FluentBee ("we", "our", or "us") is operated by Iris Salgado, based in the United Kingdom. This Privacy Policy explains how we collect, use, and protect your personal data when you use the FluentBee mobile application.

1. Information We Collect

Account Information — when you create an account:

• Full name
• Email address
• Password (stored as a secure bcrypt hash — never visible to us)

Usage Data — automatically collected:

• Learning progress (lessons completed, quiz scores, XP points)
• Language preferences
• App usage patterns (job sectors and levels studied)

Device Information — device type and OS version for compatibility purposes only.

2. Legal Basis for Processing (UK GDPR)

Purpose	Legal Basis
Account creation and management	Contract performance
Saving learning progress	Contract performance
App improvement and security	Legitimate interests
Daily learning reminders	Consent (can be withdrawn anytime)

3. How We Use Your Information

• Create and manage your account
• Save and sync your learning progress
• Send daily learning reminders (with your consent)
• Improve the app and its content
• Respond to support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. International Data Transfers

FluentBee is operated from the United Kingdom. Your data is processed by third-party services located in the United States under Standard Contractual Clauses (SCCs) approved by the UK ICO:

Service	Purpose	Location	Safeguard
Supabase	Database & authentication	USA	Standard Contractual Clauses
Cloudinary	Image hosting	USA	Standard Contractual Clauses
Expo	App delivery	USA	Standard Contractual Clauses

5. Data Storage and Security

• Encrypted connections (HTTPS/TLS) for all data in transit
• Passwords stored as bcrypt hashes — never in plain text
• Session tokens stored in iOS Keychain / Android Keystore
• Row-level security ensuring users can only access their own data

6. Children's Privacy

FluentBee is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their data, please contact us at support@fluentbee.app.

7. Data Retention

We retain your personal data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. You may request deletion at any time by contacting us.

8. Your Rights Under UK GDPR

Right	Description
Access	Request a copy of the personal data we hold about you
Rectification	Request correction of inaccurate or incomplete data
Erasure	Request deletion of your personal data ("right to be forgotten")
Portability	Receive your data in a machine-readable format
Restriction	Request that we limit how we use your data
Objection	Object to processing based on legitimate interests
Withdraw consent	Withdraw consent at any time (e.g. turn off notifications in Settings)

To exercise any of these rights, email support@fluentbee.app. We will respond within 30 days. EU users have the same rights under EU GDPR. Brazilian users have equivalent rights under the LGPD.

9. Data Breach Procedure

In the event of a personal data breach, we will notify the UK ICO within 72 hours and inform affected users without undue delay if there is a high risk to their rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes within the app. Your continued use after changes become effective constitutes acceptance of the revised policy.

11. Contact & Complaints

Data Controller: Iris Salgado
Email: support@fluentbee.app
ICO Registration: Pending (Application C1946406)

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113