Junny AppsMobile studio
Back to Home

tomomo

Privacy Policy

Last updated: September 26, 2026

1. About this policy

tomomo is a language-learning community app offered under the Junny Apps brand. “We,” “us,” and “our” refer to the provider of the tomomo service. Privacy questions and requests can be sent to [email protected].

This policy covers the tomomo app, its community and learning services, notifications, widgets and support. It does not cover unrelated Junny Apps products or independent services you visit through external links.

2. Information we collect

Account and profile. We receive your display name, email address, sign-in provider and provider identifier. Sign in with Apple may provide a private relay email address. For email accounts we store a password hash, not a plain-text password. We process account/session identifiers, native and target languages, proficiency, interests, timezone, and any optional biography, avatar or profile photo you provide.

Community content. We process messages, translations, replies, reactions, community names and descriptions, memberships, invitations, timestamps and community interactions. Other members may provide information about you in their messages or reports.

Learning information. This includes studied sentences, saved expressions, learning-card requests, AI tutor questions and relevant context, AI responses, lesson and quiz answers, pronunciation feedback, progress and learning activity, including Journey and Memory features. Learning material can be derived from community conversations.

Optional photos and voice. We receive images you choose to upload and, when you start speaking practice, your recording and the practice sentence. Microphone access is requested through iOS. We do not continuously record ambient audio or use your photo or voice to establish a biometric identity.

Purchases. Apple and RevenueCat provide purchase and subscription records, including product and transaction identifiers, validation information, purchase dates, trial/renewal status, expiration, refunds and Premium entitlement. Apple does not provide us with your full payment-card details.

Device, usage and technical information. The app and its providers process app/device identifiers, device model, app and operating-system versions, language, timezone, IP address, approximate region inferred from IP address, notification permission status, push tokens, feature interactions and operational/security diagnostics. Some SDK processing starts when the app opens, before account creation or notification permission.

Support and safety. We receive information you send to support, account and content identifiers, report reasons, and records of moderation actions or our response. Do not send passwords or full payment-card details.

We do not request your contacts or precise GPS location. tomomo does not use advertising SDKs or Apple's advertising identifier for ad targeting. We do not intentionally request sensitive information such as health records or government identification numbers. If you include personal information in content, it is processed as part of that content.

3. How we use information

We use information to:

  • provide and secure accounts, sign-in and preferences;
  • deliver communities, messages, translations, invitations and safety tools;
  • generate learning cards, lessons, pronunciation feedback, speech and AI tutor answers, including personalized learning from conversations;
  • save expressions and progress and provide learning widgets;
  • verify purchases, restore purchases and provide Premium access;
  • deliver enabled service notifications and learning reminders;
  • understand feature use, diagnose problems and improve the service;
  • investigate abuse, respond to requests, enforce rules and comply with law.

Learning preferences and activity personalize the service. Automated systems also screen uploaded photos and can restrict community participation based on reports. Contact [email protected] to request human review if you believe a restriction was mistaken.

4. AI processing

AI processing takes place on third-party servers, not entirely on your device.

The welcome screen presents an agreement sentence with inline Terms, Privacy and AI Usage links above Agree & continue. AI Usage explains the providers and processing in the app. The returning-user sign-in flow also presents the agreement before its sign-in options. This policy and the Terms remain available in Settings. This section explains the providers, information and purposes involved in tomomo's AI features.

Google Gemini API processes message text and limited nearby conversation context for translation and learning explanations. That context can include other members' messages, display names and languages. Gemini also processes optional pronunciation recordings and reference sentences, screens uploaded profile photos, and receives text for natural-speech generation.

OpenAI API processes relevant messages, studied sentences, saved expressions and learning context to generate lessons and other learning content. Ask Tomo sends your question, source sentence or learning card, selected word where relevant, language preferences and a limited recent question-and-answer history. Ask Tomo answers are not posted to your human community chat.

Translation can occur automatically after sending a message. Lessons can also be prepared automatically from community messages and learning activity. Your messages may provide context when another member uses a learning feature. AI processing is not limited to tapping an AI button.

