Privacy Policy
Version 2026-11-09
1. Controller
Pisio Technologies SL, tax ID B93856136, calle Juan Ramón Jiménez, km 0, núm. 11, esc. 3, pta. 4, 08191 Rubí (Barcelona), Spain. Contact: privacidad@pisiotechnologies.com.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account and profile: email, name, language, goals, level and, if you choose, a password (hashed) or your Apple or Google identifier. | Create your account and tailor the exercises. | Contract (GDPR art. 6.1.b) |
| Audio recordings and their transcripts, including roleplay. | Analyze them and give you a score and feedback. | Contract |
| Your image, if you record video. | Assess your body language. It is not used to identify you. | Your consent (art. 6.1.a), given when you record video and withdrawable at any time by no longer recording video. |
| Progress: scores, Communication IQ, achievements and streak. | Show you your progress. | Contract |
| Purchases: store, product, dates and status. We never receive your card. | Activate and maintain your plan. | Contract |
| Technical data: IP, errors and sign-in attempts. | Security and fault detection. | Legitimate interest (art. 6.1.f) |
We do not sell your data and do not use it for advertising or to train AI models. Your score and feedback are generated by AI with no human review of your recordings: they are indicative and have no legal effect.
3. Who we share it with
Only with providers acting on our behalf, under contract:
| Provider | Purpose | Where |
|---|---|---|
| Hetzner | Server, database and encrypted backups. | Germany (EU) |
| Amazon SES | Sign-in code and password emails. | Ireland (EU) |
| Cloudflare | Secure connection between the app and the server. | US (global network) |
| OpenAI | Transcribe and analyze your recordings and generate roleplay replies. | US |
| Google (Firebase) | Phone notifications, if you turn them on. | US |
| Sentry | Technical errors, without personal data. | Germany (EU) |
Transfers to the US rely on the EU-U.S. Data Privacy Framework or standard contractual clauses. OpenAI does not use your data to train its models and may keep it up to 30 days to detect abuse. Apple and Google process your purchases as independent controllers.
4. How long we keep it
| Data | Period |
|---|---|
| Recordings | Deleted when the analysis ends. |
| Transcripts | 30 days. |
| Account, profile, progress and purchases | Until you delete your account. |
| Technical errors | 90 days. |
| Backups | Up to 30 days: what you delete disappears from them within that period. |
5. Your rights
You can request access, rectification, erasure, restriction, portability and objection by emailing privacidad@pisiotechnologies.com from your account email. We reply within one month. To delete your account: Profile → Settings → Delete account. You may complain to the Spanish Data Protection Agency (aepd.es) or to your local authority. If you live outside the EU, you also have the rights your local law gives you.
6. Minors and security
Uinflu is not for children under 16; if we detect a minor's account, we delete it. Connections are encrypted (HTTPS) and so are backups.
7. Changes
If we make a significant change to this policy, the app will ask you to accept the new version.