Paned Privacy Policy
Last updated: 22 October 2026
Paned is provided by ALLYGENIX PTY LTD., Unit 805, 1 Boolee Street, Reid, ACT 2612, Australia. For privacy questions or requests, email info@allygenix.com with “Paned privacy” in the subject.
This policy covers Paned and its privacy and support website. Paned provides Welsh lessons, speaking practice and review. You do not need to register an account. Cloud speaking features and optional measurement have separate choices in the app.
Learning and recordings on your device
Your lesson progress and review history are stored on your device. Paned does not upload a full learning profile or review archive. For a cloud conversation, the app does send a bounded set of expression identifiers already introduced in the current scene so that replies can stay within what you have learned. You can clear local progress in Settings. Paned excludes its local learning file from device backups; other backups you manage through your operating system are separate from Paned's servers.
Microphone permission lets you record a practice attempt. You can listen to an example, record yourself and replay your recording without treating recognition as a pronunciation grade. Your own recordings are handled for the current practice and replay; Paned does not save them to its server database, application logs or backups. Course example audio is generated from course text and retained as a course asset, separately from your recordings.
If an eligible trial is active and you choose a trial reminder, Paned can request permission for a local notification using the known trial expiry. It does not register you for a remote marketing push service.
Optional cloud speaking features
Before cloud processing begins, the app explains which services receive your data and asks for your permission. Microphone access, cloud processing and optional measurement are separate choices. Declining cloud processing leaves bundled lessons, example audio, local recording, replay and review available.
When you use a cloud speaking feature:
- Paned on Google Cloud receives the request to authenticate it, check allowances and coordinate the response. Our application and database are in Belgium, in the
europe-west1region. Audio and transcripts are processed during the request rather than stored as conversation history. - Microsoft Azure Speech, in Ireland, receives the audio needed for speech recognition. It returns its best estimate of the words spoken. For speech synthesis it receives the checked reply text and returns generated audio. We use real-time recognition and prebuilt neural voices, not batch transcription, custom voice training or voice cloning. Microsoft's published documentation describes these real-time inputs and results as not stored at rest by those services. Recognition may mishear you and does not provide a Welsh pronunciation score.
- Google's managed Gemini service on Google Cloud, using an EU multi-region endpoint, receives the current recognised text, a small permitted expression pool and recent reply identifiers. We do not send the original recording, your full learning history, installation credentials or Apple transactions to this text model. Paned validates the selected replies against the permitted pool before displaying or speaking them.
We do not enable search grounding, persistent model conversations, explicit model caches or request-response content logging. In Paned's independent production Google Cloud project, implicit in-memory and durable model caching are also disabled. Google states that customer data is not used to train or fine-tune its models without permission. Under the applicable standard terms for general Google models, flagged prompts may nevertheless be retained for abuse monitoring for up to 90 days and reviewed by authorised personnel. This supplier retention is separate from Paned's own deletion controls. We do not promise zero retention.
Development testing uses public course text and synthetic inputs. Its shared development project can have implicit caching for up to 24 hours, and its test-build processing disclosure states that difference. It does not change the production project's disabled cache setting.
See Microsoft's speech recognition data information, Microsoft's speech synthesis data information, Google's data retention information and Google's abuse-monitoring information.
You can withdraw cloud-processing permission in Settings. A material change to the processing disclosure requires a new choice before the changed cloud feature is used.
Necessary service and security records
Paned creates a random installation identifier and installation credentials to authenticate requests, enforce allowances, prevent abuse and associate verified subscription access. These records can identify an installation and are not described as unlinked anonymous data. They are separate from your lesson progress.
Where supported, Apple App Attest helps verify protected app requests. The private hardware key stays on the device. Our service retains the public key, Apple's attestation receipt, a security counter and the minimum binding information needed to verify requests.
Our hosting and delivery providers also process connection information, such as IP addresses, request timing and response status, to deliver and protect the service. We do not use this information for cross-app advertising profiles or to infer your precise location. We retain limited operational and cost records to prevent duplicate requests, apply allowances and investigate faults. Recordings and conversation transcripts are excluded from these application logs.
Apple purchases
Apple handles purchases and billing. Paned processes signed transaction information and subscription status to provide access, restore purchases, prevent duplicate allowances and respond to renewals, expiry or refunds. We do not receive your payment-card details or Apple Account password.
Purchase verification and necessary security or allowance accounting continue when optional measurement is off. Deleting Paned, clearing local progress or withdrawing cloud permission does not cancel an Apple subscription. Manage subscriptions through your Apple account settings.
Optional measurement
Optional measurement is off until you choose to allow it. Allowing and declining are equally available, and declining does not block learning. You can change the choice in Settings.
If enabled, Paned may process:
- Apple Ads attribution returned by Apple, such as campaign, ad-group or keyword identifiers and a country or region code when available. An attribution token is used for the Apple request rather than retained in our logs or database.