We do not use your content to train our own AI models or enable optional API data-sharing programs for provider model development. Provider processing still depends on the applicable service contract and tier. In particular, Google's terms distinguish paid and unpaid Gemini services. We do not make a blanket promise that no provider can use submitted content for improvement. Provider security, abuse-prevention, technical and legal retention may also apply; receiving a result does not mean every provider copy is immediately deleted.

See Google Gemini API terms and OpenAI API data controls. These links supplement our disclosures and do not remove our responsibility for processing we arrange.

Avoid sending confidential or sensitive information. AI output can be wrong; check translations and explanations before relying on them.

5. Who receives information

  • Other tomomo users: Display profiles and shared content. Members receive messages, translations, reactions and community learning content. Profiles can also appear in discovery, invitations and member views. Email and password are not part of your public profile.
  • Cloudflare: Backend traffic, account/content processing, real-time messaging, queued work and operational/security information, for hosting and protection.
  • Supabase: Account, profile/photo, message, learning and related records, for hosted PostgreSQL storage.
  • Google and OpenAI: The content and context described in Section 4, for AI and safety features. Apple or Google also participates when you choose its sign-in service.
  • OneSignal and Apple Push Notification service: Account/device identifiers, push tokens and delivery information. Chat payloads can contain full original messages, translations, sender names/identifiers, community/message identifiers and timestamps, even when visible previews are shorter.
  • Mixpanel: App/account identifiers, device and usage information, language/proficiency preferences, activation/community participation and Premium status, for product analytics. Our configured event properties exclude message text, tutor questions, photo/audio content, names, email addresses and user-written community titles.
  • Apple and RevenueCat: Purchase, transaction, subscription and app/device/account information, for billing, validation and restoring access. We associate RevenueCat with the Mixpanel identifier to connect subscription activity with product analytics.
  • Authorized support and moderation personnel: Information reasonably needed to resolve requests, investigate reports or enforce rules.

Providers may use authorized subprocessors. Apple and Google separately control their own account, store and payment services under their policies.

We may disclose relevant information where legally required or where necessary and lawful to protect safety, investigate fraud or protect legal rights. If the service is transferred through a merger, acquisition or similar transaction, relevant information may transfer subject to applicable protections and required notice.

We do not sell personal information or share it for cross-company targeted advertising. We do not display behavioral advertising in tomomo.

6. Visibility and device controls

Community content is shared with other members, who can copy or share it. Private communities restrict group access; they do not guarantee confidentiality. Messages are not end-to-end encrypted: our backend and relevant providers process content to deliver the service.

Notifications can reveal names and message content on a Lock Screen. Manage notifications and previews in iOS Settings, and community-message preferences in the app. Disabling notifications does not necessarily stop all OneSignal SDK processing.

The app stores local preferences, cached conversations, learning information and session credentials. Widgets use a local shared feed containing selected learning content, language information and an account identifier. People looking at your device may see widget content. You can remove widgets through iOS; signing out or deleting the account clears the active widget feed.

7. Retention

Account/profile and personal learning records are generally kept while you have an account, subject to Section 8. Community messages, translations and shared learning content can remain after you leave a community. Uninstalling the app does not delete server records or cancel subscriptions.

Our backend processes pronunciation recordings transiently rather than storing a recording library. Temporary device recordings are cleaned up as the practice session ends. Providers can have separate retention obligations for submitted recordings.

Ask Tomo retry records become eligible for cleanup after 24 hours, during scheduled or subsequent request processing. Cached AI-generated speech becomes eligible for scheduled cleanup after 90 days without use. This synthetic speech is different from a recording of your voice.

For support, safety, security, analytics, subscription and backup records, retention depends on the purpose, whether the record remains necessary, provider settings, applicable legal duties and the period needed for legal claims. A legal-retention exception must be limited to its purpose. Contact us for information about a particular record's retention.

8. Account deletion

You can delete your account at Profile → Settings → Account → Delete account, or contact [email protected] for assistance.

