Privacy Policy

What we collect

• Account data: your name, email address, account ID, school or university, and role (student, teacher, parent or administrator).
• Learning data: your lessons, written answers, speaking transcripts, feedback, scores, XP, streaks, CEFR level, gold coins, mascot choices and game results.
• Microphone audio: when you use speaking activities, your voice is processed for speech recognition, conversation and pronunciation feedback. Some activities also save a recording, as explained below.
• Push notification data: a push token is an identifier that lets a notification service reach your app installation. With notification permission, we link the token and platform to your account to send learning reminders and learning-related updates. We also keep notification preferences and delivery history, including message content and delivery status.
• Technical data: device and app information, service-use records, and error and performance information used to operate the app and investigate problems.
• Support requests: your email address, optional name, selected topic, message and any app or device details you choose to include. We use these to reply and investigate your request. Our support form also uses protected identifiers derived from your network address and email to limit spam.

Microphone use and saved recordings

We ask for microphone permission when you use speaking features. Speech recognition may send your audio to the speech service on your device or browser, including Google's speech service on supported Android devices. Recognised text can be sent to our AI services for a reply or feedback.

Some Schoolday speaking exercises and Grup Kampus voice replies save your recording and transcript in Echo Journal, also shown as Voice Journey. These recordings let you review your progress and let authorised staff support your learning. They are stored with your account; they are not discarded immediately after transcription.

Walky Talky and some other speaking activities, including the Escape Room guard conversation, save conversation text, feedback and scores. This does not mean that every speaking activity saves a voice recording.

Why we use your data

We do not sell your personal data or use it for third-party advertising.

• To provide the app: sign you in, save your work, show progress, personalise practice and run learning activities.
• To support learning: provide speech and AI feedback, let authorised teachers review learning records, and deliver the reminders you enable.
• To keep the app working: investigate errors, measure service performance and prevent misuse.

How data is stored and shared

We use secure connections and account permissions to protect access. Speech and AI providers also have their own processing and retention rules; we do not promise that every provider deletes data immediately after a request.

• Supabase hosts account and learning records, including saved journal recordings, transcripts and notification tokens.
• Your device or browser's speech-recognition service processes microphone audio. Alibaba Cloud's DashScope/Qwen and Google Gemini process text for conversations and feedback. Google Cloud Text-to-Speech processes text to generate spoken playback.
• Expo and your device's notification delivery services process push tokens and notification content to deliver the notifications you enable.
• Supabase processes website support submissions. Resend delivers your contact details and message to the NextGen Digital Systems support inboxes, including our designated Gmail inbox. The form does not create a separate database record of your message. A self-hosted ALTCHA spam check runs in your browser and is verified by our server before sending.
• Authorised teachers, education staff and administrators can review learning records and, where their role allows, saved recordings or transcripts. A linked parent can see learning progress and task feedback.

How long we keep data

We keep your account details until your account is deleted. Saved journal recordings, speaking transcripts and feedback have no automatic expiry after a set number of days. Repeating a journal activity can replace its earlier recording. When we process a student's account-deletion request, we remove the account, saved journal recordings, task progress and AI feedback from active account records. Device files, generated-speech caches and technical records follow their separate retention rules below.

Temporary recording and playback files can also remain in the app's storage on your device. Signing out does not necessarily erase these files. They can remain until the device clears its cache or you clear the app's storage; the app does not give them a fixed deletion deadline.

Generated speech and its text can be cached for reuse. This is separate from your microphone recordings. Our configured cleanup targets generated clips outside the lesson library that have never been reused and have been untouched for more than 60 days. Reused clips and library audio can remain longer.

When no push notification types remain enabled for your account, Tigaly removes its registered push tokens once it can connect to the service. If you disable notifications in device settings, Tigaly removes this device's token when it next checks that permission while online. Tokens are also removed when account deletion is completed.

Turning notifications off does not erase previous delivery history. That history has no automatic age-based expiry and is removed when the account profile is deleted. Local notification metadata may remain on an offline device until the app next runs or its storage is cleared.

Daily cleanup removes routine diagnostics older than 30 days, error and fatal logs older than 180 days, and AI service-usage records older than 90 days. These periods run from when a record was created, not from account deletion. Rate-limit counters are eligible for daily cleanup one day after they expire. Speech and AI provider retention is separate from these records.

Account deletion does not automatically erase invitation names and email addresses, class-promotion audit records, submitted problem reports or abuse-block records. These can still contain identifying details and have no automatic expiry. They are separate from active learning records. Contact support to have these records reviewed as part of your deletion request; we will explain any records that remain and why.

Support correspondence can remain in our support inboxes and email-service records. Deleting a Tigaly account does not automatically delete those copies. Contact us to request removal. Support rate-limit counters contain protected identifiers, counts and expiry times, not message text. Expired counters are removed by scheduled cleanup; this is not immediate deletion after sending. Your browser tab also keeps a temporary submission marker to prevent accidental repeats. It does not store your name, email address or message, and expires after 24 hours or when the tab session ends.

Your choices and deletion requests

• You can request access to, correction of, or deletion of your personal data. To request account deletion or removal of saved learning records, use the public support form's Account and data deletion option, or email support@nextgendigitalsystems.com from your Tigaly account's email address. Say what you want deleted and include your university if applicable. We respond within 30 days, verify account ownership and explain any records that remain. University-managed accounts can also go through their administrator. If you cannot access your account email, contact support for another way to verify ownership. Never send your password.
• You can revoke microphone access in your device settings. Speaking features that need the microphone will not work until you enable it again. Revoking permission does not delete recordings already saved to your account.
• You can change learning reminders in Tigaly or turn off notification permission in your device settings. Push notification permission is optional.

Children and students

Tigaly is intended for students. Where a school or parent creates an account for a minor, they are responsible for obtaining appropriate consent. Contact us to review or delete a student's data.

Changes to this policy

We may update this policy as the app evolves. The date at the top shows the latest version.

Contact

NextGen Digital Systems
support@nextgendigitalsystems.com