Privacy

Your privacy

Last updated 29 September 2026

lingoose is a language-practice app. It has no accounts, no sign-in and no ads, and the conversations run on your phone. A few outside services are involved, each for one narrow job: Sentry receives crash reports, Apple and RevenueCat handle subscriptions, and Google serves the app's fonts. None of them receives your name, email address, contacts or location from us, and we never sell or share data with advertisers or data brokers.

Your voice and the AI goose

The goose is an AI. During a live conversation, lingoose uses your microphone and streams your voice to OpenAI's speech service so the goose can hear you and answer out loud. Before your first conversation the app asks for your agreement. lingoose does not record or store your audio and does not keep transcripts. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models; OpenAI may retain API data for up to 30 days for abuse monitoring. The conversation is routed through a lingoose server that only checks how much practice time you have left and starts the call; it does not receive your audio. Your voice is never used for advertising or tracking. Tell the goose to stop, or tap the X, and the call ends. You can turn microphone access off at any time in iOS Settings.

Your practice time

To enforce the daily practice limit, the server stores a random install identifier, the scenario you picked, and how many seconds each conversation lasted. It contains no name, email or contact details.

What stays on your device

Everything lingoose remembers is stored on your phone and is deleted when you delete the app:

• your settings — practice language, roasting, voice choice;
• your progress — streak, completed scenes and today's practice time;
• custom scenes you create, including anything you type into them.

We never receive any of this and cannot see it.

Crash reports

If the app hits an error, it sends a crash report to Sentry, a crash-reporting service, so we can find and fix the bug. Reports are sent only when something goes wrong — nothing is sent during normal practice. A report contains:

• the error and its stack trace (which part of the app's code failed);
• the app version and build number;
• the device model and iOS version, plus basic technical state such as free memory, language and time zone;
• a short trail of what the app was doing just before, such as that it had just launched;
• a random identifier created by the crash reporter, so repeated reports from the same install can be grouped. It is not linked to your name, your Apple Account or any other app.

A report carries no name or email, and we never deliberately attach what you say or type. Sentry does not store your IP address for lingoose's reports. The app does not record usage, performance or sessions. Sentry keeps reports for its standard retention period (at most 90 days) and then deletes them. See Sentry's privacy policy.

Subscriptions

If you subscribe to lingoose Pro, payment is handled entirely by Apple, and the subscription is verified through RevenueCat, which manages Pro access on our behalf. RevenueCat receives a randomly generated anonymous app-user ID, your device's vendor identifier (an ID Apple gives each developer that is different in every developer's apps), your App Store country and language, and the state of your subscription — enough to unlock Pro and restore it later. Neither we nor RevenueCat see your name, email, address or payment details; Apple does not share them. See RevenueCat's privacy policy and Apple's privacy policy.

Fonts

The first time the app shows text in a particular typeface, it downloads the font file from Google Fonts and keeps it on your phone. Like any web request, Google receives your IP address and basic device information when it serves the file. See Google's privacy policy.

No ads, no analytics, no tracking

The app shows no ads, runs no analytics and does not use the advertising identifier. It does not track you across other companies' apps or websites, and it makes no network requests other than the crash reports, subscription checks and font downloads described above.

Children

lingoose is meant for teens and adults; the goose's roasting is cheeky but not crude. We do not knowingly collect personal information from anyone, including children.

Your choices

Crash reports and subscription records carry no name, email or account, so we cannot look them up by who you are. To erase everything stored on your phone, delete the app; a subscription can be restored afterwards from the same Apple Account. If you have a question or a request about your data, email us and we will help as far as we are able.

Changes

If this policy changes, the new version will be posted on this page with an updated date. Material changes will also be noted in the app's release notes.

Contact

Questions about privacy: [email protected]