Privacy Policy

Last Updated: September 16, 2026

1. Who We Are

Al-Jamal is a language-learning application developed and operated by Kalimo.

The controller of the information is Eyal Atia, who operates Kalimo as a licensed dealer.

• Privacy questions and requests: privacy@kalimo-tech.com
• General inquiries and account deletion requests: info@kalimo-tech.com

2. Information We Collect

The types of information collected depend on how you sign up and which features you choose to use.

A. Personal Account via Google or Apple

• Email address, display name, and account identifier, as provided to us by Google or Apple and in accordance with the permissions you grant
• A unique user identifier within the Service and the sign-in provider you selected
• Last sign-in time and session tokens required to keep the account signed in

We do not receive or store your Google or Apple account password.

B. Account Assigned Through an Institution or Organization

• Username and password created by Kalimo for access to the Service
• A unique user identifier and association of the account with the relevant institution or organization
• The user's name, when the institution explicitly asks us to attach a name to a particular account

As a rule, the institution holds the link between the username and the student's identity, and Kalimo does not know who is using the account unless the institution asked us to provide or attach additional identifying details. Passwords for institutional accounts are stored using security measures that include encryption or hashing.

C. Profile and Preferences

• Profile photo, only if you choose to upload one
• Notification preferences, background music, and other usage settings
• Settings stored on the device to customize the user experience
• Device token and technical information needed to send push notifications, if you have agreed to receive notifications

D. Learning and Progress Information

• Word knowledge and mastery level by activity type
• Progress in the daily challenge and learning path
• Scores, achievements, levels, and experience points
• Learning activity history within the App

E. Real-Time Voice Conversation

When you use the real-time conversation feature, and after you grant microphone permission, your voice and conversation settings, such as the topic and difficulty level you selected, are transmitted to OpenAI to understand speech, manage the conversation, and provide learning feedback.

Kalimo does not proactively send OpenAI your username, email address, or account identifier as part of the conversation. OpenAI and communication providers may receive technical information associated with the connection, in accordance with the terms and policies that apply to them.

Kalimo does not store voice recordings, transcripts, conversation content, system responses, summaries, or feedback. The summary and feedback are shown temporarily at the end of the conversation and are not retained by Kalimo afterward. For cost calculation and usage control only, we retain the user identifier, conversation time, and duration.

The microphone is active only during the conversation and stops transmitting audio when the conversation ends, on disconnect, or when you leave the conversation screen. Providing voice input is not a legal obligation, but without it you cannot use the real-time conversation feature. You may continue to use the rest of the App.

Do not disclose sensitive personal information during a conversation that is not needed for practice, such as medical, financial, or government identification information, or confidential information about another person.

F. Technical and Operational Information

• IP address, access times, technical identifiers, and security logs that may be generated at infrastructure providers through use of the Service
• Device type, operating system version, and app version, where this information is required for operation, security, or support
• Purchase confirmations, subscription identifiers, product type, and subscription status received from the app stores

G. Information We Do Not Collect or Retain

• Phone number for registration or sign-in
• Age or date of birth
• Google or Apple account password
• Recording, transcript, content, summary, or feedback from the real-time conversation at Kalimo
• Information for the purpose of selling it to third parties

We do not currently use Firebase Analytics for general app usage tracking.

3. How We Use Information

• Creating, assigning, and managing personal and institutional accounts
• Verifying identity and enabling secure sign-in
• Providing learning features and real-time conversation
• Saving progress, achievements, and preferences
• Personalizing lessons and recommendations
• Calculating costs and controlling use of real-time conversation
• Sending notifications, reminders, and updates in accordance with your permissions
• Generating usage and progress reports for the institution that assigned the account
• Improving the Service and developing features using operational or aggregated information, without retaining real-time conversation content
• Securing the Service, preventing fraud and misuse, handling malfunctions, and providing support
• Meeting legal, accounting, and contractual obligations

4. Artificial Intelligence and Automated Content

Responses, translations, corrections, pronunciation notes, and summaries in the conversation feature are generated automatically using artificial intelligence. The content is intended for practice and learning only and may include errors or inaccuracies.

Kalimo has not chosen to share API data for training or improving OpenAI's models. This does not prevent limited processing or retention by OpenAI for providing the service, security, preventing misuse, or complying with legal requirements. Under the terms applicable to the service as of the date of this policy update, certain information may be retained in monitoring logs for a limited period of up to 30 days, unless other retention arrangements apply.

5. External Service Providers

We use providers that process information as needed to operate the Service:

• Google Firebase Authentication for authentication and sign-in
• Google Sign-In and Sign in with Apple for personal account sign-in
• OpenAI for operating the real-time voice conversation
• Cloudflare for infrastructure, security, communication, and hosting components of the Service
• Neon for database services and storage of account and learning data
• Apple and Google for app distribution, purchases, subscriptions, system notifications, and payment management

These providers operate in accordance with the terms, policies, and security mechanisms that apply to them. We may replace a provider, provided that use of information remains for the purposes described in this policy. When a replacement creates a material change in processing, we will provide appropriate notice.

