Privacy at Oratius
Updated 31 October 2026
Who to contact
Oratius provides language lessons through its website and mobile app. For privacy questions, access requests or deletion assistance, contact communications@oratius.app.
Your account and learning
We store your account email, username, login-provider identifiers, preferences, language choices, lesson progress, submitted answers, tutor feedback, help requests, skill history and placement results. Passwords are hashed. Authentication records can include IP addresses and device information for security. Unsent drafts may be saved on your browser or device so a connection problem does not lose your work.
Trying a lesson without an account
The guest lesson stores your answers, feedback and progress under a random credential in an essential browser cookie or secure app storage. The credential expires after 30 days; expiration does not automatically delete saved learning records. A new verified account on the same device can claim this progress. We store a keyed hash of the source IP to limit trial creation, and operational usage and estimated-cost records to enforce free AI allowances. Account deletion removes the link between your learner identity and the cost ledger. Contact communications@oratius.app for help deleting guest data.
AI processing
With your permission, we send exercise context, submitted text, relevant conversation and learning history to OpenAI to produce feedback, hints and placement suggestions. Do not include sensitive personal information in exercises. You can use imagined details. AI feedback can be incorrect; it is not a formal proficiency certification. Withdrawing permission in Settings prevents new AI requests; it does not recall requests already sent.
Optional speech
Microphone access is requested when you choose to record. Recordings are sent to OpenAI for transcription with your AI-processing permission. Oratius does not persist the audio on its server. A temporary recording may remain in the app cache until it is replaced, cleaned up, or app data is removed. You review the transcript before submitting it as an answer. Speaking is optional: you can type or skip it. Device text-to-speech may use your operating system’s speech services.
Optional analytics
Usage analytics is off by default on each browser or device. If you enable it in Settings, our analytics provider receives pseudonymous product events such as lesson starts and completions, language, level, exercise type and app version. We do not send exercise text, audio or passwords in analytics. On the website, optional Vercel Analytics and Speed Insights also measure usage and performance. Disabling analytics stops new collection; it does not erase previously sent events.
Service providers and storage
Oratius uses OpenAI for AI processing, an analytics service for optional usage measurement, Vercel for website/API hosting, Postgres hosting for stored learning data, and Resend for account emails. Google or Apple processes sign-in if you choose that provider. Providers may process information outside your country under their own service and privacy terms. API traffic uses HTTPS in production. Essential authentication cookies or secure device storage keep you signed in.
Retention and deletion
Account and learning records are kept while your account exists; there is currently no automatic inactivity deletion. You can request deletion in Settings or at oratius.app/delete-account. After you confirm by email while signed in, we delete your account and its associated learning records, consent and tutor reports, and invalidate all sessions. Unsent local drafts, backups, pseudonymous analytics already sent, and provider security logs may remain until cleared or expired under the relevant provider’s retention policy. Contact us for help with access or deletion requests. Do not send passwords in email.
Reporting and your choices
Use Report response next to a tutor reply, hint or placement result to flag inappropriate or inaccurate content. We save that response, your selected reason and any optional details for review. You can decline AI processing and still browse lessons, choose a level manually, or manage your account. You can change AI permission and device analytics preferences in Settings.
Public profiles
Your username, completed lesson totals and daily learning activity counts are visible on your shareable public profile. Your learning purpose, self-reported known languages, and studying languages with course progress are shared only if you publish your learning record. You can make your profile private in Settings; visitors then see only your username and a private-profile notice, without learning details, lesson totals, or activity. Answers, tutor conversations, mistakes, email, explanation language and account settings are not public. Activity dates use UTC and do not reveal exact times.