Panjabi Go Last updated: 29 September 2026
1. Who We Are
Panjabi Go is operated by Nihaal Group Ltd, a company registered in England and Wales.
- Data Controller: Nihaal Group Ltd
- Contact: support@panjabigo.com
- Website: panjabigo.com
This policy explains what personal data we collect when you use the Panjabi Go mobile application ("the App") and our website at panjabigo.com ("the Website"), why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
This policy is accessible within the App under Settings → Privacy Policy.
2. Data We Collect and Why
2.1 Account Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | To create and authenticate your account via a magic link | Performance of a contract (Art. 6(1)(b)) |
| User ID (system-generated UUID) | To associate your learning data with your account | Performance of a contract (Art. 6(1)(b)) |
You can sign in via email-based magic link, Sign in with Google, or Sign in with Apple (iOS only). When you use a third-party sign-in provider, we receive your verified email address and a unique provider-issued user identifier; with Apple, we may also receive a name you choose to share. We do not store passwords. The provider may also process your sign-in event under their own privacy policy.
2.2 Profile Data
| Data | Purpose | Legal Basis |
|---|---|---|
| First name (required) and last name (optional) | To personalise the App experience | Performance of a contract (Art. 6(1)(b)) |
| Gender | To personalise content and language within the App | Performance of a contract (Art. 6(1)(b)) |
| Country (optional) | To personalise content by region | Performance of a contract (Art. 6(1)(b)) |
| Self-reported vocabulary level | To set your starting point and personalise your lesson path | Performance of a contract (Art. 6(1)(b)) |
2.3 Language Proficiency Data
We store your self-assessed proficiency across alphabet, reading, vocabulary, listening, and speaking to set your starting level and personalise your lesson path. Legal basis: Performance of a contract (Art. 6(1)(b)).
2.4 Learning and Progress Data
We store wordbank entries and mastery levels, phrasebook bookmarks, assessment results and language level, learning streak and study time, and lesson and exercise completion records, all to track and personalise your learning journey. Legal basis: Performance of a contract (Art. 6(1)(b)).
2.5 AI and Conversation Data
AI Tutor and AI Voice Chat messages are stored in our database (Supabase tables chats and messages) to maintain conversation history across sessions and provide continuity in your learning. You can clear your conversation history at any time within the App. AI language responses are generated by routing your input via OpenRouter (which selects an upstream model such as Claude by Anthropic).
Voice Chat audio is streamed to our servers at api.panjabigo.com and onward to Soniox (our speech-to-text provider) for real-time transcription. Only the transcribed text (not the raw audio) is used to generate your AI response. Voice Chat recordings are not permanently retained: any temporary buffering during processing is deleted as soon as the response is returned. Soniox is also used for text-to-speech in Voice Chat: the text of the AI's spoken reply is sent to Soniox to synthesise the voice you hear. Please review Soniox's privacy policy for details on how they handle audio and text sent for transcription and synthesis.
Open-ended exercise responses are submitted to OpenRouter (which routes to Claude via Anthropic) for AI grading. The text of your response is not stored beyond the session.
Content safety screening. To keep the App safe, text you submit to the AI Tutor and AI-graded exercises, and the AI's replies, are checked by OpenAI's Moderation API (model omni-moderation-latest) before being shown or stored. We retain a SHA-256 hash of the text (not the raw text) together with the moderation categories and scores returned, plus a count of any content-policy strikes against your account. We do this to detect and respond to abusive content, comply with platform rules, and to operate the user-reporting feature described in our Content Moderation Policy. Legal basis: Legitimate interests (Art. 6(1)(f)).
2.5a Pronunciation Coach Data
The AI Pronunciation Coach records your spoken Panjabi when you tap to record on the Pronunciation Coach screen and processes it to give you per-phoneme accuracy feedback. To make this work, the following data is processed and stored:
- Your audio recording is uploaded from your device to our servers at api.panjabigo.com and stored in Bunny Storage (hosted in the EU) under a per-user folder. The audio is then submitted to Modal (a GPU inference platform, US) which runs an open-source phoneme recognition model to convert your speech into a sequence of phonemes. Modal processes the audio in-memory for the inference call and we do not authorise it to retain the audio.
- Reference audio for each target word is synthesised once via ElevenLabs text-to-speech and cached server-side; this is a synthetic reference and does not contain your voice.
