers and sharing
Qelumi uses carefully selected processors to run the service. Data is shared only as needed for the relevant feature:
| Google Firebase | Authentication, Firestore data storage and Firebase Hosting. |
|---|---|
| Google Gemini | Translation, linguistic analysis, image/text understanding and supported learning features sent through Qelumi’s secure backend. |
| Render | Hosting for Qelumi’s authenticated backend and API routing. |
| Resend | Delivery of feedback notifications and related service email. |
| Apple, Google and device/browser providers | Sign-in, speech recognition, text-to-speech, notifications and native device capabilities when you use them. |
We may also disclose information when legally required, to investigate fraud or security incidents, or in connection with a business reorganisation where equivalent privacy protections continue to apply. We do not sell personal data or share it for cross-app advertising.
7. Artificial intelligence
Some Qelumi results are generated or assessed using artificial intelligence. Text, selected language information and relevant optional media are sent to the configured AI service only to perform the feature you requested. AI-generated content can be incomplete or incorrect, so important results should be independently checked. Qelumi’s global dictionary may reuse completed linguistic results to reduce waiting time and repeated model requests.
8. Retention and deletion
- Private learning data: kept while your account is active or until you delete the item or account.
- Connected conversations: live rooms include an expiry marker. A conversation you or another participant deliberately saves may remain in that person’s private account until they delete it.
- Feedback: kept as needed to investigate, respond and maintain a support record.
- Operational records: identifiable request records are kept only as needed for security, debugging and service improvement. Aggregated statistics may remain after identifiers are removed.
- Legal/security records: limited records may be retained when necessary for fraud prevention, dispute resolution, security or legal compliance.
You can initiate full account deletion inside Qelumi under Settings → Delete Account or at qelumi.com/delete-account. Account deletion removes the authentication account and Qelumi-controlled personal data associated with it, subject to the limited exceptions above.
9. Security
Qelumi uses encrypted HTTPS connections, Firebase security rules, authenticated backend endpoints, access controls, rate limits and administrator checks. No internet service can guarantee absolute security. Use a strong, unique password, protect your device and contact support@qelumi.com if you suspect unauthorised access.
10. International transfers
Qelumi and its providers may process data in countries other than your own. Where required, transfers use recognised safeguards such as adequacy decisions, standard contractual clauses or provider data-protection terms.
11. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, restrict, object to or delete personal data, and to complain to a data-protection authority. You can:
- Review and delete individual saved items inside the app.
- Use Settings → Import & Export for supported vocabulary exports.
- Change microphone, camera, photo and notification permissions in device settings.
- Delete your account in the app or on the account-deletion page.
- Email support@qelumi.com for another privacy request.
We may need to verify your identity before completing a request. You may also contact the UK Information Commissioner’s Office or your local supervisory authority where applicable.
12. Children
Qelumi is not directed to children under 13, and we do not knowingly collect personal data from a child under 13 without appropriate authorisation. If you believe a child has provided personal data improperly, contact us so we can investigate and delete it.
13. Changes and contact
We may update this policy when features, providers or legal requirements change. The current version and its effective date will remain available at this URL. Material changes may also be announced in Qelumi.
Contact Qelumi
Email: support@qelumi.com
Website: https://qelumi.com
Support: https://qelumi.com/support