VivaLingua

This Privacy Policy describes how Sevenfires AI LLC ("we," "us," or "our"), located in Wisconsin, United States, the parent company and owner of the VivaLingua mobile application and the website at vivalingua.app (collectively, the "Service"), collects, uses, and shares information. We comply with GDPR, CCPA, and LGPD.

1. DATA WE COLLECT

• Account data: name, email address, hashed password, and language preferences
• Usage data: call and session duration, call history, plan, and transactions
• Device data: platform (iOS/Android) and app version
• Security logs: account and session activity events
• Support data: when you report an issue in the app, we collect the category and description you submit and technical context including app version, device model, operating-system version, and language settings. We also maintain the ticket's status and internal support notes. Authorized administrators may review this information to investigate and respond to your report.
• Diagnostic and crash data: when something fails in the app — a translation error, a blocked call, or an unexpected crash — we collect an error code, where it happened, the app version, the update identifier, and the platform. For a crash we also collect the technical stack trace and the error message. Before any of this leaves your device, email addresses, web addresses, and long numeric sequences are automatically removed from the message, and file paths are shortened. Unlike the anonymous performance data in section 6, these records are linked to your account so we can investigate a specific report. They never contain what you said or the text of a translation.
• Video-call speech: Daily.co carries video-call audio. Each participant's audio is processed with Deepgram for real-time speech-to-text. Finalized source transcript text is then sent to Google Cloud Translation to produce the other participant's selected language.
• In-person speech: in-person audio is sent through VivaLingua's service to Deepgram for real-time speech-to-text. If cloud transcription fails and an on-device speech model is available, VivaLingua may use that model as a backup. Finalized source transcript text is sent to Google Cloud Translation to produce the selected language.

2. HOW WE USE YOUR DATA

• To provide and operate the VivaLingua service
• To process payments and manage your plan
• To send transactional emails (account confirmation and password reset)
• To detect and prevent fraud and security violations
• To investigate, respond to, and manage support requests
• To diagnose crashes and errors so we can fix them
• To confirm your email address before granting promotional free minutes
• To comply with legal obligations

3. DATA SHARING

We NEVER sell your data or share it with third parties for marketing purposes. We only share data with:

• Stripe — for payment processing (contractually protected)
• Daily.co — for video-call infrastructure (contractually protected)
• Deepgram — for real-time speech-to-text during video calls and in-person sessions (contractually protected)
• Google Cloud Translation — to translate finalized video-call transcript text and in-person spoken text (contractually protected)
• Google Cloud Text-to-Speech — to turn the translated text into the spoken audio the other person hears (contractually protected)
• Resend — for transactional email delivery (contractually protected)

All service providers are contractually prohibited from using your data for any purpose other than providing their services to us.

4. DATA RETENTION

We retain your account data while your account is active. Upon account deletion, your personal data is removed within 30 days, except where legally required to retain it longer.

Support tickets are deleted when you delete your account. Tickets marked resolved or closed are also automatically deleted 180 days after their last update. Open and in-progress tickets are retained so we can continue investigating and responding to them.

For video calls and in-person sessions, VivaLingua does not persist the source transcript. A translated result — the translated text and the spoken audio generated from it — is cached temporarily to make delivery retries safe and is normally deleted when the call or session ends. If it is abandoned, that result becomes eligible for automated deletion after 24 hours. Because automated cleanup runs daily, it may remain for approximately 48 hours. Processing and retention by Daily.co, Deepgram, Google Cloud Translation, and Google Cloud Text-to-Speech are also subject to those providers' terms.

Diagnostic and crash records are automatically deleted 60 days after they are received, and are also removed when you delete your account.

Email verification codes are stored only as a hash, are single-use, and expire 30 minutes after they are sent.

5. YOUR RIGHTS

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Opt out of non-essential communications

To exercise these rights, contact contact@sevenfires.ai

6. PERFORMANCE METRICS & APP IMPROVEMENT

To improve VivaLingua's translation speed and reliability, we collect anonymous technical performance data: response-time and speed measurements, error rates, queue and cache statistics, device type (iOS/Android only), app and OS version, connection type (WiFi/cellular), call duration in seconds, and which playback mode you used.

We explicitly do NOT collect your name, email, or any identifier; who you called or your contacts; what you said (no recording or transcription); which languages you used; your location; device IDs; IP addresses; or any session identifier that could tie a submission back to you. Submissions are never linked to your account — they are sent without any sign-in information attached.

This data is stored for 90 days and then automatically deleted, is never shared with or sold to third parties, and is used solely to find and fix technical issues. You can turn this off anytime in Settings → Privacy → "Help improve VivaLingua," with no effect on how the app works for you. Because nothing we collect identifies you, there is no individual record to delete if you ask — see Settings for details.

This section covers only the anonymous performance data described above. The diagnostic and crash records in section 1 are a separate, smaller set that IS linked to your account, so that a specific failure can be investigated and so that those records can be deleted with your account. They are retained for 60 days.

7. CHILDREN'S PRIVACY

VivaLingua is not intended for users under 18. We do not knowingly collect data from children.

8. SECURITY

We use industry-standard encryption and security practices to protect your data. Passwords are never stored in plain text: they are stored as salted PBKDF2-HMAC-SHA256 hashes with 100,000 iterations. Password-reset and email-verification codes are hashed the same way.

9. INTERNATIONAL TRANSFERS

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place.

10. CONTACT

For privacy inquiries: contact@sevenfires.ai

Sevenfires AI LLC, Wisconsin, United States
vivalingua.app