- Per-attempt scoring data (the expected phonemes, the heard phonemes, per-phoneme outcome (match / substitution / insertion / deletion), duration ratios, an overall accuracy score, a signed URL to your stored audio, and the diagnostics shown back to you) is written to our database (
pronunciation_attemptsandpronunciation_phoneme_results). - Mastery profile (a rolling per-phoneme accuracy score and a per-word mastery record) is derived from your attempts to power the heatmap and the adaptive word selector. (The heatmap is shown once you have completed at least 10 attempts.)
- Reports you submit via the "feedback seems wrong" button are stored alongside the attempt so we can review scoring errors.
Pronunciation audio and scoring data are retained for the life of your account (so you can review your history and the model can keep adapting). You can delete this data at any time by deleting your account (Settings → Delete Account); deletion cascades to all pronunciation_* rows. Legal basis: Performance of a contract (Art. 6(1)(b)). The microphone permission used to capture this audio is governed by Section 2.9 and requires your consent (Art. 6(1)(a)).
2.6 Usage Analytics
We collect app session start/end times and screen name and time spent per screen to understand engagement and improve the App. This data is associated with your user account but is not sold or shared with advertisers. It is stored in two places:
- Our own database (Supabase tables
app_sessionsandscreen_time) for internal aggregation. - Mixpanel, our product-analytics provider, where we send event names (e.g. "screen_view", "lesson_complete", "paywall_shown") tied to your user ID, together with a small set of profile traits: your email address, your sign-in provider (e.g. Google, Apple, or email), your current subscription plan, your vocabulary level, and the app environment. We do not send Mixpanel your message text, voice recordings, or pronunciation audio.
Legal basis: Legitimate interests (Art. 6(1)(f)). You can object to analytics processing at any time by contacting support@panjabigo.com.
2.7 Technical Data
We process your IP address (transmitted automatically with every server request), an anonymous device identifier (a randomly generated UUID used for single-device sign-in enforcement, not your hardware ID, IMEI, or advertising ID), and an authentication session token stored locally on your device via AsyncStorage.
Single-device enforcement: Only one device may be signed in to your account at a time. When you sign in on a new device, any previously active device is automatically signed out. Your current active device ID is stored in Supabase to enable this real-time check, and is deleted when you sign out or delete your account.
2.8 Camera and Media Library (Translator Feature Only)
Photos you capture or select are sent to our servers, which pass them to the Google Cloud Vision API for text extraction. Images are not permanently stored after the translation is returned to your device. Legal basis: Consent via the system permission prompt (Art. 6(1)(a)). You can revoke camera or media library access at any time in your device settings.
2.9 Microphone (Voice Features Only)
Audio recorded during Voice Chat and Pronunciation Drills is used to convert your speech to text via Soniox and provide pronunciation feedback. Legal basis: Consent via the system permission prompt (Art. 6(1)(a)). You can revoke microphone access at any time in your device settings.
2.10 Notifications
Learning reminders (daily word, streak alerts, lesson nudges, coach and review prompts) are scheduled locally on your device. We do not generate or collect a push notification token, and no notification data is transmitted to us or to a third-party push service. Reminders are delivered on-device. Legal basis: Consent via the system permission prompt (Art. 6(1)(a)). You can disable notifications at any time in App settings or device settings.
2.11 Subscription and Payment Data
We store billing name and address, subscription status and plan, payment transaction references, and platform/purchase source. We do not store your payment card number, CVV, or full card details.
Subscriptions are purchased via Apple (iOS), Google (Android), or Stripe (web). We use RevenueCat to unify subscription management across all platforms. Financial records are retained for 7 years to comply with UK tax and accounting obligations, even after account deletion.
2.12 Marketing and Service Communications
We use your email address to send service emails (magic links, billing receipts), learning emails (onboarding tips, streak reminders), and occasional promotional emails. We rely on the PECR soft opt-in. You can unsubscribe at any time via any email or by contacting support@panjabigo.com. We do not share your email with third-party marketers.
2.13 Crash and Error Reports
Crash reports collected by Sentry (EU instance, hosted in Germany) may include stack traces, device type, OS version, and app version. They do not include the content of your messages or voice recordings. Legal basis: Legitimate interests (Art. 6(1)(f)).
2.14 Website Cookies, Analytics and Advertising
When you first visit the Website, a banner asks whether you accept analytics and advertising cookies. Nothing in this section runs until you choose Accept. If you choose Decline, the Website works in the same way.
