Legal
Privacy Policy
Contos is a language-learning reading app for iPhone, iPad and the web. This policy explains what we collect, why, and what control you have. The short version: we collect what's needed to run Contos and improve it, we don't show ads, and we never sell your data.
What we collect
- Account. Contos starts you on an anonymous guest account. If you sign in with Apple (iPhone and iPad), we receive your name and your email address (or Apple's private relay address if you choose to hide it). If you sign up on the web, we store your email address; your password is stored only in hashed form by our authentication provider.
- Learning progress. Your languages and level, known words, flashcards, stories you've read and how you rated them, chapters read, streak and reading time — this is the product; it syncs to your account so it follows you between devices.
- Subscription status. On iPhone and iPad, Apple processes payment. On the web, payment is processed by Stripe through RevenueCat, our subscription provider; the checkout asks for your email address, card and country, and the card details go to Stripe — we never see them. In both cases we receive your plan, renewal and expiry status so we can unlock Premium.
- Usage events. We record simple product events — for example an onboarding step completed, the paywall shown, a chapter opened — linked to your account, so we can see what works and fix what doesn't. They stay in our own database.
- Messages you send us. Feedback and feature requests from the Account screen, with basic context (your languages, level, plan and platform) so we can act on them.
- Ad attribution (iPhone and iPad only). When you install Contos from an ad, AppsFlyer helps us measure which ad it was, using your account identifier and — only if you allow it in Apple's tracking prompt — your device's advertising identifier. If you decline, Apple's privacy-preserving SKAdNetwork is used instead. The web app does not use AppsFlyer.
On the web
The web app keeps your sign-in session and a copy of your progress in your browser's local storage so it works quickly and stays signed in. Stripe may use cookies during checkout to prevent fraud.
Ad measurement — only if you allow it. When you first open the web app, a cookie banner (run by Cookiebot) asks whether you allow marketing cookies. If you choose Allow, we use Meta's Pixel and Conversions API to learn which of our Facebook and Instagram ads bring people to Contos: Meta receives that you visited, finished setting up, opened a story, started checkout or subscribed (with the plan and price), together with your IP address, browser type, Meta's cookie and click identifiers, and a hashed (scrambled) form of your account ID and, if you've given us one, your email address. Meta uses this to measure and improve our ads under its own privacy policy. If you choose Deny, nothing is sent to Meta. You can change your choice at any time from Account → Cookie settings; withdrawing consent stops future events and deletes the identifiers we stored for this purpose.
How stories and translations are generated
Stories, translations and mini-lessons are written by an AI model (Anthropic's Claude) on our server. Requests include your languages, reading level and a sample of your vocabulary — never your name, email or account identifier.
Who processes your data
We use these service providers, acting on our instructions: Supabase (database and sign-in), Anthropic (AI story generation), RevenueCat and Stripe (subscriptions and web payments), Apple (App Store payments and Sign in with Apple), AppsFlyer (iPhone ad attribution), Meta (web ad measurement, only with your consent), Cookiebot (cookie consent), Cloudflare (website hosting) and our email provider (account emails). Your data is stored in our database hosted on Supabase, protected by row-level security so only your signed-in account can read it. We keep it for as long as you have an account.
What we don't do
- No ads inside Contos.
- No selling of personal data, and no sharing beyond the service providers above. Meta only receives web ad-measurement data if you allow marketing cookies.
Deleting your data
Account → Delete account permanently and immediately erases your account and everything in it. Deleting the app or clearing your browser alone does not delete your account. An active subscription must be cancelled separately: in your device Settings for App Store subscriptions, or via Account → Manage subscription on the web.
Your rights
You can request a copy of your data, correction, or deletion at any time by emailing us. If you're in the UK/EEA, you also have the right to complain to your data protection authority.
Children
Contos is not directed at children under 13, and we don't knowingly collect their data.
Changes
If this policy changes materially we'll update this page and the date above.
Contact
Questions? Email hello@contosapp.com.