Privacy Policy

Last updated: May 31, 2026

This Privacy Policy explains what personal data Level ("Level", "we", "us") collects, why, and your rights over it. It applies to the Level iOS and iPadOS app and the website at www.level.study.

1. Who is responsible for your data

The data controller is Level, operated by Yet Another Company AB (org. no. 559200-6802), Ekollonstigen 27, 152 51 Södertälje, Sweden. For any privacy question or request, contact us at support@level.study.

2. Information we collect

Account & identity

Level uses Sign in with Apple. When you sign in, we receive a stable Apple user identifier and, only if you choose to share them, your name and email address (Apple may relay a private, anonymized email on your behalf). We store this together with sign-up and last-seen timestamps and a read-only mirror of your subscription state. We never receive your Apple ID password.

Age

At setup we ask for your year of birth. We keep it on your device and use it for a single purpose: so the app can keep generated lessons age-appropriate. If the learner is a minor, the app includes their age in the instructions it sends to our AI provider so the content avoids adult themes; an adult's exact age is not sent at all. Your year of birth is never sent to our servers and is never used to identify, profile, or contact you. See also §11.

Learning content you submit

To tutor you, the app processes the content you produce during practice:

• Text you type in exercises (answers, free-writing, conversation turns).
• Audio you record in speaking and listening exercises, when you grant microphone and speech-recognition permission.

This content is sent to our AI sub-processors to generate lessons, transcriptions, speech, help, and feedback (see §4). Your learning progress (vocabulary mastery, milestones, history) is stored in a database on your device.

Usage analytics

We collect pseudonymous product-analytics events about how features are used, for example, that a practice session started, which exercise mode ran, how long a submission took, and your score on it. Analytics events never include the text or audio of your submissions, and our analytics person-profiles never include your name, email, Apple identifier, date of birth, precise location, advertising identifiers, device model, or screen size. Session/screen recording is disabled.

Subscriptions

If you subscribe to Level Pro, your purchase is processed by Apple and managed through RevenueCat. We receive subscription lifecycle signals (e.g. started, renewed, cancelled, expired) without any payment-card details. Apple handles payment and we never see your card or bank information.

Technical & log data

Requests from the app pass through our proxy server, which logs standard request metadata (timestamp, route, status, approximate timing) for reliability and abuse prevention. Transport is encrypted with TLS.

3. How we use your data

• To provide the service: generate and deliver your lessons, transcribe and synthesize speech, score your work, and track your progress.
• To authenticate you and keep your account secure.
• To manage subscriptions and entitlements.
• To improve the product: understand which features help learners, via pseudonymous analytics.
• To prevent abuse and protect the integrity of the service.

Under the GDPR, our legal bases are: performance of a contract (providing the app you signed up for), legitimate interests (security, abuse prevention, product improvement), and consent where required (e.g. microphone access, which you grant through the system prompt and can revoke in Settings).

4. AI processing and sub-processors

Level's tutoring is powered by third-party AI services. Your practice content is sent to them only to produce your learning experience, and never to train AI models. We don't keep the content of their responses on our servers.

Your audio is not stored. Speaking and listening practice is streamed to the transcription provider in real time and discarded as it is transcribed; no audio file is kept, by us or by the provider. Conversation transcripts are not kept beyond the active session; they are cleared when the session ends.

These providers process your content under their own terms and privacy policies. We encourage you to review them: Anthropic, xAI, and Soniox (linked above).

5. Analytics

We use PostHog for product analytics, hosted in the European Union (eu.i.posthog.com). Until you sign in, analytics are tied only to an anonymous device-generated identifier; after sign-in they are keyed to your Apple identifier for the sole purpose of connecting your own sessions across devices. As noted in §2, analytics never carry your practice content or directly-identifying profile fields.

6. Data sharing

We do not sell your personal data. We share data only with the sub-processors that make the service work:

We may also disclose data where required by law, or to protect the rights, safety, and security of our users and the service.

7. Data retention

• Audio you record: streamed for transcription and never stored, by us or by the transcription provider.
• Conversation transcripts: not persisted beyond the active session.
• On-device learning data: kept on your device until you delete it (see §9) or remove the app.
• Account record (Apple identifier, optional name/email, subscription mirror): kept while your account exists; deleted on request (§9).
• Analytics & logs: retained for a limited period consistent with the storage-limitation principle (GDPR Art. 5(1)(e)) and our providers' default retention windows.

8. International transfers

Some sub-processors are located in the United States. Where personal data is transferred outside your region, we rely on the providers' appropriate safeguards (such as Standard Contractual Clauses) to protect it. PostHog analytics are hosted in the EU.

9. Your rights

Depending on where you live (including under the GDPR and CCPA), you have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent.

• Delete on-device data: at any time from Settings → Delete Account in the app, which erases your local learning data and signs you out.
• Delete your account record: to erase the account data held in our infrastructure (Apple identifier, any name/email, subscription mirror), email support@level.study and we will delete it.
• Other requests: contact support@level.study. We respond within the timeframes required by applicable law.

You also have the right to lodge a complaint with your local data-protection authority.

10. Security

All network traffic is encrypted in transit with TLS. We minimize what we collect and how long we keep it: your practice text and audio are processed to generate your lessons and then discarded, and the only personal data we retain is the minimal account record described above. No method of transmission or storage is perfectly secure, but designing for data minimization keeps the amount of personal data at risk small.

11. Children & learners of all ages

Level is designed for learners of all ages. As described in §2, we ask for your year of birth at setup and use it on your device to keep generated lessons age-appropriate: for a younger learner, the app instructs the AI to avoid adult themes and to match vocabulary and topics to their age. We recommend that a parent or guardian set up and supervise the app for younger children. We collect no more from a child than from any other learner, and a child's practice content is handled exactly as described above: processed to generate lessons, never stored, and never used to train AI models.

12. Changes to this policy

We may update this policy as the product evolves. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

13. Contact

Questions or requests: support@level.study.