Privacy Policy
Last updated: September 23, 2026
This Privacy Policy explains how AllTalk (“AllTalk”, “we”, “us”) collects, uses, stores and shares information when you use our language-learning service at alltalk.jp, app.alltalk.jp and related pages (the “Service”). AllTalk is operated by Susurobo in Japan. By using the Service you agree to the practices described here and to our Terms of Service.
1. Information we collect
Account information
- Email sign-up: your email address and a password. Passwords are handled by Google Cloud Identity Platform; we never see or store them in plain text.
- Sign in with Google: see Section 2.
- The learning track you signed up for (for example, Japanese or US English), your chosen display name, and your account creation date.
Learning and conversation data
- Voice audio. When you speak with an AllTalk tutor, your microphone audio is streamed to our servers in real time so it can be transcribed and answered. We do not currently keep recordings of your voice after the conversation turn has been processed.
- Transcripts. We store the text of your conversations (what you said, as transcribed, and what the tutor said), along with timing information.
- Progress. Lessons, drills and role-plays completed, vocabulary, grammar and kanji progress, hints used, goals, scores and study streaks.
- Questionnaire answers you give on our landing pages (for example, which test you are preparing for and how much time you study).
Payment information
Paid plans are processed by Stripe. Your card details are entered directly with Stripe and are never stored on our servers. We receive and keep your subscription status, plan, billing history and a Stripe customer identifier.
Technical and usage information
- Device and browser type, operating system, screen size, and page performance measurements.
- Pages and features you use, and events such as starting a lesson or signing up.
- Your country, inferred from your IP address (we keep only the two-letter country code, not your city or full IP address in your profile), and any country you select yourself. We use it to show regional pricing.
- Marketing parameters from the link you arrived through, such as UTM tags and ad click identifiers from Google, Meta, Microsoft or TikTok, so we can tell which campaigns work.
- Cookies and similar browser storage used to keep you signed in, remember preferences, and measure usage (see Section 6).
2. Information we receive from Google
If you choose Sign in with Google, Google shares the following with us, with your permission:
| Scope | Data | How we use it |
|---|---|---|
openid | A unique Google account identifier | To link your Google account to your AllTalk account and sign you in. |
email | Your email address and whether it is verified | As your account identifier, for sign-in, and to contact you about your account, billing and important changes to the Service. |
profile | Your name and profile picture | To personalise the Service, for example greeting you by name. |
We do not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google data, and we do not receive your Google password.
Limited Use. AllTalk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:
- use Google user data only to provide and improve the user-facing features of AllTalk described above;
- do not sell Google user data, and do not use or transfer it for advertising, including personalised or retargeted ads;
- do not use Google user data to develop, improve or train generalised AI or machine-learning models;
- do not allow humans to read Google user data unless you give us permission, it is needed for security or to comply with law, or it has been aggregated and anonymised for internal operations.
3. How we use information
- To provide the Service: run conversations with AI tutors, give feedback and hints, and save your progress.
- To personalise lessons, choose the next content for you, and show regional pricing.
- To process payments and manage subscriptions.
- To maintain security, prevent abuse and fraud, and debug problems.
- To analyse, in aggregate, how the Service is used and improve lessons, content and tutor quality.
- To measure the effectiveness of our own marketing campaigns.
- To communicate with you about your account, the Service and, where permitted, updates you can opt out of.
- To comply with legal obligations.
We do not sell your personal information.
4. How we share information
We share information only with service providers that process it on our behalf to run the Service, under contracts that limit their use of it:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Cloud (Identity Platform, Cloud Run, Cloud SQL, Firestore, BigQuery, Cloud Storage) | Authentication, hosting, databases, analytics storage | All categories above |
| Deepgram | Speech-to-text | Your voice audio during conversations |
| OpenAI | Generating tutor replies and feedback | Conversation transcripts and lesson context |
| Microsoft Azure, Cartesia, ElevenLabs | Text-to-speech for the tutor’s voice | The tutor’s reply text |
| Stripe | Payments and subscriptions | Email, plan, payment details you enter with Stripe |
| Google Tag Manager / Google Analytics and advertising platforms (Google, Meta, Microsoft, TikTok) | Usage analytics and campaign measurement | Usage events, device data, click identifiers |
Google user data received through Sign in with Google is shared only with Google Cloud Identity Platform and our database hosting as needed to sign you in; it is not shared with advertising or analytics platforms.
We may also disclose information if required by law or to protect the rights, safety and property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this Policy will continue to apply to your data.
5. Storage, security and retention
Your data is stored on Google Cloud, primarily in Japan (Tokyo region). Some providers listed above process data in other countries, including the United States; where they do, we rely on their contractual safeguards. Data is encrypted in transit (HTTPS/TLS) and at rest, and access is restricted to personnel who need it to run the Service.
We keep your account and learning data for as long as your account is active. When you delete your account, we delete or anonymise your personal information within 30 days, except where we must keep it longer to meet legal, tax or accounting obligations (for example, billing records), or to resolve disputes. Aggregated, anonymised statistics may be kept indefinitely.
6. Cookies and similar technologies
We use browser storage that is necessary to keep you signed in and remember your preferences, and analytics and advertising tags (through Google Tag Manager) to understand usage and measure campaigns. You can block or delete cookies in your browser settings; blocking necessary storage may stop sign-in from working.
7. Your choices and rights
- Access and correction: you can ask for a copy of your data or ask us to correct it.
- Deletion: you can ask us to delete your account and associated data by emailing max@alltalk.jp from your account email address.
- Revoking Google access: you can remove AllTalk’s access at any time at myaccount.google.com/permissions. This stops future sign-ins with Google; to delete data we already hold, request deletion as above.
- Marketing emails: you can unsubscribe using the link in any marketing email.
Depending on where you live (for example, under Japan’s Act on the Protection of Personal Information, the EU/UK GDPR, or California law), you may have additional rights, such as objecting to or restricting processing, data portability, or complaining to a data-protection authority. We will respond to requests within 30 days.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, you should use the Service with the consent of a parent or guardian. If you believe a child under 13 has given us personal information, contact us and we will delete it.
9. Changes to this Policy
We may update this Policy from time to time. We will post the new version on this page and change the “Last updated” date; if the changes are significant, we will notify you by email or in the Service before they take effect.
10. Contact
Questions or requests about this Policy or your data: max@alltalk.jp.