Privacy Policy — Converloop

What We Do Not Collect

There are no ads, no analytics or telemetry SDK, and no third-party tracking, and we never sell your data. The app never asks for your name, email address, phone number, or Apple Account (we see your email address only if you email us), and we collect no advertising identifier, location, contacts, calendar, or health data. We keep no copy of your conversation history, corrections, mastery records, or learner profile; a Converloop AI request carries only the part a task needs, as described below. If you use Apple Intelligence or your own API key and never connect Converloop AI, the app sends nothing to our server.

Where Your Data Lives

• Conversations, correction evidence, mastery records, saved expressions, and your learner profile are stored in a database on your device.
• Preferences — interface language, appearance, accent colour, and the model and voice services you chose — are stored in local preferences on your device, along with a cached copy of your purchase and subscription status so the app works offline.
• API keys you enter, and the credentials that connect this device to Converloop AI, are stored in the iOS Keychain with AfterFirstUnlockThisDeviceOnly protection: they never sync through iCloud, never move to another device, and are never included in exported backup files.
• This data is protected by iOS's own file protection. Converloop does not apply additional whole-database encryption on top, and we make no such claim.

AI Model Services You Choose

Replies, corrections, explanations, translations, word lookups, and the app's other AI features are written by a language model. For each request, the app sends the text you typed or dictated, the recent part of the conversation, and whatever learning context the task needs — such as your languages and level, learning goals and practice preferences, and relevant items from your learning records. Where it goes depends on the service you pick during setup or under Settings → AI Services → Language Model:

• Apple Intelligence: with the on-device model, nothing leaves your device. Private Cloud Compute sends the request to Apple's servers, where Apple processes it; according to Apple, it is used only to fulfil the request and is not stored. The Automatic setting, the default where available, uses Private Cloud Compute first and the on-device model when the network or the cloud is unavailable; choose On-device model to keep everything local. These requests never pass through us and are covered by Apple's privacy policy.
• Your own API key: the request goes from your device straight to the provider you configured, using your key. It never passes through us, we cannot see it, and the provider's own privacy policy and terms apply, so please read them before entering a key. Providers currently include OpenAI and OpenAI-compatible endpoints, Anthropic, Google Gemini, DeepSeek, OpenRouter, Qwen, Moonshot (Kimi), Zhipu GLM, and any compatible endpoint whose address you supply.
• Converloop AI: once you agree, the request goes to the service we run and on to the model providers named in Settings. The next section explains it in full.

Converloop AI

Converloop AI is the model service we run, so you need no key of your own. It is the only part of Converloop that sends data to a server we operate.

• Connecting: when you tap Connect this device, Apple's App Attest confirms the request comes from a genuine copy of the app. Our server then creates a service identity for this device — a random ID — and stores it with the identifier and public key of this installation's App Attest key. No name, email address, or Apple Account is involved, and no conversation content is sent when you connect.
• Permission first: Converloop AI sends nothing for processing until you agree — in setup, where the recipients are named before you connect, or with Allow AI data processing on the Converloop AI page in Settings. From then on, each request carries the text and learning context described above, over HTTPS, to our server at api.converloopai.com. Existing app versions may use api-converloop.617005.xyz, which connects to the same service.
• On the way: requests reach our server through Cloudflare, which runs the secure entry point to it and so handles the traffic in transit. Our server then sends each request through our relay to whichever model provider answers it: OpenAI, Google, Anthropic, or Moonshot (Kimi). When the relay fails, the request goes to DeepSeek's own API instead. These providers handle the data under their own terms, and we do not promise that they keep none of it. Our relay reaches them through accounts we hold with each provider, and under those accounts' terms a provider may keep the content and may use it to improve its models; we cannot turn that off for you, so do not send through Converloop AI anything you would not share with these providers. They operate internationally, so your text may be processed outside your country: in the United States when OpenAI, Google, or Anthropic handles it, and in China when Moonshot or DeepSeek handles it. Like any internet request, it also reveals your device's IP address to Cloudflare and to our server, which uses it only to deliver the response and keep the service secure.
• What our server keeps: your service identity and App Attest key; whether you allowed data processing, and which version of the disclosure you agreed to; your allowance and, if you subscribe, your subscription record (see Purchases); and, for each request, a usage record — request ID, task type, which model answered, time, duration, tokens used, and allowance charged. It does not keep the text of your requests or of the replies once a request has finished, with one exception: when a request fails inside our relay, the relay keeps a copy of that request, including its text, for troubleshooting. Only the 10 most recent failed requests are kept; each new failure deletes the oldest. We use these records only to run Converloop AI: to verify the device, count allowance, check subscriptions, keep the service secure, and answer your support requests.
• How long: these records are kept while your service identity exists. If you ask us to delete it (see Your Controls), we delete the identity, its usage records, and its consent record, keeping only the minimum subscription transaction records we are required to retain. Our server backups are overwritten after 14 days, so deleted data leaves them within that time.
• Turning it off: switch off Allow AI data processing (Settings → AI Services → Language Model → Converloop AI) at any time. The app stops sending immediately, cancels requests in progress, and records the withdrawal on our server. You can keep using Converloop with Apple Intelligence or your own key.
• Speech is separate: Converloop AI's model service does not process audio. Recording and reading aloud keep their own settings, described below.

