Security Policy

Last updated: March 7, 2026

At AI English Teacher, we take the security of your data seriously. This document outlines the security measures we employ to protect your information.

1. Data Transmission Security

• All data transmitted between the app and our servers uses HTTPS/TLS encryption.
• API communications are authenticated using secure bearer tokens.
• Third-party service integrations use encrypted connections.

2. Authentication Security

• We support Google Sign-In and Apple Sign-In for secure authentication.
• Authentication tokens (UUID-based) are securely stored on your device using platform-native secure storage.
• Passwords for email-based accounts are hashed using industry-standard algorithms before storage.
• We never store or transmit plaintext passwords.

3. Data Storage Security

• Server-side data is stored on secured infrastructure with restricted access.
• Chat history is maintained temporarily in server memory and is not permanently persisted.
• User vocabulary and learning data are stored in isolated per-user data files.
• Local app data is stored using platform-native secure storage mechanisms.

4. Third-Party Security

We carefully select third-party service providers that maintain high security standards:

• Groq Inc.: Enterprise-grade AI infrastructure with data processing safeguards
• Firebase (Google): Google Cloud security standards and certifications
• RevenueCat: PCI-compliant payment and subscription management
• Apple/Google Sign-In: Industry-leading authentication security

5. Account Security

• Users can delete their account and all associated data at any time from within the app.
• Account deletion is permanent and removes all server-side data.
• We implement rate limiting to prevent abuse of our services.

6. Reporting Security Vulnerabilities

If you discover a security vulnerability in our app or services, please report it to us immediately. We appreciate responsible disclosure and will work to address any issues promptly.

Email: traienglishteacher@gmail.com

Please include:

• A description of the vulnerability
• Steps to reproduce the issue
• Any relevant screenshots or evidence

7. Updates

We regularly review and update our security practices to address new threats and vulnerabilities. This policy may be updated from time to time to reflect improvements in our security measures.