1. About This Policy

ByeGrammar is an AI-assisted language learning service that helps you improve your grammar and language skills through personalised feedback and learning resources. This policy explains what personal data we collect, how we use it, and your rights. For the purposes of UK GDPR, ByeGrammar is the data controller of your personal data. We do not sell your personal data.

2. Data We Collect

Account data — your email address, display name, and your settings and preferences. Content data — the content you submit for analysis, any directly derived versions of it, and learning materials saved to your account. Analytical data — error patterns, learning progress, and usage metrics generated through your use of the Service. Voice data — if you use voice input, your audio is processed by a third-party transcription provider. Payment data — your subscription status and billing reference. Full payment details are processed and held by our payment providers and are not stored by us. Usage and device data — actions taken within the app, features used, interaction history, and basic device information. Technical data — authentication tokens and standard server logs.

3. How We Use Your Data

• To provide, maintain, and improve the Service, including tracking your learning progress • To manage subscriptions and billing • To improve and develop our learning systems and features • To send service-related communications such as account verification and password reset • To detect and prevent abuse, fraud, and security threats to the Service

4. Data Sharing

We do not sell your personal data or monetise your content. We may share data with third-party providers only where necessary to operate the Service, including: • Cloud infrastructure and hosting providers • Security providers • AI and language model providers • Payment and subscription processors • Email delivery providers • Analytics providers We may also disclose data to law enforcement or regulatory authorities in response to a lawful request, or to report unlawful activity affecting the Service. All third parties are required to handle your data securely and in compliance with applicable laws.

5. Legal Basis (UK GDPR)

• Contract performance — providing your account, core Service features, and subscription management • Legitimate interests — improving and securing the Service • Legal obligation — where we are required to process data to comply with applicable law • Consent — push notifications, which you may withdraw at any time in your device settings

6. Data Retention

Your data is retained for as long as your account is active. When you delete your account, your personal data will be deleted or de-identified, subject to any retention obligations under applicable law. Accounts that have been inactive for an extended period may be terminated in accordance with our Terms of Service, after which data will be deleted or de-identified.

7. International Transfers

Your data may be processed outside the UK or EU. Where this occurs, we ensure appropriate safeguards are in place.

8. Your Rights

Under UK GDPR you have the right to: • Access your personal data • Correct inaccurate data • Request deletion of your data • Restrict or object to processing • Data portability • Withdraw consent where applicable To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We use appropriate technical and organisational measures to protect your data. However, no system is completely secure and we cannot guarantee absolute security. You are responsible for the information you submit through the Service; please avoid entering sensitive personal information into the Service.

10. Cookies

We use cookies and similar technologies to operate the Service and, where applicable, to understand how it is used and improve it.

11. Children's Privacy

The Service is not intended for users under 16 years old. We do not knowingly collect personal data from children under this age. If you believe a child has created an account, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy at any time. The current version is always available within the app. Where required by law, we will notify you of significant changes.

13. Contact

For privacy-related questions or to exercise your rights, contact us at support@byegrammar.com.