Privacy Policy
Ravolution AB ("Ravolution", "we", "us") operates Singuistic, a language-learning companion available at singuistic.com. This policy explains what personal data we process, why, on what legal basis, who we share it with, and the rights you have. We are the data controller for the processing described here.
1. Who we are
Controller: Ravolution AB, org.nr 556709-7547, Kaptensgatan 16, 111 57 Stockholm, Sweden.
Privacy contact: privacy@singuistic.com
For any question about this policy or your data, contact us at the address above.
2. The data we process
We collect only what the service needs. By category:
Account data — your email address, and (depending on how you sign in) your name and profile picture provided by Google or Apple, plus the handle, display name, bio and avatar you choose. Used to create and secure your account.
Learning data — the words you save, your review history, song progress, streaks, estimated levels, pronunciation-practice scores, and your chosen learning language and settings. This is the core of the product and stays with your account.
Spotify connection data (optional) — if you connect Spotify, we store the access and refresh tokens needed to keep the connection active, and we read, in real time and without storing it, the track you are currently playing and your position in it, solely to keep the on-screen lyrics in sync. We do not build a history of your listening, and we do not use any of Spotify's restricted data endpoints.
Microphone / song-recognition data (optional) — if you use "Listen" mode, when you tap to identify a song we capture a short audio sample (about six seconds), send it to our recognition provider to identify the track, and discard it. We do not record, store, or keep your audio, and we never listen in the background. The microphone is only ever activated by your explicit tap, and is released the moment the clip is captured. We keep a match log (the track identified, the time, and whether it succeeded) so we can improve recognition — never the audio itself.
Payment data — if you subscribe, payments are processed by Stripe. We receive your subscription status and renewal date; we never receive or store your card number.
Technical data — basic information needed to run and secure the service (authentication session, device/browser type, and error logs). We do not use third-party analytics or advertising trackers.
3. Where lyrics and translations come from
During our closed beta, lyrics are sourced from the open community database LRCLIB, and translations are produced by DeepL. We are finalising a commercial lyrics licence before public launch. We do not scrape lyrics from Spotify or any unlicensed source.
4. Why we process it, and our legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Provide your account and learning features | Account data, learning data | Performance of a contract with you |
| Sync lyrics to your Spotify playback | Spotify connection data | Your consent (you choose to connect) |
| Identify a song via microphone | Song-recognition data | Your consent (per-session, explicit) |
| Process subscription payments | Payment data | Performance of a contract |
| Keep the service secure and prevent abuse | Technical data | Our legitimate interest in a secure service |
| Send you optional product updates | Email address | Your consent (opt-in; withdraw anytime) |
You can withdraw any consent at any time; doing so does not affect processing that already took place.
5. Who we share data with
We use carefully chosen service providers ("processors") who act on our instructions under a data processing agreement. We do not sell your data, and we do not share Spotify data with advertising or analytics networks.
| Provider | Role |
|---|---|
| Supabase | Database, authentication, hosting |
| Stripe | Payment processing |
| Spotify | Playback connection (if you connect) |
| ACRCloud / AudD | Song recognition (if you use Listen mode) |
| LRCLIB | Lyrics |
| DeepL | Translation |
| ElevenLabs | Pronunciation audio |
| Google / Apple | Sign-in (if you use it) |
| Resend | Transactional and opt-in email |
6. International transfers
We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA (for example, a US-based provider), the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision. Our song-recognition processing is configured to the provider's EU region where available.
7. How long we keep it
We keep your account and learning data for as long as your account is active. Spotify tokens are kept until you disconnect. Recognition audio is not retained beyond the moment of identification. If you delete your account, we delete your personal data promptly and cancel any active subscription; some records may be retained where law requires (for example accounting records for payments). You can export or delete your data at any time from Settings → Your data.
8. Your rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent. You can exercise access, export and deletion directly in the app (Settings → Your data), or contact us at privacy@singuistic.com.
You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY) — imy.se.
9. Children
Singuistic is not directed at children under 13. We do not knowingly collect data from children under this age. Educational use involving minors is handled only under separate written agreements with the relevant institution, including the appropriate consent arrangements.
10. Security
We protect your data with encryption in transit, access controls, and server-side handling of all sensitive credentials. No system is perfectly secure, but we work to protect your data and will notify you and IMY of a qualifying breach as required by law.
11. Changes
We may update this policy. Material changes will be notified in the app or by email, and the "last updated" date above will change.