Privacy Notice
Luwy processes personal information to provide a personalised speaking and communication-learning service. This notice explains what we collect, why we use it, which services process it, how long we keep it and the choices available to you.
1. Information we collect
Depending on the features you use, this can include account information such as email and display name; age and language preferences; learning goals and contexts; practice history (topic, score and feedback); saved sentences and vocabulary; presentation files or scripts you choose to upload; camera and microphone input when you actively enable those features; friend connections and leaderboard settings; feedback messages you send us; subscription and payment status; parent or guardian consent records for users under 18; and technical and security information needed to operate the service.
2. Why we use it
We use this information to authenticate you, provide speaking analysis, personalise practice, maintain your learning profile, provide subscriptions and trials, send service email (such as a confirmation or parent consent link), prevent abuse, improve reliability, respond to support requests and comply with legal obligations.
3. Voice, video and uploaded content
Microphone and camera access is opt-in at the device level. Formal modes may offer camera analysis, but camera use is never required. Where pronunciation scoring is available, a short recording of your answer is sent to Microsoft Azure Speech to assess your pronunciation; we do not store it. Live voice practice sends your audio to OpenAI to run the conversation. We do not store audio recordings. Uploaded presentations, scripts and saved sentences are treated as user content and are used only for the feature you selected and related service delivery.
4. Personalisation and AI
Luwy uses your learning profile and practice results to recommend topics and drills. This includes automated analysis of speech and communication patterns. Scores and feedback are practice estimates, not certified results. We do not use your profile to make decisions about employment, education admission, credit, insurance or other high-impact eligibility.
5. Children and teens
Luwy is for users aged 13 and over. For users under 18, safe mode is always on. A parent or guardian must give permission, through a link we email to them, before live voice, audio recording upload and pronunciation scoring, the camera coach, friends and challenges, and paid plans are enabled. Users under 18 are hidden from leaderboards by default. A parent or guardian can withdraw consent or ask us to delete the account and its data at any time. If a parent or guardian needs to contact us about a minor's account or data, use the contact details in section 12.
6. Friends and the leaderboard
The leaderboard shows a lifetime speaking rating for each language, among friends only. You add a friend with their friend code, and there is no public search. Friends you have added can see your leaderboard name, rank, rating, best drill score, streak and number of spoken drills. They cannot see your transcripts or practice history. You can hide yourself from the leaderboard at any time. The rating uses the transcript and speaking measurements reported by your browser, and is a practice comparison, not a certified score.
7. Services that process your data
We use the following service providers. Each receives only the information needed for its purpose.
| Service | Purpose | What it handles |
|---|---|---|
| Supabase | Database and login | Account, profile, practice history and settings. Hosted in the Sydney region. |
| Vercel | Website hosting | Requests to the website and its server functions. |
| Anthropic | AI scoring and coaching | The text of your practice answers and coaching requests. |
| OpenAI | Live voice and read-aloud voices | Live voice audio, and text turned into speech. |
| Microsoft Azure Speech | Pronunciation scoring | Short recordings of your answer. We do not store them. |
| Stripe | Payments | Payment details and billing records. We never see your full card number. |
| Resend | Service email | Email address and message, such as the parent or guardian consent link. |
| Google Fonts, jsDelivr and cdnjs | Content delivery networks | Fonts and code libraries load from these networks, so your browser contacts them when a page opens. |
Transfers outside Malaysia. These services process data outside Malaysia. By using Luwy and giving your consent, you agree to the transfer of your personal data outside Malaysia for these purposes, as permitted under Malaysia's Personal Data Protection Act 2010 (PDPA). We do not sell your practice data.
8. What we keep and for how long
| Data | How long we keep it |
|---|---|
| Account and profile data | Until the account is deleted. |
| Practice history (topic, score, feedback) | Until you delete it or the account is deleted. |
| Transcripts | Not kept on our server after scoring. We keep only the score, the feedback text and speech measurements. |
| Audio recordings | Not stored. |
| Quest chat messages | Deleted when a match ends. |
| Feedback messages you send us | 12 months. |
| Parent or guardian consent records | For as long as the account exists, plus 12 months. |
| Payment records | Held by Stripe as required by tax law (7 years). |
9. Your choices and rights
Subject to applicable law and verification, you may ask to access or correct your personal information, to export it, or to delete your account. For now, contact us using the details in section 12 for any of these requests. You can export your account data or permanently delete your account from Settings. Deleting your account also cancels any active subscription before the account is removed. Marketing consent, where offered, is optional and separate from service consent.
10. Security
Data is encrypted in transit. We use email confirmation for sign-in, row-level access controls in the database, and separate server-side access for payments and usage records, along with rate limiting and other technical measures. No internet service can guarantee absolute security.
11. Changes to this notice
We will update the version date above when this notice changes.
12. Contact
Luwy is operated by Isabel Koay, Malaysia. For privacy questions, or to ask to access, correct, export or delete your data, send a message through Feedback in the app (About, then Help). A dedicated support email and registered business address will be added here before public launch.