When the in-app deletion request succeeds, tomomo removes your account and its associated personal information from our active systems. This includes your profile, email address, sign-in credentials, uploaded profile photo, community memberships, messages you sent and their translations, reactions, saved expressions, personal learning records, quiz answers and progress. We also remove personal information associated with you from shared or derived learning records and other account-linked records under our control.

We also send deletion requests to service providers acting on our behalf for account-linked personal information they hold for us. Signing out or disconnecting an identifier is not treated as erasure. Provider processing may take additional time, and a request may remain pending while a service issue is resolved. We track pending requests and retry them; contact [email protected] to ask about the status of your deletion. We retain only the identifiers necessary to complete pending erasure and a short-lived request receipt for reliable retries. Connected devices refresh their app-controlled cached copies when they next contact the service. If active-account deletion fails, the app reports an error and permits retry.

Limited records may be retained where applicable law requires retention. Such records are restricted to that legal purpose and deleted when the requirement ends. Residual backup copies are removed through the applicable backup-retention cycle, are not used in normal operation, and remain subject to the deletion request if a backup is restored. You may contact us for information about a specific retention requirement or deletion request.

Apple and other providers acting independently may retain records they must keep for their own legal obligations, such as App Store purchase records. This does not permit us to retain your community messages indefinitely.

We cannot remotely erase copies independently saved by other users outside our service. This does not excuse removal of copies we control.

Deleting the app or your account does not automatically cancel an Apple subscription. Cancel separately through iOS Settings → your Apple Account → Subscriptions. You do not have to wait for a subscription to expire to request account deletion.

9. International processing

Information may be processed outside your country, including in the United States, where privacy laws may differ. The locations and safeguards depend on the provider and processing activity.

A required transfer safeguard must apply to the relevant transfer; accepting this policy does not replace it. Contact [email protected] for information about applicable safeguards and a copy where you are entitled to one.

10. Legal bases and privacy rights

Where the GDPR, UK GDPR, Türkiye's Law No. 6698 or similar law applies, each purpose needs a valid legal basis. Relevant bases include performing the service contract for necessary account, chat, learning and purchase functions; proportionate legitimate interests for security, abuse prevention, reliability and improvement where your rights do not override them; legal obligations; and consent for processing that requires it. Legitimate interests cannot replace consent where applicable law requires consent, including for certain optional analytics or device access.

Necessary account and service information is required for the corresponding feature. Optional photo, microphone and notification permissions can be declined or changed in iOS; related functionality may be unavailable. The current service has no general in-app switch disabling all AI or analytics processing.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection to processing, and withdraw consent. Withdrawal does not invalidate earlier lawful processing. You may complain to a competent privacy authority. For EEA/UK residents, this can include the authority where you live, work or believe an infringement occurred.

Where Türkiye's Law No. 6698 applies, rights also include learning whether and how information is processed and its recipients, requesting notification of correction/erasure to recipients, objecting to an adverse result from exclusively automated analysis, and seeking compensation as provided by law.

Where applicable US state law grants additional rights, these can include an authorized-agent request, an appeal and non-discrimination for exercising privacy rights. We do not sell information or share it for targeted advertising. Applicable statutory rights are not limited by this policy.

Send requests to [email protected], identifying your account and the request. We may reasonably verify identity or a representative's authority. We will respond within the period required by applicable law and explain any lawful refusal or extension. Use “Privacy appeal” to request review of our response.

11. Adults only

tomomo is intended only for people 18 years of age or older. It is not offered to children or teenagers under 18. If you believe an underage person has provided information, contact [email protected] so we can investigate, restrict access and take appropriate deletion action.

12. Security and changes

We use measures such as authenticated access, encrypted network connections, password hashing and access restrictions. No system guarantees absolute security.

We may update this policy when the service or law changes. The published version will show its effective date. Material changes will receive additional notice appropriate to the change, and we will obtain new consent where required. A policy update does not retroactively authorize incompatible use of previously collected information.

Contact: [email protected].