If you accept:
- Google Analytics collects the pages you visit, how you arrived, your approximate location, and device and browser details, so we can count visits and improve the Website.
- Microsoft Clarity records clicks, scrolls and page movements, and makes session replays and heatmaps, so we can find parts of a page that confuse people.
- Meta (Facebook) Pixel sends the pages you visit, your IP address and browser details to Meta. We use it to measure whether our Facebook and Instagram ads lead to visits and sign-ups, and to show our ads to people who visited the Website. Meta can link this data to your Facebook or Instagram account. When you sign up for updates, send us a message, or buy a plan, we also send that event to Meta from our server (the Meta Conversions API). It includes your email address in a scrambled (hashed) form, your IP address and browser details, and for a purchase the amount paid. This helps Meta count the event when an ad blocker stops the Pixel. We only do this if you accepted cookies.
Legal basis: Consent (Art. 6(1)(a)) under PECR and UK GDPR. You can withdraw consent at any time with the Manage cookie preferences button on our Cookie Policy page. The Cookie Policy lists every cookie, what it does and how long it lasts.
The App does not contain these tools and does not show advertising.
3. Third-Party Services
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, real-time data | United States |
| DigitalOcean | Cloud hosting for our application server (api.panjabigo.com), which receives and processes all API requests | United States (San Francisco) |
| Sentry (EU) | Crash reporting and error monitoring | Germany (EU) |
| OpenRouter | AI language model routing for AI Tutor, Voice Chat, and exercise grading (routes to models such as Claude by Anthropic) | United States |
| OpenAI (Moderation) | Content safety screening of AI inputs and outputs (omni-moderation-latest) | United States |
| Soniox | Real-time speech-to-text transcription and text-to-speech for Voice Chat | United States |
| OpenAI (TTS) | Fallback text-to-speech audio generation for lessons and pronunciation | United States |
| ElevenLabs | Primary text-to-speech for lessons, Short Stories (multi-voice narration), and pronunciation reference audio | United States |
| Modal | GPU inference for the Pronunciation Coach (phoneme recognition on submitted audio) | United States |
| Bunny Storage | Storage of pronunciation attempt audio and cached reference audio | Europe |
| Mixpanel | Product analytics (screen views, feature usage, retention funnels) tied to user ID | United States (default) / EU / India per project region |
| Google Cloud | Image text extraction (Vision API) and text translation (Translate API) | United States |
| Bunny CDN | Delivery of audio and video lesson content via signed secure URLs | Europe |
| Stripe | Web subscription billing and payment processing | United States |
| Apple | Sign in with Apple (iOS) and in-app purchase processing (iOS) | United States |
| Sign in with Google and in-app purchase processing (Android) | United States | |
| RevenueCat | Subscription management and entitlement tracking across platforms | United States |
| Mailtrap | Transactional and marketing email delivery | United States |
| Cloudflare (Turnstile) | Bot/abuse verification (CAPTCHA) on newsletter and mailing-list sign-up; receives a verification token and your IP address | United States |
| Slack | Internal content-moderation and safety alerts when content is reported in-app | United States |
| Google Analytics | Website visit analytics (only with your cookie consent) | United States |
| Microsoft Clarity | Website session replays and heatmaps (only with your cookie consent) | United States |
| Meta (Facebook) Pixel | Website ad measurement and showing our ads on Facebook and Instagram (only with your cookie consent) | United States / Ireland |
We do not sell your data to third parties. The App contains no advertising. On the Website, we share data with Meta for advertising only if you accept advertising cookies (see Section 2.14).
4. International Data Transfers
Some of our third-party providers are based outside the United Kingdom. Where your data is transferred to countries that do not benefit from a UK adequacy decision, we rely on International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses to ensure equivalent protection. Sentry (Germany) and Bunny CDN (EU) are hosted within the EU/EEA, which benefits from a UK adequacy decision. All other providers listed above are covered by their respective Data Processing Agreements incorporating UK-approved transfer mechanisms.
