Privacy Notice

Last updated: May 19, 2026

1. Who we are

CaptainEnglish AI is operated by Angelo Macajou ("we", "us"). We act as the data controller for personal data described in this notice. Contact: info@teacherangelo.com.

2. What we collect

Account data — email address, display name, login credentials (hashed).
Practice content — messages and audio you submit, AI replies, vocabulary you save, session timestamps and counters.
Usage & device data — IP address, browser/device identifiers, pages viewed, feature usage, error logs.
Support correspondence — messages you send to support and any attachments.
Subscription data — plan, status, billing period dates. Card details are handled by Paddle, not by us.

3. Why we use it & legal basis

To provide the service (account creation, practice sessions, vocabulary review) — contract performance.
To protect against fraud, abuse, and security threats — legitimate interests.
To improve the product (aggregated analytics, debugging) — legitimate interests.
To respond to support requests — legitimate interests / contract.
To send transactional emails (sign-in, billing) — contract performance.
To comply with legal obligations (tax, accounting, lawful requests) — legal obligation.

4. Who we share data with

Infrastructure & hosting subprocessors — Supabase (database, auth, storage), Cloudflare/Lovable (hosting and edge).
AI providers — Google and OpenAI, accessed via the Lovable AI Gateway, to generate coach replies.
Speech — ElevenLabs for text-to-speech audio.
Merchant of Record — Paddle.com for checkout, subscription management, payments, tax compliance, invoicing and refunds.
Professional advisers — legal and accounting providers where necessary.
Authorities — when required by law.

5. International transfers

Some subprocessors are located outside your country, including in the United States. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep account and practice data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep it for legal reasons (e.g. tax records — typically 6–10 years for billing data).

7. Your rights

Subject to local law, you may request access, correction, deletion, restriction, portability, or object to processing of your personal data. You may withdraw consent at any time. You have the right to lodge a complaint with your local data protection authority. To exercise these rights, email info@teacherangelo.com; we respond within one month.

8. Security

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and least-privilege server credentials. No system is perfectly secure; we will notify you of any breach affecting your data as required by law.

9. Cookies

We use a small number of strictly necessary cookies and similar storage to keep you signed in and remember preferences. We do not use third-party advertising cookies.

10. Children

The service is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from them.

11. Changes

We may update this notice. Material changes will be announced in-app or by email.

Contact

Privacy questions: info@teacherangelo.com.