Purchases

Purchases are processed by Apple under the App Store's terms; we never see your payment details or your Apple Account. The 7-day free trial and the one-time Lifetime Full Version purchase are checked on your device, and the app sends nothing about them to our server. When you subscribe to Converloop AI, the app sends Apple's signed record of the transaction to our server, which checks Apple's signature and stores the product, transaction identifiers, dates, and subscription status to provide the service. Restoring with the same Apple Account on another installation sends its signed transaction too, and links that installation to the original subscription and shared allowance without granting the allowance again. Each installation keeps its own device identity, processing consent and request records; restoring a purchase does not give consent to send learning content. Apple also notifies our server when the subscription renews, ends, or is refunded. You can cancel or manage it at any time in your App Store subscriptions.

Voice Input and Speech

• By default, Apple's speech recognition runs on your device and no audio is sent anywhere.
• Audio reaches a provider only if you deliberately switch to a remote transcription service — an OpenAI-compatible endpoint or Soniox, with your own key — under Settings → AI Services → Speech to Text. Your recording then goes straight to that provider.
• With Apple's system voices, speech is produced on your device. With a speech service of your own — OpenAI or a compatible endpoint, Xiaomi MiMo, ElevenLabs, Google Gemini, MiniMax, or Alibaba Cloud Model Studio — the text to be spoken goes straight to that provider.
• Please note: the free Converloop AI voices are Xiaomi MiMo voices, using a key built into the app. If you choose them, during setup or under Settings → AI Services → Text to Speech, the text to be spoken is sent to Xiaomi's MiMo service; it does not pass through our server. They are used only if you choose them, and you can switch back to Apple's voices at any time.
• Whichever services you use, we never receive your recordings.

iCloud

If you are signed in to iCloud, Sync Learning Goals and Preferences is on by default. It syncs only your learner profile — native and target language, current level, learning goals, practice preferences, and a short summary of what you are working on — between your own devices through your own iCloud account. Conversations and detailed mastery records are not synced. The data sits in your iCloud, which we cannot access, and you can turn the sync off under Settings → Data and Backup.

Diagnostic Reports

iOS records Converloop's own crashes and hangs. Those reports are kept on your device, at most fourteen of them, and are never uploaded automatically. To share them, tap Send Feedback under Settings → Support: the email draft it opens carries them as an attachment, which you can remove before sending. The reports contain Apple-generated call stacks and system information — no conversation text, learning records, or API keys. Developer Mode also shows a log of your recent AI requests, which can include excerpts of requests that failed; it stays on your device unless you copy it out yourself.

Children

Converloop is not directed at children under 13 and does not knowingly collect information from them. Because the app sends your input to AI services — Apple's, a provider you choose, or Converloop AI and its model providers — and AI-generated content is not fully under our control, we recommend that minors use it with guardian guidance. If you believe a child under 13 has used Converloop AI, contact us and we will delete the data linked to that device's service identity.

Your Controls

• Export: Settings → Data and Backup → Backup and Transfer → Export Backup produces a JSON file with all your learning data; API keys and other credentials are excluded.
• Delete on your device: you can delete individual conversations, learning records, and diagnostic reports inside the app, and deleting the app removes its local data. iOS may keep an app's Keychain entries, such as your API keys, after the app is deleted, so clear your keys in Settings first if you want them gone too.
• Stop Converloop AI: turn off Allow AI data processing on the Converloop AI page. Nothing more is sent, and requests in progress are cancelled.
• Delete your Converloop AI data: email us from Settings → Support → Send Feedback, which includes this device's service identity when it is connected to Converloop AI. We will delete the identity and the records linked to it as described above.
• Keep AI and speech on your device: choose Apple Intelligence with the On-device model, Apple's speech recognition, and Apple's voices.
• Third-party data: anything already sent to Apple, to a provider you configured, to Xiaomi MiMo, or to the model providers behind Converloop AI is handled under that provider's policy — we have no ability to delete it on your behalf.

Changes to This Policy

If this policy changes materially, we will update the "Last updated" date on this page and note it in the release notes of the new version. Before Converloop AI sends your data to any recipient not named here, we will update this page and the disclosure in the app and ask for your permission again.

Feedback and Support Email

Send Feedback (Settings → Support) and Report This Problem (on an error) open an email draft to us in your own mail app. Below the space for your message, the draft lists: the app and iOS versions and the device model; the app language, the language you are learning, your level, and your native language; the model and voice services you use, their model names, and the host name of any address you entered; if this device is connected to Converloop AI, its service identity and last request ID; and the time, task, error message, and log ID of up to five recent failed AI requests. Crash reports kept on the device are attached. It contains no conversation text, nothing that was sent to a model, and no API keys. The app sends nothing itself: you can edit or delete any of it, and only what you send reaches us. If the service identity is included, your email address becomes linked to that device's Converloop AI records, which is what lets us answer subscription and deletion requests. We keep support email in our mailbox to answer you, and delete it on request.

Contact Us

For any privacy question, complaint, or rights request — including deleting your Converloop AI data — please email jovidalao@gmail.com. We use your email only to reply to you.