6. Sharing of Information

We do not sell personal information. We may disclose information only in the following cases:

• To our service providers, to the extent required to operate the Service and for the purposes described in this policy
• To a competent authority when required by law, order, or binding legal process
• When necessary to protect rights, safety, property, users, or the security of the Service
• In connection with a merger, acquisition, investment, sale of activity, or reorganization, subject to law and protection of the information

Information Provided to Institutions and Organizations

When an account is assigned through an institution or organization, the institution may receive activity and progress data by the username assigned to it, or an aggregated group report. The data may include scores, progress, achievements, and learning activity history.

By default, the institution, not Kalimo, holds the link between the username and the student's identity. If the institution asks us to attach a name to an account, the name will be stored and used to manage the account and report to that institution.

The institution does not receive recording, transcript, content, summary, feedback, or usage data originating from the real-time conversation feature. The institution is responsible for providing users and their parents with required notice and obtaining required consents under law regarding use within the institution, without derogating from Kalimo's liability under applicable law.

7. Purchases and Subscriptions

When a purchase is made through the Apple App Store or Google Play, the relevant store processes payment details. Kalimo does not receive your credit card number. We may receive purchase confirmation, subscription identifier, product type, and subscription status to provide access to purchased features, handle support, and meet accounting and legal requirements.

8. Children and Minors

The App may be used by users of all ages, including children, teenagers, and students. Kalimo does not collect age or date of birth and does not currently operate an independent mechanism for age verification or parental consent. Sign-in through Google or Apple is not Kalimo's confirmation that the user is an adult or has parental approval.

A user who has not reached the age at which they may consent to processing of their information under applicable law may use the Service only after a parent or guardian has read this policy and the Terms of Use and approved use, and with supervision as needed. A parent or guardian who allows a minor to use the Service is asked to ensure the minor does not provide personal information that is not required, especially during voice conversation.

When use is within an institution or organization, the institution must ensure that required consents were obtained and appropriate notice was provided. A parent or guardian who believes a minor's information was collected or processed unlawfully may contact us to request access, correction, or deletion.

9. Retention and Deletion of Information

We retain personal information for the life of the account and as long as reasonably necessary to provide the Service, security, support, billing, compliance with legal requirements, dispute resolution, and enforcement of agreements.

Kalimo does not retain real-time conversation content. The user identifier, conversation time, and duration are retained as long as needed for cost calculation and usage control, and are then deleted or de-identified.

When a user requests deletion of their account, access to the account is stopped and the account is removed from the active system. Personal information remaining in the database, logs, or routine backups is deleted or overwritten within 7 days. Limited information may be retained beyond that only when required by law for security, fraud prevention, billing, dispute resolution, or protection of legal rights.

OpenAI may retain information transmitted to it for a limited period in accordance with the policies and terms applicable to it, even after Kalimo has ceased to retain information related to the account.

10. Information Security

We take reasonable technical and organizational measures to protect information, considering the nature of the information and the risks involved in processing it. Measures include database encryption and storage of institutional passwords in encrypted or hashed form.

No method of transmission, processing, or storage is absolutely secure. We therefore cannot guarantee complete immunity from unauthorized access, malfunction, or a security incident, but we will act in accordance with law when an incident requires handling or reporting.

11. Transfers of Information Outside Israel

Information may be transferred, stored, or processed outside Israel in countries where OpenAI, Google, Apple, Cloudflare, Neon, and other providers that help us operate the Service are located. This includes temporary processing of voice and content for real-time conversation. We take reasonable steps so that these transfers are made in accordance with applicable law and relevant contractual arrangements.

12. User Rights

Subject to applicable law and circumstances, a user may:

• Request access to personal information held about them
• Request correction of information that is incorrect, incomplete, unclear, or outdated
• Request deletion of information where the law allows
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing performed before withdrawal
• Object to certain uses or request a copy of the information, where those rights apply

To exercise a right, contact privacy@kalimo-tech.com. We may request reasonable information to verify the requester's identity and protect the account. If the request relates to an institutional account not identified by name in our systems, we may request the username or refer the requester to the institution that holds the link between the account and the person's identity.

13. Account Deletion

You may request account deletion through the in-app deletion option, where available, or by contacting info@kalimo-tech.com. The account will be removed from the active system, and remaining information will be deleted or overwritten within 7 days in accordance with Section 9.

14. Local Storage and Similar Technologies

The App uses local storage on the device to save preferences, sign-in state, and usage settings. App stores and infrastructure providers may use identifiers or similar technologies for security, operating the Service, managing subscriptions, and sending notifications. You may control some permissions through device settings.

15. Changes to This Policy

We may update this policy from time to time. When a change is material, we will provide appropriate notice in the App, by email, or otherwise as circumstances require. When the law requires new or separate consent, we will not rely on updating the policy alone and will request consent before new processing begins.

16. Contact Us

For questions, requests, or complaints regarding this policy or handling of personal information, contact:

• Kalimo, owned by Eyal Atia, licensed dealer number 325128361
• privacy@kalimo-tech.com
• info@kalimo-tech.com