Privacy Policy

Oratio is operated by Bitprods SRL, 1930 Zaventem, Belgium, company number BE0633830464. For privacy requests, contact support@oratiobob.com.

• Account data: email address, user ID, role, status, preferred learning language, Google account ID when you choose Google sign-in, and account timestamps.
• Authentication and security data: session records, hashed session tokens, magic-link records, IP address, user agent, audit events, sign-in method, and new-device notices.
• Learning data: course selection, sentence progress, word exposure counts, hard-word marks, review history, recall activity, game activity, podcast vocabulary exposure, and learning preferences.
• Email data: transactional email records, daily learning email preferences, delivery-related records, support messages, and replies you send us.
• Audio and content data: the sentence or word text needed to generate speech audio, generated speech cache metadata, and topic-podcast records where those features are available.
• Device and browser data: strictly necessary cookies, optional analytics consent, theme, practice preferences, podcast playback preferences, and arcade auto-advance preferences.
• Optional analytics: first-party product reliability events and Google Analytics traffic reports if you allow analytics cookies.

• Provide login, sessions, account security, and support.
• Build sentence queues, rolling review, hard-word review, word packs, games, podcasts, and progress records.
• Send magic links, welcome emails, new-device notices, support replies, and daily learning emails when enabled.
• Generate and cache speech audio for sentence, word, and podcast listening.
• Debug, secure, prevent abuse, maintain backups, and measure service reliability.
• Comply with legal obligations and enforce the Terms of Service.

Where GDPR or similar law applies, we process data to perform the service contract, pursue legitimate interests in security and product operation, comply with legal obligations, and honor your consent for optional analytics and non-essential storage.

We do not sell personal information. We do not use advertising cookies. We share data only as needed to operate Oratio, comply with law, or protect the service.

• Trusted cloud providers support hosting, storage, email delivery, security monitoring, and speech synthesis.
• Google receives data only when you choose Google sign-in, such as the OAuth request and profile data needed to authenticate your account.
• Google also receives analytics events through Google Tag Manager and Google Analytics only if you allow analytics cookies.
• Email messages may pass through our email delivery provider and normal recipient mail systems.
• Professional advisers, authorities, or courts may receive data where required by law or necessary to protect legal rights.

Oratio is operated from Belgium and uses trusted service providers that may process data outside your country. If personal data moves across borders, we rely on appropriate safeguards or legal mechanisms required for the transfer.

• Account and learning records are kept while your account is active or while needed to provide the service.
• Session cookies normally expire after 30 days. OAuth state cookies expire after about 10 minutes. Magic links expire after about 15 minutes, though request records may remain for security and audit purposes.
• Daily learning email preferences and sent-email audit records are kept while needed to provide, prove, and troubleshoot email delivery.
• Encrypted database backups currently have limited retention and may retain deleted data until backup expiry.
• Security, abuse-prevention, audit, and legal records may be kept longer where necessary.

• You can download account and learning data from Settings after signing in.
• You can request correction, deletion, export, or restriction by emailing support@oratiobob.com from the account email.
• You can disable daily learning emails in Settings.
• You can change optional analytics consent from Cookie Preferences.
• You can change browser-only preferences, such as theme and animation settings, in the app or by clearing browser storage.

Depending on where you live, you may also have rights to object, withdraw consent, lodge a complaint with a data protection authority, or appeal a privacy decision. California residents can contact us to exercise applicable CCPA/CPRA rights. Oratio does not sell or share personal information for cross-context behavioral advertising.

Oratio is not directed to children under 13 and does not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact support@oratiobob.com so we can review and delete it where appropriate.

We use protective measures such as HttpOnly session cookies, hashed session and magic-link tokens, role-based server access, protected runtime secrets, encrypted database backups, and private speech-cache storage. No service can be guaranteed completely secure, so you should protect your email account and sign-in links.

The Cookie Policylists the cookies and browser-storage keys Oratio uses, including login, OAuth, consent, theme, practice, podcast, arcade, and optional analytics preferences.

We may update this Privacy Policy as Oratio changes. If a change materially affects how we handle personal data, we will update the date and, where appropriate, provide additional notice or request consent.