Privacy Policy
Last updated: 14 February 2026
1. Introduction
Ikarza Ltd ("we", "us", or "our") operates Uchitil, an AI-powered Russian language learning application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Uchitil application, website, and related services (collectively, the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you sign in using Google, we receive and store your name, email address, and profile image from your Google account. This information is used to create and maintain your Uchitil account.
2.2 Conversation Data
We store the messages you send to and receive from the AI tutors, including chat history, vocabulary items you encounter, grammar points covered, and lesson progress. This data is essential for providing personalised tutoring and tracking your learning journey.
2.3 Usage Data
We collect information about how you use the Service, including the number of messages sent, session activity, features used, and general interaction patterns. This helps us understand how the Service is used and enables us to enforce usage limits associated with your plan.
2.4 Device Information
To protect against abuse and enforce our one-account policy, we collect certain device and browser characteristics, including your user agent, screen dimensions, timezone, language preferences, and hardware identifiers. This information is cryptographically hashed on your device before being sent to our servers, meaning we store only a non-reversible fingerprint rather than the raw device details.
2.5 Payment Information
If you subscribe to a paid plan, payment processing is handled entirely by Stripe, our third-party payment processor. We do not store your credit card number or full payment details on our servers. We retain only a Stripe customer identifier and subscription status to manage your account.
2.6 Technical Data
We collect IP addresses from visitors (including guests who interact with the demo experience), session cookies for authentication, and use browser local storage to maintain your preferences and chat state for a seamless experience.
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Deliver personalised AI tutoring, generate lessons, track vocabulary, and enable voice pronunciation features.
- Personalise your experience: Remember your learning preferences, tutor selection, progress, and conversation history.
- Process payments: Manage subscriptions, billing, and payment-related communications through Stripe.
- Ensure safety and prevent abuse: Detect and prevent fraud, enforce usage limits, and protect against account sharing or misuse through device fingerprinting.
- Improve the Service: Analyse usage patterns and feedback to develop new features, fix issues, and enhance the learning experience.
- Communicate with you: Send service-related notifications, such as billing confirmations or important changes to the Service or these policies.
4. Third-Party Services
We use the following third-party services to operate Uchitil. Each processes certain data on our behalf:
Google (Authentication)
We use Google OAuth for account sign-in. When you sign in, Google shares your name, email, and profile image with us. Google's use of your data is governed by Google's Privacy Policy.
Google Gemini (AI Processing)
Your chat messages are sent to Google's Gemini AI service to generate tutoring responses. This means Google processes the content of your conversations to provide the AI tutoring functionality. See Google AI Terms.
Stripe (Payments)
Subscription billing and payment processing are handled by Stripe. Your payment information is collected and stored by Stripe directly. See Stripe's Privacy Policy.
ElevenLabs (Voice)
Russian text from tutor responses is sent to ElevenLabs to generate spoken audio for pronunciation practice. See ElevenLabs' Privacy Policy.
Cloudflare (Storage)
Generated audio files are stored on Cloudflare R2 for caching and playback. See Cloudflare's Privacy Policy.
MongoDB Atlas (Database)
Your account data, conversations, and usage records are stored in MongoDB Atlas, a cloud-hosted database service. See MongoDB's Privacy Policy.
5. Data Storage & Security
We take reasonable measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. This includes using encrypted connections (HTTPS), secure authentication tokens, and hashing sensitive identifiers before storage.
Your data is stored on cloud infrastructure provided by our third-party service providers. While we implement industry-standard security practices, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data, including your conversations, profile information, and usage records. Some data may be retained for a limited period to comply with legal obligations, resolve disputes, or enforce our agreements.
You can delete your account at any time from your account settings page.
7. Your Rights
Depending on your location, you may have certain rights regarding your personal data, including:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data. You can also delete your account directly from your account settings.
- Data portability: Request your data in a structured, commonly used format.
- Objection: Object to certain processing of your personal data where applicable.
To exercise any of these rights, please contact us at hello@uchitil.com. We will respond to your request within a reasonable timeframe.
8. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at hello@uchitil.com.
9. Cookies & Local Storage
The Service uses the following technologies to store data in your browser:
- Session cookies: Used for authentication to keep you signed in. These are essential for the Service to function and cannot be disabled.
- Local storage: Used to store your chat history, preferences, vocabulary, active persona selection, and other settings locally on your device for a faster, offline-capable experience.
We do not use third-party advertising or tracking cookies. We do not use any analytics services such as Google Analytics.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Ikarza Ltd
Email: hello@uchitil.com