We never sell your email, progress, or voice recordings to data brokers or advertising networks.
Self-service export for all user data and activity in standard JSON directly from your account settings.
Self-service account deletion purges all database records and storage voice files permanently.
1Data Controller & Regulatory Scope
This Privacy Policy describes how Engitio (“Engitio”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use the Engitio web application, curriculum manager, and pedagogical AI tools. We operate in strict compliance with the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), the UK GDPR, and the California Consumer Privacy Act (CCPA).
2Information We Collect
We adhere to the GDPR principle of Data Minimization (Article 5(1)(c)), collecting only the information strictly necessary to provide an adaptive, personalized learning journey:
- Account Information: Name, email address, hashed security credentials, and optional avatar image.
- Learning Analytics & Progress: Assessment scores, CEFR target levels (A1–C2), Spaced Repetition (SRS) vocabulary intervals, completed missions, study session duration, and learning packages.
- Voice & Speech Audio Attempts: When participating in speaking drills or pronunciation practice, your recorded voice is stored in isolated user-scoped object storage solely for playback, transcription, and scoring.
- AI Coaching Interactions: Prompts, question submissions, and written outputs sent to our pedagogical coach for grammar correction, code review phrasing, and sprint roleplay.
3Legal Bases for Processing (GDPR Art. 6)
Under European data protection laws, we process your personal data under the following recognized legal bases:
Delivering your personalized IT curriculum, calculating review schedules, and providing interactive exercises.
Safeguarding application security, preventing fraud, detecting service errors, and maintaining high platform reliability.
Capturing microphone audio for speech assessment and sending study reminders via Web Push or Email.
Retaining transaction or audit logs where mandated by applicable financial or taxation authorities.
4Voice Storage & Pedagogical AI Policy
Engitio is committed to responsible, transparent AI practices designed specifically for learning:
Isolated Voice Storage: All recorded audio files are stored in private Cloudflare R2 object storage partitions strictly scoped by your User ID. No other learner can access your voice files.
Zero Model Training on Learner Data: Your spoken recordings and writing drafts are processed purely for real-time scoring and feedback. They are never ingested into open foundational models.
5Your GDPR Privacy Rights
Under GDPR Articles 15 through 22, you enjoy the following enforceable rights, supported directly through self-service tools in our application:
Download a machine-readable JSON archive containing your full profile, progress, assessments, and study sessions directly from Settings.
Request permanent account deletion. After an optional 30-day recovery grace period, all your records and R2 voice recordings are irrecoverably deleted.
Update your profile details, target CEFR goals, notification preferences, and time zone anytime in your settings dashboard.
Opt out of automated study reminders or sound effects with one click in Notification & Audio settings.
6Cookies & Storage Technology
Engitio uses strictly necessary cookies and local browser storage to keep you authenticated, remember your UI theme (Light/Dark), and preserve your language choice (Vietnamese/English). We do not deploy third-party advertising cookies, cross-site trackers, or behavioral profiling pixels.
Data Protection Officer Contact
If you have any questions about this Privacy Policy, wish to exercise any of your GDPR rights, or need assistance with your personal data, please contact our dedicated privacy team at:
Engitio — Data Privacy Officer
Email: support@engitio.com
Response SLA: Within 48 business hours (GDPR Article 12 compliance).