LAST UPDATED: JULY 2026

Privacy Policy

We built XpressLingo to help travelers communicate confidently — and we take your privacy seriously. This policy explains what we collect, why, and how we protect it.

📋 Summary

🗂️ What We Collect

Anonymous Device ID

When you first open XpressLingo, the app generates a random identifier for your device. This is not Apple's device ID — it's a random code we create ourselves. It's used only to group your conversation history so the app can show you your past exchanges. It is not linked to your name, Apple ID, email, or any other personal information.

Example device ID: b4e91f2a-7c3d-48a1-9e2f-1a6b3d8c4e5f — a random string with no personal meaning.

Speech Audio

When you tap "Listen" or use the response mic, XpressLingo records audio from your device's microphone and sends it to OpenAI's Whisper service for transcription. Audio is processed in real time and is not stored by XpressLingo or retained by our servers after transcription is complete.

Conversation Exchanges

The transcribed text — what was said, its translation, the suggested response, and the phonetic pronunciation — is saved to a secure Google Sheet associated with your anonymous device ID. This lets you review past exchanges in the app's History screen, and helps us understand which translations and responses work well.

Ratings and Notes

When you rate a response (👍 Good or 👎 Needs work), or add a note or a better-response suggestion, that information is also saved. This feedback is used directly to improve translation and response quality over time.

Language and Country Preferences

Your "My Language" (the language you read the app in), "My Country" (where you're from), and "Country I'm In" (where you're currently traveling) selections are stored locally on your device. These are manually chosen by you — XpressLingo does not access GPS or any other location service to determine or verify them.

🚫 What We Do NOT Collect

⚙️ How We Use Your Data

The anonymous data we collect is used for three purposes only:

We never use your data for advertising, marketing, or any commercial purpose outside of improving XpressLingo itself.

🔗 Third-Party Services

XpressLingo uses the following third-party services to function:

OpenAI Whisper — processes audio recordings for speech-to-text transcription and language detection. Audio is sent to OpenAI's servers and processed in real time. OpenAI's privacy policy applies to this processing. Audio is not retained by XpressLingo after transcription.
Anthropic Claude — generates translations, suggested responses, and phonetic pronunciations based on transcribed text. The text is sent to Anthropic's servers. Anthropic's privacy policy applies. No personal information is included in these requests.
Google Sheets — stores anonymous conversation exchanges and feedback. Data is stored under your anonymous device ID only. Google's privacy policy applies to data stored in Sheets.
Railway — hosts our backend server that connects XpressLingo to OpenAI and Anthropic. Audio and text pass through Railway's servers in transit but are not stored there.

👶 Children's Privacy

XpressLingo is a general-audience travel tool and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at malliksanjibk@gmail.com and we will delete it promptly.

🗄️ Data Retention and Deletion

Conversation exchanges saved to Google Sheets are retained to help improve the app over time. Because data is stored anonymously under a random device ID, it is not possible for us to identify which exchanges belong to any specific person.

If you would like your device's data deleted, contact us at malliksanjibk@gmail.com with your anonymous device ID (visible in the app's settings) and we will remove all associated records.

Language and country preferences stored on your device can be cleared at any time by uninstalling the app.

🔒 Security

All data transmitted between XpressLingo and our backend servers is encrypted using HTTPS. We do not store API keys, authentication tokens, or sensitive credentials on your device — all API calls are proxied through our backend server so your device never directly contacts OpenAI or Anthropic with credentials.

⚖️ Your Rights

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, or delete data we hold about you. Because we collect only anonymous data, most of these rights apply in a limited way — but we are committed to honoring any reasonable request.

To exercise any rights or ask questions about your data, contact us at malliksanjibk@gmail.com.

📝 Changes to This Policy

We may update this privacy policy from time to time as the app evolves. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of XpressLingo after changes are posted constitutes your acceptance of the updated policy.

Questions About Privacy?

We're a small team and we care about the travelers who use XpressLingo. If you have any questions, concerns, or requests regarding this privacy policy, please reach out directly.

malliksanjibk@gmail.com