Legal

Privacy Policy

Last updated: 3 July 2026 · Effective immediately

Lisan is a subscription app for practising spoken languages with an AI tutor. To do that, we record and analyse your speech. This policy explains what we collect, why, how voice data is processed, and the rights you have under the laws of the United Arab Emirates and the wider Gulf region. Our promise: your voice is used to teach you — never sold, never used for ads.

1. Who we are

Lisan ("Lisan", "we", "us") is the data controller for the personal data described here. For any privacy request, contact us at privacy@trylisan.app.

2. The law we follow

We process personal data in line with:

UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its executive regulations;
Saudi Arabia's Personal Data Protection Law (Royal Decree M/19) where users are located in the Kingdom;
applicable Apple App Store and Google Play data and subscription policies; and
the protections of your local data-protection law where you live elsewhere.

3. Information we collect

Account & profile

Account details — your name, email, and the sign-in identifier from Apple or Google. We never receive your password.
Learning profile — the language you're learning, your explanation language, level, tutor voice, speed, goals and progress.
Subscription records — payments are handled by Apple (App Store) or Google (Google Play); we never receive your card number. We use RevenueCat to manage subscriptions: it receives your purchase and subscription status and an entitlement/app-user identifier so we can unlock the right access.

Voice & learning content

Speech recordings you make during lessons, and the transcripts and pronunciation scores generated from them.
Your messages and saved phrases within conversations and the phrasebook.

Automatically

Device & technical data — app version, device type and basic diagnostics to keep the service stable.
Usage data — lessons completed, minutes spoken and streaks. We do not use advertising trackers and do not track your location.

4. Your voice & how AI processes it

Speaking is the core of Lisan, so we treat your voice with extra care:

We record your speech only while you are in a lesson or drill, to transcribe it, score pronunciation, and let the tutor respond.
To do this, audio and transcripts are sent to the AI providers named in section 6 (for speech-to-text, language understanding and text-to-speech). They process it under contract, only to deliver the feature.
We do not sell your voice, do not use it for advertising, and do not build a biometric voiceprint to identify you.
You can delete your recordings and learning data at any time in Settings → Privacy.

5. Why we use your data

To run lessons, score your speaking, and personalise your plan.
To manage your subscription, trial and account, and provide support.
To keep the service secure, prevent abuse, and meet legal obligations.

Our legal bases are your consent (which you may withdraw anytime), the performance of our agreement with you, and our legitimate interest in running a safe, working service — as recognised under the UAE PDPL.

6. Service providers we use

We share limited data with the trusted processors below, who act only on our instructions under written agreements. We do not sell personal data, and we do not share it for advertising.

Supabase — cloud database, authentication and storage for your account, learning profile and content.
RevenueCat — subscription management; receives purchase/subscription status and an entitlement identifier.
Google (Gemini) — language understanding and lesson/conversation intelligence.
ElevenLabs — text-to-speech for tutor voices.
Munsit — speech-to-text for transcribing and scoring your speech.
Sentry — crash and error diagnostics to keep the app stable (where enabled).
Apple App Store & Google Play — process your payments and subscriptions.

7. Where your data is stored & transferred

Where data must be transferred outside the UAE or your country — for example to an AI provider — we only do so to destinations that provide an adequate level of protection, or under safeguards required by the UAE PDPL and Saudi PDPL, such as approved contractual clauses.

8. How long we keep it

Voice recordings are kept only as long as needed to give you feedback and progress history, and are deleted when you remove them or close your account.
Account & subscription records are kept while your account is active and as required for legal or accounting obligations.

9. Your rights

Under the UAE PDPL, the Saudi PDPL, and similar laws, you may access, correct, delete ("right to be forgotten"), object to or restrict processing, withdraw consent, request portability, and lodge a complaint with the UAE Data Office or your local regulator. To exercise any of these, email privacy@trylisan.app.

10. Security

We protect your data with encryption in transit, access controls, and private-by-default storage. No system is perfectly secure, but we work to industry standards and will notify you and the relevant authority of a personal-data breach where the law requires.

11. Children

Lisan accounts are for users aged 13 and over, and a subscription requires an adult (18+) to manage payment. If you believe a child has given us personal data without the right consent, contact us and we will remove it.

12. Changes to this policy

We may update this policy as the app and the law evolve. We will post the new version here with a revised date and, for material changes, notify you in the app.

13. Contact us

Privacy questions, requests or complaints:
privacy@trylisan.app · for general help, support@trylisan.app