Toppa-AI - Privacy Policy

We take your privacy seriously. This policy describes how SunnySora Technologies ("we", "us", or "our") collects, uses, and safeguards information in the Toppa-AI mobile application ("the App").

1. Data Collection & Usage

We collect and process the following categories of data to provide, improve, and secure our AI-powered language learning service:

Account & Authentication Identifiers: Email address, User IDs, and Google or Apple Sign-In authentication tokens required to manage user accounts.
Device & Technical Identifiers: Device ID (GAID / IDFA), IP address, app version, and platform details used for security, analytics, fraud prevention, and ad delivery.
App Usage & Performance Data: Interaction metrics, analytics events, and subscription validation records to maintain service quality and enforce usage limits.
User Content (PDFs, Images, Lessons): Uploaded documents, images, and custom lesson material created within the App.

2. AI Content Processing & Document Storage

Toppa-AI uses Google Gemini API services to generate interactive language lessons, translations, and chat responses.

Transient AI Processing: When you submit prompts, text, shared URLs (such as map locations), PDFs, or images for AI features, these inputs are processed transiently by the AI model solely to generate real-time responses. Your content is not used to train public AI models.
User Content Storage: Uploaded PDFs and images (up to a maximum size of 20MB per file), as well as created scenarios, are securely stored in Firebase Cloud Storage and Firestore solely for your own personal access, history review, and retrieval within the App. We do not inspect, sell, or use your uploaded documents for any other purpose. Note that low-resolution thumbnails generated from your uploaded materials for display in the app interface may be publicly accessible via URL.

3. Third-Party Services & Data Processors

We partner with trusted third-party providers for core app infrastructure, authentication, payment processing, and free-tier advertising support. These services may collect technical identifiers according to their respective privacy policies:

Google AdMob: Serves advertisements on our free tier. Uses device identifiers to serve ads, limit frequency, and prevent fraud. Google Ads Privacy
Google Play Services, Sign-In & Apple Authentication: Provides secure authentication options. Google Privacy Policy | Apple Privacy Policy
Firebase (Auth, Firestore, Storage, Analytics, App Check, Remote Config): Powering user logins, secure document storage, usage analytics, abuse prevention, and remote app updates. Firebase Privacy
RevenueCat: Validates and manages in-app subscriptions and purchase receipts. RevenueCat Privacy

4. Data Retention & Account Deletion

We retain user data as long as your account remains active or as needed to provide our services.

Data Deletion Rights: You have the right to request deletion of your account and all associated personal data at any time. You can request deletion directly within the App via Settings > Delete Account, or by emailing support@sunnysora.org.

For more details on deletion procedures, please visit our Terms of Service - Account Deletion section.

5. Your Privacy Rights & Choices

EEA, UK, and Swiss Residents (GDPR): You have the right to access, rectify, port, or request erasure of your personal data, as well as the right to withdraw consent for advertising data processing at any time via Settings > Privacy Settings in the App.

US State Residents (CCPA/CPRA & State Privacy Laws): Depending on your jurisdiction, you have the right to opt-out of the "sale" or "sharing" of personal information for targeted advertising. You can exercise this right using the "Do Not Sell or Share My Personal Information" link in the App's Privacy Settings.

6. Children's Privacy

Toppa-AI does not knowingly collect or solicit personal information from children under 13 (or under 16 in the EEA/UK). If we learn that we have inadvertently collected personal data from a child below the legal age of consent without parental verification, we will delete that information as quickly as possible. Parents or guardians may contact us at support@sunnysora.org.

7. Data Security

We implement appropriate technical and organizational security measures, including HTTPS/TLS encryption in transit and Firebase security rules, to protect your personal data from unauthorized access, alteration, or disclosure.

8. Contact Us

If you have questions or concerns regarding this Privacy Policy or data practices, please contact us at:

SunnySora Technologies
Email: support@sunnysora.org