Privacy Policy
Bilingo is a real-time translated voice-call app. This policy explains what we process to make calls work, what we keep, and what we never touch. We do not sell personal data and the app shows no ads.
Your account
Bilingo works without sign-up: the app creates an anonymous account on first use. You can optionally back your credit balance up by signing in — with Google on Android, or with Apple on iOS — then we store the email address of that account so your credits can be restored on a new phone. People who join your calls from a link need no account at all.
Calls and voice
- Call audio is processed in real time to produce the translation, using AI translation services (Google's Gemini API) and real-time audio infrastructure (LiveKit). Audio streams are processed and discarded; we do not record or store call audio.
- Live captions and transcripts are generated during the call. Transcripts are saved only on your device (the Recents tab) and are never uploaded to us. Deleting the app deletes them.
Credits, purchases and the ledger
- We keep a credits ledger for your account: your balance, trial grant, per-minute usage during calls, and purchase credits.
- Purchases are processed by Google Play (Android) or the App Store (iOS); we never see your payment details. Purchase validation uses RevenueCat; we receive the transaction id, product, and storefront country.
- To prevent free-trial abuse, we record a one-way anchor of your device identifier when a trial is claimed, and trial claims may include a device attestation — Google Play Integrity on Android, Apple App Attest on iOS — that the platform evaluates.
Analytics
We collect app usage events (for example: call started, call ended, purchase completed) through Google Analytics for Firebase to understand how Bilingo is used and improve it. The invite web page ships no analytics scripts and sets no cookies; our server records only that a join link was opened and joined.
Advertising measurement
We advertise Bilingo on networks such as Meta, TikTok and Google, and we measure which ads actually work. For this we use Singular, a mobile measurement service. Singular receives your device's advertising identifier (where available), IP address, and a short list of app events — install, first session, demo completed, caller ID verified, first call completed, and the amount of a purchase (never your payment details). This answers one question — "did this install come from that ad" — and nothing more.
- On iOS, we ask first with Apple's tracking prompt. If you decline, measurement falls back to Apple's SKAdNetwork reports, which are aggregate and identify no one.
- On Android, you can reset or delete your advertising ID at any time in system settings (Settings → Privacy → Ads).
- Ad networks receive conversion signals (for example, "an install from this campaign completed a demo") — never your phone number, contacts, call audio, or transcripts.
The app itself shows no ads and never will as part of this.
What we share
Only with the processors that make the product work: Google (Firebase, Play, Gemini, Play Integrity), Apple (App Store, App Attest), LiveKit (real-time audio), RevenueCat (purchase validation), Singular (advertising measurement), and our hosting providers. Each receives only what its function needs.
Deleting your account
Settings → Delete account permanently removes your account and any remaining credits. Two narrow records survive deletion, and only these:
- Device trial anchors — so deleting an account cannot be used to claim unlimited free trials;
- Purchase and refund transaction records — kept for financial accounting and fraud prevention.
Security
All traffic is encrypted in transit (TLS). Ledger data lives in access-restricted infrastructure; no client can read another account's data.
Children
Bilingo is not directed at children under 13, and we do not knowingly collect their data.
Changes and contact
If this policy changes materially, we will update this page and its effective date. Questions or requests: support@ydzlabs.com.