- Your answer to one optional source question. You can skip it; it uses fixed choices rather than an open text box.
- Three limited event categories: the first qualifying AI conversation, paywall views and verified subscription conversion stages, including trial and initial paid stages.
These details may be linked to your random installation identifier to understand Paned's own acquisition and conversion. We do not collect an advertising identifier, build a device fingerprint, add a third-party analytics SDK, send these events to an advertising network or combine them into profiles across other companies' apps. A country or region returned with attribution does not involve GPS access.
Turning measurement off clears queued optional events and requests removal of installation-level measurement details on the server. It does not remove necessary purchase, quota or security records.
Sentence reports and support
When you report a sentence, Paned sends the selected sentence or checked reply, its identifier, dialect, content version, report category and any comment you choose to add. A report does not include a recording or full conversation by default. Please keep comments relevant and avoid personal or sensitive information. Keep the report receipt if you want to delete the report later.
If you email support, we receive your email address, message and attachments you choose to send. We use them to respond and resolve the request. Do not send passwords, API keys, payment-card details or sensitive recordings. Email support is separate from the app's automated sentence-report records.
Retention and deletion
Paned applies the following retention rules to its own service records:
| Record | Retention |
|---|---|
| Raw practice recordings and conversation transcripts | Processed for the request; not stored in Paned's database, application logs or backups |
| Temporary conversation or request context | Short-lived; cleared or expired within 15 minutes after the relevant context ends |
| Single-use App Attest challenges and registration confirmations | Up to 5 minutes |
| App Attest public keys, receipts and security counters | Up to 90 days after valid use |
| Request diagnostic and cost-linking metadata | Up to 7 days; necessary aggregate budget totals may remain without request links |
| Daily allowance rows | Up to 7 days after the allowance day |
| Sentence reports and installation-level optional measurement details | Up to 90 days, or earlier removal through the relevant deletion or withdrawal control |
| Inactive installation records, expired subscription mappings and deletion security markers | A safety window of up to 90 days under their applicable inactivity or expiry rule |
| Minimal operational ledger backups | Rotate within 7 days; exclude recordings, transcripts, reports and optional measurement details |
Support emails are kept while handling the request and for necessary follow-up, security or legal obligations. You can ask us to delete them. Supplier abuse-monitoring retention is described separately above; deleting Paned's records does not claim to delete records that a supplier must retain under its own applicable rules.
In Settings you can withdraw cloud permission, disable optional measurement and request deletion of the associated temporary context, reports and optional measurement. Active cloud practice is cancelled. Necessary security, allowance and subscription mappings may remain for the periods above. Your local learning progress remains until you clear it separately. A minimal backup can retain necessary records until its rotation expires and is not used to restore withdrawn optional consent.
Your privacy choices and requests
Where a legal basis is required, we rely on your consent for optional cloud processing and optional measurement. You do not have to provide recordings, an attribution choice or a source answer to use local lessons. We process necessary purchase and service records to provide the service or perform our contract with you, where applicable. Our legitimate interests in securing Paned, preventing abuse, resolving support requests and maintaining a reliable service support the limited operational processing described above, subject to your rights. We may also retain information when needed to meet a legal obligation. We do not use Paned's AI to make decisions about you with legal or similarly significant effects.
You can request access to, correction of or deletion of personal information we hold, and raise a concern about its handling. Depending on your location, you may also have rights to restrict or object to processing, obtain a portable copy, withdraw consent or complain to your local privacy regulator. Contact info@allygenix.com. We may need enough information to verify and locate the relevant installation, report or support request; please do not send installation secrets or passwords.
For a privacy complaint, describe the concern and the outcome you are seeking. We will review it, investigate the relevant handling and reply through your contact channel. If the issue remains unresolved, you can contact your local privacy regulator. In Australia, information about complaints is available from the Office of the Australian Information Commissioner.
Cloud speaking and support can involve processing outside your home country, including the locations described above and the operational services of our hosting, delivery and email providers. We use HTTPS, access restrictions and limited retention, but no internet service can guarantee absolute security.
You can contact us for information about the transfer arrangements applicable to your data and any safeguards available under the relevant provider terms and law.
Paned is a general language-learning app and is not marketed as a children's service. If you believe a child has provided personal information that should be removed, contact us. The App Store age rating describes app content and is separate from local privacy requirements.
The website and policy changes
Our privacy and support pages use Cloudflare delivery. We do not add marketing or analytics scripts, advertising pixels or contact forms to these pages. Cloudflare may process technical connection information to deliver and secure them; see Cloudflare's privacy policy. Following a mail link opens your chosen email app and does not submit a form to this website.
We update this policy when Paned's actual practices change and show the update date above. New cloud-processing details are presented in the app before that changed processing is used.