Privacy Policy

1. Overview

Terros Digital LLC ("we", "our", "us") operates the Menzi iOS application. This policy explains what we collect, why, who we share it with, how long we keep it, and how you can get it deleted.

The short version: everything we collect is tied to your account and used to run the app. We do not sell your data, we do not show you ads, and we do not track you across other companies' apps or websites.

We do measure our own advertising. When we pay to advertise Menzi, Apple tells us which ad campaign led to an install so we can tell whether that spend was worth it. That is the opposite direction from targeting: it tells us about our ad, not about you, and it uses Apple's own privacy-preserving frameworks rather than an advertising SDK. Section 5 explains it in full.

2. Data We Collect

These are the same categories we declare on Menzi's App Store privacy label. All of them are linked to your account.

• Contact info — your name and email address, collected when you create an account.
• Content you create — the sentences you write, your chat messages, words you add, and the stories Menzi generates for you. Audio you import to study as a story is not in this list: it stays on your device and never reaches our database.
• Audio — recordings you make when you hold the microphone to speak or to complete a pronunciation review.
• Learning data — your vocabulary deck, review history, grades, spaced-repetition schedule, grammar-pattern progress and listening time.
• Identifiers — your account ID, and a device identifier we generate ourselves. We use it to remember that a device has completed placement, to deliver push notifications, and to count how far people get through the introduction — that last one has to be keyed to the device rather than the account, because the introduction starts before an account exists. This is not Apple's advertising identifier; Menzi never requests it.
• Purchases — your subscription status and its history. We never see your card details; Apple handles payment.
• Usage data — which screens you open, which days you are active, and whether you started or completed a purchase.
• Advertising data — if you installed Menzi after tapping one of our App Store ads, the campaign, ad group and search term that ad belonged to, the country the install came from, and whether it was a first install or a reinstall. This describes the ad, not you: it contains no identifier from Apple or anyone else, and it is the only advertising data we hold.
• Diagnostics — crash reports, performance traces, and a breadcrumb log of what the app did before a fault. Crash reports may include a screenshot of the screen you were on at the moment of the crash.

3. How We Use Your Data

• To authenticate you and keep your learning state across devices
• To grade the sentences you write and the words you say
• To calculate your spaced-repetition schedule across all four skills
• To generate practice content from the vocabulary you already know
• To manage your subscription and enforce usage limits
• To diagnose crashes and faults, and to measure whether features work
• To see where people get stuck in the introduction, so we can fix it — which step they reached, and which one they stopped at
• To respond to support requests
• To measure whether the ads we pay for actually bring people to Menzi

We never use your data to target ads at you, inside Menzi or anywhere else, and we do not share it with data brokers. Menzi contains no advertising SDK.

4. AI Processing

Menzi's core feature is that a language model reads what you produce and grades it. That means the text and audio below leave your device and are processed by third-party AI services:

• The sentences and chat messages you write are sent to OpenRouter, which routes them to a large language model to be graded, answered, or used to generate a story or exercise. Depending on the task, the model may be operated by Google or OpenAI. The in-app AI consent screen names the same list, derived from the models actually in use, and is the version to trust if this page ever falls behind it.
• Audio you record is sent to ElevenLabs to be transcribed, and to Microsoft Azure to be scored for pronunciation and tone.
• Text we generate for you — tutor replies, sentences, stories — is sent to ElevenLabs to be spoken aloud.

We do not store your recordings. Audio is passed through for transcription and scoring; what we keep is the resulting transcript and score.

5. Advertising Measurement

We advertise Menzi, including on the App Store. Measuring whether that advertising works requires knowing which ads led to installs, and both mechanisms below are Apple's own, built so that this can be answered without identifying you. Menzi contains no third-party advertising or attribution SDK, requests no advertising identifier, and never shows you an ad.

• Apple Ads attribution. If you install Menzi after tapping one of our App Store ads, iOS gives the app a short-lived token which our server exchanges with Apple for the campaign, ad group and search term the ad belonged to, along with the country the install came from and whether it was a first install or a reinstall. That result is stored against your account so we can tell which campaigns bring people who go on to use Menzi. Apple's response contains no identifier for you or your device, and this uses the standard payload, which carries no timestamp.
• SKAdNetwork. This covers ads we may run somewhere other than the App Store. Menzi hands iOS a single number between 0 and 63 as you use the app; we have defined it to mean how far someone got, such as whether they created an account or subscribed. If you arrived from an ad, iOS — not Menzi — later sends that ad network a receipt saying an install happened, with that number attached, and sends us a copy. iOS delays it, and withholds the number entirely when too few people are in the same group for it to stay anonymous. The receipt contains nothing that identifies you, and neither we nor the ad network can connect it back to your account.

Neither mechanism requires the App Tracking Transparency prompt, and Menzi does not show one, because neither combines what you do in Menzi with data about you from other companies. That combination is what "tracking" means, and we do not do it.

6. Third-Party Services

We share data with the following processors, only as needed to run Menzi. Each is bound by its own agreement to protect your data to a standard equal to this policy, and none of them is permitted to use it for their own advertising.

• OpenRouter — routes text to language models for grading and generation
• ElevenLabs — speech synthesis and transcription
• Microsoft Azure — pronunciation and tone scoring
• RevenueCat — subscription status, over Apple In-App Purchase
• Apple — payment processing, push notification delivery, and App Store ad attribution (Section 5)
• Sentry — crash and performance diagnostics
• Resend — password-reset email
• Neon — database hosting
• Railway — application hosting

We do not sell your personal data. The only advertising-measurement data that leaves Menzi is the anonymous SKAdNetwork receipt described in Section 5, which iOS sends on our behalf and which identifies no one.

7. Data Retention

We keep your account and learning data for as long as your account exists. Diagnostic breadcrumbs are kept on a short rolling window and then discarded. Audio recordings are not retained at all. The records of how far a device got through the introduction are discarded after six months, and deleting your account removes them too — including the ones from before the account existed.

Audio you import to study as a story is stored only on your device. It is sent once for transcription and not retained there either; the transcript is matched against the dictionary on our servers, and all we keep from it is which words you encountered and how often. We do not store the audio or the transcript.

Guest accounts created during onboarding but never completed are pruned automatically.

8. Your Choices and Rights

Deleting your account. You can delete your account and everything associated with it from inside the app: Settings, then Delete Account at the bottom of the screen. This is immediate and permanent — it removes your deck, review history, sessions, stories and subscription record. You can also email us and we will action it within 30 days.

Withdrawing consent. Menzi cannot grade your writing or score your speech without sending them to the services listed in Section 4, so withdrawing consent to that processing means discontinuing use of the app — deleting your account is how you do that. You can turn off notifications at any time in Settings or in iOS Settings, and you can decline the microphone permission and continue using every written mode.

Access and correction. Email us to request a copy of your data or to correct it. Depending on where you live you may have additional rights under the GDPR or the CCPA, including the right to object to processing; contact us and we will honour them.

9. International Transfers

Terros Digital LLC is based in the United States, and the services listed in Section 6 process data in the United States and other countries. If you use Menzi from outside the US, your data will be transferred to and processed there.

10. Children's Privacy

Menzi is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Security

We use industry-standard security practices including encryption in transit (TLS) and at rest. Passwords are stored hashed and are never readable by us. No method of transmission or storage is 100% secure; if you discover a security issue please disclose it responsibly by emailing us directly.

12. Contact

Questions about this policy or requests regarding your data:

13. Changes

We may update this policy from time to time. Material changes will be communicated via an in-app notice or email. Continued use of the app after a policy update constitutes acceptance of the revised policy.