Skip to content

Privacy Policy

Last updated: April 30, 2026

1. Introduction

TalkBuddy CN ("we", "our", or "us") is operated by WayJet LLC. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile picture (if you sign in with Google). This information is used solely for authentication and personalization.

Learning Data

We store your learning progress, including phrases practiced, mastery scores, streak data, and saved phrases. This data is used to provide personalized learning recommendations and sync your progress across devices.

Voice Data

When you use pronunciation assessment features, your voice is sent to Azure Speech Service for real-time evaluation. We do not store your voice recordings. Audio is processed in real-time and discarded immediately after scoring.

3. Third-Party Services

We use the following third-party services:

  • Google OAuth — For optional social sign-in
  • Google Vertex AI — For AI-generated scenes, conversations, and smart assistance
  • Google Cloud Text-to-Speech — For text-to-speech playback
  • Azure Speech Service — For pronunciation assessment
  • Google Analytics 4 — For aggregated usage analytics (page views, feature engagement). Disabled by default; only loads after you click Accept on the consent banner. See section 6.

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data Storage & Security

Your data is stored in a PostgreSQL database with encrypted connections (TLS). API keys and sensitive settings are encrypted using AES-256-GCM. We implement rate limiting, input validation, and security headers to protect against common web vulnerabilities.

Data Storage Location

All user data is stored on Google Cloud Platform in the Asia-Pacific region (asia-southeast1, Singapore). All data in transit is encrypted using TLS 1.3. We comply with the transparency requirements of Vietnam's Cybersecurity Law 2018 (Luật An ninh mạng 2018) regarding user data handling and disclosure.

Vị trí lưu trữ dữ liệu

Toàn bộ dữ liệu người dùng được lưu trữ trên Google Cloud Platform tại khu vực Châu Á - Thái Bình Dương (asia-southeast1, Singapore). Mọi dữ liệu truyền tải được mã hóa bằng TLS 1.3. Chúng tôi tuân thủ các yêu cầu về tính minh bạch của Luật An ninh mạng Việt Nam 2018 về việc xử lý và công khai dữ liệu người dùng.

5. Your Rights

You have the right to:

  • Export your data — Use the Data Management feature to download your learning data as a JSON file
  • Delete your data — Contact us to request complete deletion of your account and data
  • Access your data — View all your learning progress, saved phrases, and settings within the app
  • Opt out — You can use the app without creating an account; data stays on your device only

6. Cookies, Local Storage & Analytics Consent

Essential storage

We use localStorageto store your learning progress, app preferences, saved phrases, and onboarding answers locally on your device. We use essential cookies for authentication (NextAuth session). These cannot be disabled — the app wouldn't function without them.

Analytics cookies (opt-in)

We use Google Analytics 4 (GA4) to understand aggregated feature usage and improve the experience. GA4 sets cookies (_ga, _ga_*) only after you click Accept on the consent banner. The default state is denied, implemented via Google Consent Mode v2 — meaning even though the GA4 script loads on every page, no analytics events are sent until consent is granted. We do not use advertising or cross-site tracking cookies.

Compliance

This consent flow is designed to comply with Vietnam Decree 13/2023 on personal data protection, China's PIPL (when accessed from China), and the EU GDPR / UK GDPR for visitors from those regions. navigator.doNotTrack is also honored.

Withdrawing consent

You can withdraw analytics consent at any time by clearing your browser's localStorage for this site (the tb_analytics_consent key stores your choice) — the banner will reappear on the next visit. A dedicated in-app toggle is on the roadmap.

7. Children's Privacy

TalkBuddy CN is designed for general audiences. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: hello@talkbuddy.wayjet.io
Company: WayJet LLC