Privacy Policy
Last updated: 2026-08-31
This says what the Ashisu app receives, why it receives it, and who it is shared with. It is not a template: every service named here is one the app really talks to, and no service it does not talk to is named.
Who is responsible
Ashisu is published by Scormy Inc. (Delaware C Corporation, Delaware file no. 10255872). The address below is the company’s registered agent in Delaware — where legal process is served, not an office anyone visits. For anything to do with your data, the email address is the door that works.
For any question or request about your data: support@ashisu.com
What we receive
Each working part of the app receives what it needs. This list is complete; we do not take anything that is not on it.
- Account. Your email address and password. There is no name field on the account; we do not ask for your name when you sign up. What the teacher asks in a lesson is a different thing, described below under the learning record. If you signed in with Google or Apple, no password ever reaches us: the identifier and email from that provider do, and Google also sends a name, which we do not write to your account. If you chose Apple’s "Hide My Email", all we ever receive is the forwarding address ending in privaterelay.appleid.com; we never see your real one.
- Conversations. What you write to the assistant and what it answers. In a spoken lesson your voice is processed in the moment so that it can be transcribed — but it is not recorded: no recording of your voice is kept, by us or by ElevenLabs. When the lesson ends, a written transcript of it and an analysis of the lesson reach us and are stored.
- Learning record. Where you are in a course, the words and phrases you have learned, mistakes that keep coming back, your lesson reports, and what the teacher noted about you. That note is written from what you say in the lesson: what you would like to be called — it is the first thing she asks in a first lesson — along with your level, what you do, where you live, your interests, and a summary of the last lesson. You do not have to tell her anything you would rather not; what you leave unsaid stays empty.
- Usage. In-app events — which screen opened, what worked and what did not — through PostHog. We do not record the screen: session recording is switched off, because what is on these screens is your conversation and your study material. Nor do we tie the events to your account: we never send PostHog your identity, so what is recorded there is attached to a device identifier PostHog generates itself — not to your name, but to that device.
- Crashes. When the app crashes or swallows an error, a technical report goes to Sentry: the error itself, which build you were running, and device information.
- Purchases. Subscription events, through RevenueCat. Apple takes the payment; your card details never reach us in any form.
- Notifications. If you turned on the daily reminder, your device’s notification address, its platform (iOS/Android) and the app’s language.
Why we receive it
- To open your account and recognise you.
- To answer what you asked and to run the lesson.
- To remember what you learned — this is the whole point of the product: to carry on from where it knows you are, and not to teach the same thing twice.
- To see what works and what does not, and to fix crashes.
- To know what your subscription covers.
- To send the daily reminder, if you asked for it.
Who it goes to — including AI services
Some of your information passes through other companies’ systems so that the product can work. We do not gather them behind the phrase "our service providers": all of them, including the AI services that process your conversations, are named below.
| Who | What reaches them | Why |
|---|---|---|
| Amazon Web Services — Cognito | Your email address and account identifier | Holds your account and verifies your sign-in |
| Amazon Bedrock (AI) | The text of your conversation and its history so far | The model that writes the assistant’s and the teacher’s replies runs here |
| ElevenLabs (AI) | Your voice in a lesson (in the moment, not recorded), the text of the conversation, the post-lesson analysis | Runs the spoken lesson, transcribes it and analyses it |
| Amazon RDS (PostgreSQL) | Your conversations and your learning record | The lasting record; where your progress is kept |
| RevenueCat | Your account identifier and your purchase events | Knows the state of your subscription |
| Apple | Your payment details — to Apple directly, not to us | Apple takes the payment; card details never reach us |
| PostHog | Usage events tied to a device identifier — no screen recording | To see what works |
| Sentry | Crash and error reports | To fix what is broken |
| Expo | Your device’s notification address | To deliver the daily reminder to your device |
Nobody else receives it. We do not sell your data, share it for advertising, or pass it to an ad network.
Where it is held
Your account, your conversations and your learning record are held in Amazon Web Services’ North Virginia (us-east-1) region. The other companies named in the table above process data on their own infrastructure. Using the app means your information is transferred to these countries.
How long it is kept
We do not give a number of days per record, because that is not the right measure. The measure is this: something is kept for as long as the reason we took it lasts, and deleted when that reason ends. Below is when each reason ends.
- Your account, your conversations and your learning record — for as long as your account is open. Remembering them is the product’s job: the day we deleted them it would become an app that does not know you. When you ask for your account to be deleted, they go.
- The conversation transcript held by ElevenLabs — 15 days; the audio is not kept at all. Our own copy of the conversation is already in Postgres, so the copy over there does not need a long life.
- The records held by PostHog and Sentry — for the period set by the provider’s plan. Neither is tied to your account, and the period is the plan’s rather than a setting of ours.
- Backups — for the length of the backup cycle. A deletion request reaches the backups once that cycle completes.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, and ask for a copy. You can also ask for your account to be deleted entirely. Write to the address below; we will answer as far as we can verify who you are.
Send your request here: support@ashisu.com
Children
Ashisu is not aimed at children and does not knowingly collect information from them. If we find that we have, we delete it.
If this changes
If it changes, the date above changes. For a significant change we will say so in the app or by email.
Contact
For anything: support@ashisu.com
Scormy Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.