1.Who we are
Monkita is operated by Monkita Team, [Address, Vietnam] ("Monkita"). For the purposes of Vietnam's Decree No. 13/2023/ND-CP on Personal Data Protection, and of other data protection laws that apply to you (such as the EU and UK GDPR), Monkita is the controller of the personal data described in this policy.
You can contact us about privacy at any time at support@monkita.app.
2.Data we collect
Depending on how you use Monkita, we process the following categories of data:
- Account data: your email address, your name and profile photo (if you add one or if they come from Apple or Google sign-in), and a unique account ID. If you sign in with Apple and choose to hide your email, we only receive Apple's private relay address. Passwords are handled by our authentication provider and are never stored in readable form.
- Learning profile: the language you are learning, your native language, your level (A1 to C2), your learning goals and interests, your daily goal, your time zone and the reminder time you choose.
- Learning activity: the words you save, your flashcard reviews and their schedule, the videos and books you open and your progress in them, the days you studied (for streaks and the activity map), and your practice results, such as the text you type in dictation or fill-in exercises and the scores you receive.
- Content you add: links you paste (for example YouTube links), audio or video files you upload, books you import (EPUB or PDF) and photos of book pages you scan, together with the subtitles, text, translations and audio we generate from them.
- AI tutor conversations: the messages you send to the AI tutor and its replies, so you can see the conversation again later.
- Technical data: when the app talks to our servers, our infrastructure records basic technical information such as IP address, device and operating system type, app version, time of the request and error details. We use it to keep the Service secure and working.
We do not ask for your date of birth, phone number, postal address or payment card details.
3.Microphone, camera, photos and notifications
Monkita asks for device permissions only when you use a feature that needs them, and you can change them at any time in your device settings.
- Microphone and speech recognition: used to score your pronunciation in shadowing and role-play. Speech is recognised on your device whenever your device supports it, and recordings stay on your phone. If on-device recognition is not available, your device's built-in speech service from Apple or Google may process the audio under their own privacy terms. Monkita does not upload or store your voice recordings on our servers.
- Camera and photo library: used to scan book pages, add videos or audio you choose and set a profile photo. Only the photos and files you pick are uploaded.
- Notifications: daily study reminders are scheduled locally on your device. We do not collect push notification tokens.
4.How we use your data and our legal bases
- To provide the Service you asked for: create and secure your account, sync your library, progress and flashcards across devices, generate subtitles, translations, dictionary entries and audio, and run the AI tutor (performance of our contract with you).
- To personalise learning: recommend episodes and books for your level and interests and schedule reviews (performance of contract and your consent given when you set up your profile).
- To keep the Service safe and reliable: prevent abuse, enforce usage limits, debug errors and protect our users (our legitimate interests and legal obligations).
- To communicate with you: answer support requests and send important notices about your account or changes to these terms (performance of contract and legitimate interests).
- To comply with the law: respond to lawful requests from competent authorities (legal obligation).
Where the law requires your consent, including under Decree 13/2023/ND-CP, we ask for it when you create an account or turn on the relevant feature. You can withdraw consent at any time; this does not affect processing that already took place, but some features may stop working.
5.AI features
Some features use artificial intelligence: the AI tutor chat, subtitle and translation enrichment, dictionary lookups, transcription of audio without captions, text recognition for scanned pages, illustrations and text-to-speech. To provide them, the relevant text, audio or images are sent to the AI providers listed below.
We use these providers through their business APIs, whose terms do not allow them to use the data we send to train their models by default. We do not use your personal content to train our own models. AI output can be wrong, so please do not rely on it for anything important.
6.Service providers we share data with
We share personal data only with providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:
- Supabase: account sign-in, database and file storage.
- OpenAI: AI tutor, subtitle and dictionary enrichment, clean-up of scanned text and generated illustrations.
- DeepInfra: speech-to-text transcription and text-to-speech audio.
- ElevenLabs: text-to-speech audio.
- Apple and Google: Sign in with Apple and Google Sign-In, if you choose them, and app distribution through the App Store and Google Play.
- Hosting and infrastructure providers that run our servers.
When you add a YouTube link, we retrieve the video's public captions and details from YouTube; YouTube's own terms and Google's Privacy Policy apply to YouTube content. We may also disclose data if required by law, to protect the rights and safety of our users or the public, or as part of a merger or transfer of the Service, in which case this policy will continue to apply to your data.
7.International transfers
Our providers may store and process data in countries other than Vietnam or the country where you live, for example in the United States, the European Union or Singapore. When we transfer personal data abroad, we do so in line with Decree 13/2023/ND-CP and other applicable laws, and we rely on safeguards such as the providers' data processing agreements and standard contractual clauses where required.
8.How long we keep data
- Account, learning and content data: for as long as your account exists. If you remove a book or an uploaded video from your library, its files are deleted.
- When you delete your account, we delete your data as described below. Copies in encrypted backups are overwritten in the normal backup cycle, within 30 days.
- Technical logs: kept for a short period, usually no more than 90 days, unless we need them longer to investigate a security incident.
- We may keep limited information longer when the law requires it or to resolve disputes.
9.Deleting your account
You can delete your account at any time in the app: open Profile, then Settings, then Delete account, and confirm. This permanently deletes your profile, sign-in account, saved words and flashcard history, progress, streak activity, practice results, AI tutor conversations, profile photo, and the books, scans and files you uploaded.
If you can no longer access the app, email support@monkita.app from the address linked to your account and we will delete it for you. Public videos that other learners also saved from the same link stay available to them, but are no longer linked to you.
10.Your rights
Depending on where you live, you have the right to:
- be informed about how your data is processed and access a copy of it;
- correct inaccurate data (most of it you can edit directly in the app);
- delete your data or restrict its processing;
- withdraw your consent and object to processing;
- receive your data in a portable format;
- lodge a complaint with a supervisory authority. In Vietnam this is the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security; in the EU or UK, your local data protection authority.
To exercise any of these rights, email support@monkita.app. We may need to confirm your identity first, and we will handle your request within the time limits set by the law that applies to you. If you live in California, you also have the rights given by the CCPA; we do not sell or share personal information for cross-context behavioural advertising.
11.Children
Monkita is meant for people aged 13 and over. If you are under 18, or under the age of digital consent where you live, you may use Monkita only with the permission of a parent or guardian, who agrees to these terms on your behalf.
We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact support@monkita.app and we will delete it.
12.Security
We protect your data with measures such as encrypted connections (HTTPS/TLS), access controls on our database and storage, authentication tokens instead of passwords in the app, and limited access for the people who run the Service. No system is perfectly secure; if a data breach affects you, we will notify you and the authorities as required by law.
13.What we don't do
- We do not sell your personal data.
- We do not show ads or use advertising identifiers (IDFA or Android advertising ID).
- We do not use third-party analytics or tracking SDKs in the app.
- Our website sets a single cookie that remembers your language choice. It does not use tracking or advertising cookies.
14.Changes to this policy
We may update this policy when the Service or the law changes. We will post the new version here with a new date and, for important changes, tell you in the app or by email before they take effect.
15.Contact
Questions or requests about your privacy: support@monkita.app.
Postal address: Monkita Team, [Address, Vietnam].