5. Data Retention
| Data | Retention Period |
|---|---|
| Account data (email, name, gender, country) | Active account life. Deleted within 30 days of account deletion request. |
| Language proficiency and learning data | Active account life. Deleted within 30 days of account deletion request. |
| AI Tutor and Voice Chat message history | Active account life. Clearable in-app. Deleted within 30 days of account deletion. |
| Moderation events (text hashes, scores, strike counts) | Active account life, then deleted within 30 days of account deletion. |
| Active device record | Retained while signed in. Deleted on sign-out or account deletion. |
| IP addresses | Up to 90 days in server logs, then deleted. |
| Session and screen time analytics (our DB) | 12 months from collection, then deleted. |
| Mixpanel events and profile traits (incl. email, sign-in provider) | Up to 5 years (Mixpanel default project retention). Deleted on account deletion request. |
| Crash reports (Sentry) | 90 days. |
| Voice Chat recordings | Not retained. Deleted immediately after transcription is returned. |
| Pronunciation attempt audio (Bunny Storage) | Active account life. Deleted within 30 days of account deletion. |
| Pronunciation scoring & mastery (phonemes, accuracy) | Active account life. Deleted within 30 days of account deletion. |
| Photos for translation | Not retained. Deleted immediately after translation is returned. |
| TTS audio (cached lesson audio) | Up to 90 days in Supabase Storage, then deleted. |
| Notification preferences | Stored locally on device. Cleared on uninstall. |
| Website analytics and advertising cookies | As listed in our Cookie Policy (up to 2 years). Removed when you clear your browser data. |
| Billing and transaction records | 7 years (UK tax/accounting obligation), even after account deletion. |
6. Your Rights Under UK GDPR
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Ask us to correct inaccurate data.
- Right to erasure: Delete your account via Settings → Delete Account. Data deleted within 30 days. Billing records retained 7 years as required by law.
- Right to restriction: Ask us to pause processing your data in certain circumstances.
- Right to data portability: Request your data in a structured, machine-readable format by contacting us.
- Right to object: Object to processing based on legitimate interests, including analytics and marketing emails.
- Rights related to automated decision-making: Your level is assigned automatically based on your proficiency assessment. Open-ended exercises are graded by AI. Neither constitutes a decision with legal or similarly significant effects. Contact us to request a manual review or level reset.
- Right to data breach notification: We will notify you without undue delay if a breach is likely to result in a high risk to your rights and freedoms.
To exercise any right, contact us at support@panjabigo.com. We will respond within one calendar month.
You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
6A. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights. The categories of personal information we collect, why we collect it, and the third parties we share it with are described in Sections 2 and 3 above.
We do not sell your personal information for money. The App does not share your personal information for cross-context behavioural advertising. On the Website, if you accept advertising cookies, the Meta Pixel shares your browsing data with Meta so we can show you our ads. California law may treat this as "sharing" for cross-context behavioural advertising (see Section 2.14). It happens only after you choose Accept, so you are opted out unless you opt in.
As a California resident, you have the right to:
- Know what personal information we collect, the sources, and the purposes, as described in Sections 2 and 3 above.
- Delete the personal information we hold about you. Use Settings → Delete Account in the App, or contact us. Billing records are retained for 7 years as required by law.
- Correct inaccurate personal information. Contact us at support@panjabigo.com.
- Opt out of the sale or sharing of personal information. We do not sell it. To stop Website sharing with Meta, choose Decline, or use the Manage cookie preferences button on our Cookie Policy page.
- Limit the use of sensitive personal information: we do not use sensitive personal information for inferring characteristics about you.
- Non-discrimination: we will not deny service, charge different prices, or provide a different level of service for exercising your CCPA rights.
To exercise any of these rights, email support@panjabigo.com. We will verify your request by matching the email address on your account. You may also designate an authorised agent to make a request on your behalf; the agent must provide written authorisation and we may still verify your identity directly. We will respond within 45 days.
7. Children's Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@panjabigo.com and we will promptly delete that data.
Users aged 13–17 may use the App with parental or guardian consent. In-app purchases for users in this age range are subject to Apple's and Google's parental consent and approval mechanisms.
8. Security
We use industry-standard measures including encrypted connections (HTTPS/TLS) for all data in transit, Supabase row-level security policies, magic link authentication (no passwords stored), signed token-protected URLs for all media content via Bunny CDN, and single-device enforcement to prevent unauthorised concurrent access.
No method of transmission over the internet is 100% secure. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected users without undue delay.
9. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via the App. Continued use of the App after a change constitutes acceptance of the updated policy.
10. Contact Us
Nihaal Group Ltd Email: support@panjabigo.com Website: panjabigo.com
