Kaya · Legal

Privacy Policy

Kaya ("Kaya", "we", "us") makes a language-learning app for travellers. This policy explains what we collect, why, and your choices. Questions: privacy@kayalearn.sg.

Last updated: 11 June 2026

1. Our privacy principles

Kaya is offline-first. The app works without an account, and your core content (phrases, scenarios, saved dishes, progress) lives on your device. We collect the minimum needed to make features work, and we do not sell your data or use it for advertising or cross-app tracking.

2. What we collect and why

a) Account information — if you create an account. Email address, and an optional display name. Used to authenticate you and sync your progress across devices. Stored with our hosting provider (Supabase).

b) Your in-app content — if you sign in. Your trips, readiness, XP, streaks, saved dishes and learning progress are backed up to your account so they restore on a new device.

c) Location — only if you enable trip-arrival detection. With your permission, Kaya monitors a geofence around your trip destination so it can switch into “in-trip” mode when you arrive. This happens on your device. Your location/coordinates are not sent to us or anyone else, and are not stored. You can disable this anytime in your device settings.

d) Calendar — only when you tap “Auto-detect my trips”. Kaya reads your upcoming calendar events on your device to find flights and pre-fill a trip. Calendar data is processed locally and is never uploaded.

e) Camera — only when you use Translate/Scan. Camera frames are used to recognise and translate text on signs and menus. When online, the image may be sent to a text-recognition service to perform this and is not retained afterwards. Photos are never saved or shared.

f) Microphone — only when you use pronunciation or “push to listen”. Audio is captured only while you actively hold the button. For “push to listen”, the clip may be sent to a speech-to-text service to transcribe and translate it, then discarded. We do not listen in the background.

g) AI conversation (THRIVE) — only if you use it. Messages you send to the AI partner are sent to our AI provider to generate a reply. Don't share sensitive personal information in chat.

We do not use analytics or advertising SDKs, and we do not track you across other apps or websites.

3. Service providers (subprocessors)

We share data only with providers that process it on our behalf to deliver features:

  • Supabase — account auth, database, and hosting (data hosted in Singapore).
  • Anthropic — powers the THRIVE AI conversation partner (chat text).
  • OpenAI — speech-to-text for “push to listen” (audio clips).
  • ElevenLabs — natural-voice pronunciation (phrase text).
  • Google Cloud Vision — on-the-fly text recognition for camera translate (images).

API keys for these services are held on our servers; the app talks to them through our secure backend, not directly. Providers may change as the app evolves; we will update this list.

4. Payments

Subscriptions (THRIVE) are processed by the app store you purchased through (Apple App Store or Google Play). We do not receive your payment card details. The relevant store's privacy policy governs payment data.

5. Data retention & deletion

Account data is kept while your account is active. You can permanently delete your account and all associated data at any time from Settings → Delete account; this removes your record and synced content from our systems. Uninstalling the app removes on-device data. See our account deletion page for full details.

6. Children

Kaya is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact privacy@kayalearn.sg and we will delete it.

7. Security

Data in transit is encrypted (HTTPS/TLS). Access to your account data is restricted to you via row-level security. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

8. Your rights

Depending on your region (e.g. GDPR/PDPA), you may have rights to access, correct, export, or delete your data. Use Settings → Delete account, or email privacy@kayalearn.sg, and we will respond within a reasonable time.

9. International transfers

Our infrastructure is hosted in Singapore. If you use Kaya elsewhere, your data may be processed in Singapore and by the providers listed above.

10. Changes

We may update this policy; we will post the new “Last updated” date here and, for material changes, notify you in the app.

11. Contact

Kaya — privacy@kayalearn.sg — kayalearn.sg