Privacy Policy
Last Updated: September 15, 2026
1. About this policy
This policy explains how AIMANACK LLC, doing business as Glotta ("Glotta," "we," "our," or "us"), handles personal information when you use the consumer Glotta application, website, and related language-learning services.
This policy covers individual consumer accounts, including an account a parent or legal guardian creates and manages for a minor. It does not govern accounts created and managed by a school. School-managed accounts are covered by Glotta’s Student & Children’s Privacy Notice.
2. Children’s privacy and parent-managed accounts
You must be at least 18 years old to create a consumer account. A parent or legal guardian may create and manage an account that a minor uses with the parent’s permission and supervision. Minors may not independently create consumer accounts.
When COPPA applies to a child under 13, we obtain verifiable parental consent before collecting personal information from the child. A parent may review or request deletion of the child’s information, withdraw consent, or refuse further collection by contacting us. Refusing further collection may require closing or restricting the child’s account.
Students using credentials issued by a school are governed by the separate Student & Children’s Privacy Notice, not this consumer-account section.
3. Information we collect
Information you provide
- Adult account-holder name, email address, password hash, language preferences, and profile settings. For a parent-managed minor account, we may also collect the child’s display name or nickname and information needed to establish age eligibility and parental consent.
- Prompts, written responses, uploaded content, voice recordings, transcripts, and feedback.
- Support communications and survey responses.
- Subscription and billing-contact information. Stripe processes payment-card details.
Information collected automatically
- IP address, browser, device, operating system, and approximate region.
- Login, lesson, feature-usage, crash, diagnostic, and security data.
- Cookies and similar technologies used for authentication, preferences, security, and permitted analytics.
4. How we use information
We use information to create and authenticate your account; provide language lessons, chat, speech processing, and feedback; personalize your experience; process subscriptions; communicate about the service; provide support; monitor reliability; prevent fraud and abuse; enforce our terms; and comply with law.
Where GDPR or UK GDPR applies, our legal bases may include performance of our contract with you, compliance with legal obligations, our legitimate interests in operating and securing Glotta, and consent where required.
5. AI and voice processing
Glotta sends the information needed to contracted AI, speech, and voice providers to generate responses, synthesize speech, transcribe audio, and provide language feedback. These providers are contractually prohibited from using Glotta customer content to train public or general-purpose AI models.
Voice recordings are used to provide speaking practice, transcription, pronunciation feedback, and conversation features. Recordings are retained only for the period disclosed in the relevant feature or account controls and may be deleted through available controls or by verified request. A parent may make this request for a parent-managed minor account. AI output may be inaccurate and should not be relied upon for professional translation or critical decisions.
6. When we share information
We do not sell personal information, use a child’s information for targeted advertising, or create advertising profiles from a child’s learning activity. We share information with contracted providers supporting hosting, storage, authentication, AI and speech processing, analytics, communications, customer support, security, and payments; when you direct us to; during a corporate transaction subject to appropriate protections; or when required to protect rights, safety, and legal interests.
7. Regional processing and transfers
Glotta separates European and United States processing environments. Information associated with EU, EEA, and UK users is hosted and routed through the European environment, while US user information is hosted and routed through the United States environment. Where cross-border processing is necessary, we use safeguards recognized by applicable law, such as adequacy decisions or Standard Contractual Clauses.
8. Retention and deletion
We retain personal information while your account is active and as needed to provide the service, maintain security, resolve disputes, and meet legal obligations. Following a verified account-deletion request, associated personal information is removed from active systems and backups within 30 days unless longer retention is legally required. Limited billing, fraud-prevention, or security records may be retained when necessary.
9. Your choices and rights
You may update certain account information, manage communications, and request account deletion. Depending on your location and subject to legal exceptions, you may also request access, correction, deletion, restriction, objection, or portability, or withdraw consent. We may verify your identity. GDPR and UK GDPR requests are ordinarily answered within one month.
10. Security, updates, and contact
We use access controls, encryption, monitoring, and other safeguards designed to protect personal information, but no service can guarantee absolute security. We may update this policy and will provide notice when required.
Privacy requests: privacy@glotta.ai
Support: support@glotta.ai