Privacy Policy
Effective date: 30 October 2026. Controller: iBuddy Technologies Inc. Mailing address: available upon request via privacy@ibuddytechnologies.com. Privacy contact: privacy@ibuddytechnologies.com. Phone: +1 (866) 690-8444.
1. The short version
- To translate, your voice, text or photo is sent to our server and to an AI service provider. We do not store recordings or photos.
- We keep your account, your plan and usage, and your saved history (if History is on).
- We do not sell your data. No ads. No tracking.
- You can delete your account.
2. What we collect and why
Account
Name, email, a password (stored hashed by our authentication provider), the name Lao'dly calls you, your language and settings. If you sign in with Apple or another provider, we receive what that provider shares (Apple may share a relay email or no name).
Voice audio
Recorded only while you use the live voice screen. It is sent to our server and to our AI provider, Google (Gemini), to transcribe, translate and speak. We do not store the recordings. We use Google's paid Gemini API. Under Google's Gemini API terms for paid services, Google does not use our prompts or responses (your voice, text and photos) to improve its products or train its models; it logs them for a limited period, solely to detect and prevent violations (Google's terms: ai.google.dev/gemini-api/terms, checked 16 October 2026).
Typed text and photos
Sent along the same path. For photos, our server removes location and other metadata before translating, and does not store the photo. Only the words read from it can be saved to your history, and only if History is on.
Plan, usage and billing
Plan status and dates, payment-processor customer and subscription IDs, and usage counts (live-voice seconds, number of texts, photos and read-alouds). The usage log is deleted with your account. Card details go only to our payment processor, Stripe, and never reach us. iBuddy Technologies Inc. is the seller of your subscription; Stripe only processes the payment. Purchases made inside the iPhone or Android app are sold through Apple or Google, which handle that payment under their own terms.
Saved history in the cloud
Conversation turns, text and photo words, newest 200 kept, tied to your account. Turn History off to stop saving; delete one item or clear all at any time. For signed-in users, history is stored in the cloud (in our database), not only on your phone.
Live conversation memory
To translate naturally the server keeps your recent turns (about 20) in memory only. They are not written to disk and are cleared when you start over, restart, log out or delete your account.
Security and abuse prevention
Sign-in rate limits. A trial fingerprint: a keyed hash of your email so each email gets one free trial. It is kept after you delete your account (date and fingerprint only). We cannot read your email from it, but it is not anonymous. We keep it to prevent abuse of the free trial (our legitimate interest).
3. Who receives data (processors)
- Google (Gemini API, paid plan): AI translation and speech. It receives your voice audio, typed text and photo content to process them; see section 2.
- Supabase: accounts and database. Region: United States.
- Fly.io: server hosting (United States) and network logs.
- Stripe: web payments; receives your email and account ID.
- Apple and Google as app stores and sign-in providers.
We do not sell data, show advertising, or use data brokers.
4. Legal bases (EU and UK)
Contract (providing the translation service); legitimate interests (abuse prevention, the trial fingerprint); consent (microphone, camera and photo permissions, and AI-sharing consent if added). [PENDING OWNER: lawyer review]
5. How long we keep data
| Data | Kept |
|---|---|
| Account | Until you delete it |
| Usage log | Deleted with your account |
| Saved history | Until you clear it or delete your account |
| Voice, photos, typed text | Not stored by us (history aside) |
| Sessions | Until you log out |
| Trial fingerprint | Kept after account deletion |
| Stripe records | Under Stripe's own rules (tax and accounting duties) |
6. Your choices and rights
- Change permissions in your phone settings; edit your profile; clear history.
- Delete your account in the app, or email us. Your subscription is cancelled and your data removed; a payment taken after deletion is refunded. Deleting in the app takes effect immediately. If you ask by email (for example, if you signed in with Apple and the app tells you to email us), we complete deletion within 30 days.
- Ask for access or correction by email. There is no export feature yet; we handle requests by hand.
- Regional rights (GDPR, UK GDPR, CCPA/CPRA): [PENDING OWNER: lawyer review]
7. International transfers
Our database (Supabase) and our server (Fly.io) are both in the United States. If you use Lao'dly from outside the United States, your data is transferred to and processed in the United States. Google processes data for us as described in section 2. [PENDING OWNER: lawyer review of transfer wording]
8. Security
HTTPS, session tokens in the phone's secure keychain, row-level security, server-only keys. No system is perfectly secure.
9. Children
You must be at least 13 years old to create an account. Children under 13 may use Lao'dly only through a parent's or guardian's account. If you believe a child under 13 has an account of their own, email privacy@ibuddytechnologies.com.
10. Changes and contact
We will post changes here and update the date above. Privacy questions: privacy@ibuddytechnologies.com. General support: support@ibuddytechnologies.com. This page is published at laodly.ibuddytechnologies.com/privacy.