Privacy policy – Norsk Samtale
This policy explains how personal data is processed when you use the Norsk Samtale app (iOS, Android and web) and this website. We have written it based on what the app actually does.
1. Controller
Martinez Lozano Internasjonal Handel (ENK (enkeltpersonforetak), a Norwegian sole proprietorship owned by Willy Edison Martínez Lozano), org. no. 935 407 095 (VAT NO935407095MVA), Norbygata 19, 0187 Oslo, Norway. Email: kontakt@mlinternasjonal.no. We have not appointed a data protection officer; contact us at the address above.
2. Summary
- No account, no sign-in, no advertising, no analytics, no crash reporting, no purchases and no tracking across apps or websites.
- Voice and AI features are only used after you accept them in the app. Written lessons work without sending anything to the AI.
- Recordings of your voice are sent for transcription (Groq); your messages and recent turns are sent to generate replies (Groq); the tutor's text is sent to create its voice (Microsoft Azure Speech). Requests pass through our server on Microsoft Azure.
- We keep no database of recordings or conversations. The conversation is kept in the app's memory while you use it.
3. What we process and why
3.1 Microphone audio
The microphone is only requested when you use a voice feature (dictation in teacher mode or a practice call). During a call the app listens until you hang up, mute or leave the app. Speech and pauses are detected on your device; only the segments in which you speak (converted to 16 kHz audio) are sent over an encrypted connection (HTTPS) to our server, which forwards them to Groq to be transcribed into Norwegian text. Silence is not sent. Audio is processed to produce the transcription and is not stored by us.
3.2 Text and conversation
The text you type or that was transcribed, together with the most recent turns of the conversation (limited in number and length) and your chosen level and situation, is sent to Groq to generate the tutor's reply, the correction or, if you ask for it after a call, a short summary of your mistakes. The tutor's reply text is sent to Microsoft Azure Speech to generate the Norwegian voice. If the neural voice is unavailable, the app may use your device's built-in voice instead.
Requests contain no name, email, account, advertising or device identifier, location, contacts or files. As with any internet connection, our server and providers see your IP address and basic connection data. Our server keeps the IP address in memory for up to about 10 minutes to apply usage limits and prevent abuse; it is not written to a database.
Purpose: to provide the practice features you ask for. Legal basis: GDPR Art. 6(1)(b) (providing the service you request) and Art. 6(1)(f) (our legitimate interest in operating a secure service and preventing abuse). You can stop at any time by not using voice and AI features, and withdraw your acceptance with «Borrar datos y permisos» in the app.
Please do not say or type personal data about yourself or others, or confidential information, during practice. We do not use your audio or text for advertising or profiling, we do not use it to train AI models and we do not sell it.
3.3 Data stored on your device
The app stores locally only your acceptance of the voice/AI features and your call preferences (level, situation and subtitles). The conversation history lives in memory and is cleared when you restart the session or close the app. «Borrar datos y permisos» deletes the history and the stored acceptance. Microphone permission is changed in your device settings.
3.4 Contacting us
If you email us, we process your email address and the content of your message to answer you (Art. 6(1)(b) and (f)).
3.5 This website
This website is static: it sets no cookies and uses no analytics or third-party scripts or fonts. Our hosting/CDN provider processes your IP address and request data in server logs to deliver the pages and protect against abuse (Art. 6(1)(f)).
3.6 App stores
Downloads are handled by Apple (App Store) and Google (Google Play) under their own privacy policies. We may receive aggregated, anonymous statistics (for example number of downloads) from them.
4. Processors and recipients
We use these service providers (data processors) under their data processing terms:
- Microsoft (Azure Static Web Apps and Azure Functions) – hosts the web app and our server, which relays requests to the AI and voice providers.
- Groq (Groq, Inc., USA) – speech-to-text (Whisper) and the language model that generates the tutor's replies.
- Microsoft (Azure AI Speech) – text-to-speech for the tutor's Norwegian voice.
- Cloudflare – hosting and CDN for this website.
- Our email service provider – to receive and answer emails.
See also the privacy policies of Groq and Microsoft. We do not sell or share personal data with third parties for their own purposes. We may disclose data if required by law.
5. Transfers outside the EEA
Groq, Microsoft and Cloudflare may process data in the United States or other countries outside the EEA. Such transfers are based on the EU–U.S. Data Privacy Framework (where the provider is certified) and/or the European Commission's Standard Contractual Clauses (GDPR Art. 45–46).
6. Retention
- Audio and conversation text: not stored by us in any database or file. The providers may keep requests and technical logs for a limited period under their own terms and account settings (for example for abuse monitoring); we do not promise zero retention by those providers.
- IP addresses for usage limits: in server memory only, for up to about 10 minutes.
- Data on your device: until you use «Borrar datos y permisos» or uninstall the app.
- Emails: as long as needed to handle your request, and no longer than 12 months after it is closed, unless required for a legal claim.
- Website server logs: short-term, according to the hosting provider's standard retention.
7. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability (GDPR Art. 15–21). Email kontakt@mlinternasjonal.no. Because the app sends no identifier and we store no conversations, we normally hold no data that can be linked to you. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) or the supervisory authority where you live.
8. Automated decisions
The AI tutor generates practice replies and corrections. No decision with legal or similarly significant effect on you is made automatically (GDPR Art. 22).
9. Children
Norsk Samtale is designed for adult learners. It is not directed at children under 13 and we do not knowingly process children's data. If you believe a child has used the app, contact us.
10. Security
All communication with our server and providers is encrypted (HTTPS/TLS). API keys for the AI and voice providers are kept on the server, never in the app.
11. Changes
We will update this policy if the app or the processing changes, with the new date above. Important changes will be announced on this website and, where required, in the app.