Amamihe Privacy Policy

1. Introduction

Welcome to Amamihe ("we," "us," "our," or "the Company"). This Privacy Policy explains how Amamihe, a Delaware corporation, collects, uses, processes, and protects your personal information when you use our AI-powered voice-first learning platform. Your privacy is of utmost importance to us. We are committed to protecting your personal data and being transparent about our data practices. By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

Account Information:

• Name and email address (required for account creation)
• Educational level, grade, and curriculum preferences
• Country and region for localized content
• Password and account security information

Profile Information:

• Learning preferences and goals
• Subject areas of interest
• Accessibility needs
• Communication preferences

Educational Content:

• Questions asked to our AI tutor
• Text messages and conversations with our AI
• Quiz answers and learning assessments
• User-created study materials and notes

2.2 Voice Data

Voice Interactions:

• Audio recordings of conversations with our AI tutor
• Voice commands and queries
• Speech patterns, pronunciation data, intonations, and accents
• Conversation transcripts generated from voice interactions

Important Note: Voice data is processed in real-time and temporarily stored for service delivery. Anonymized voice patterns (including intonations and accents) may be used for research and development purposes.

2.3 Automatically Collected Information

Usage Data:

• Time spent on lessons and activities
• Learning progress and completion rates
• Feature usage patterns and preferences
• Session duration and frequency

Technical Information:

• Device type, operating system, and browser information
• IP address and general location (country/region)
• App crashes and error logs
• Performance metrics and analytics data

Learning Analytics:

• Learning patterns and behavioural data
• Areas of difficulty and improvement
• Engagement metrics and interaction patterns
• Personalization data for AI adaptation

3. How We Use Your Information

3.1 Service Delivery

Personalized Learning:

• Adapt content difficulty and teaching style to your learning patterns
• Recommend lessons and activities based on your progress
• Customize explanations and examples to match your preferences
• Track learning achievements and milestones

AI Tutoring:

• Process voice and text inputs to provide educational responses
• Maintain conversation context for coherent tutoring sessions
• Generate personalized lesson content and explanations
• Provide immediate feedback and assessment

3.2 Service Improvement

AI Enhancement:

• Train and improve our AI models using anonymized data
• Analyze learning patterns to enhance personalization algorithms
• Identify areas for content improvement and development
• Optimize voice recognition and natural language processing

Platform Development:

• Monitor service performance and reliability
• Identify and fix technical issues
• Develop new features and educational content
• Conduct research on learning effectiveness

3.3 Communication

Service-Related Communications:

• Account setup and verification emails
• Progress reports and learning summaries
• Technical support and customer service
• Important service updates and announcements

Marketing Communications (with consent):

• Educational tips and learning resources
• New feature announcements
• Promotional offers and subscription information
• Newsletter and community updates

4. Data Sharing and Third Parties

4.1 Service Partners

Deepgram (Voice Processing): We share voice data with Deepgram for real-time speech recognition and voice AI services. Deepgram processes audio in real-time and does not store voice data permanently. Data sharing is governed by Deepgram's privacy policy and our data processing agreement. Voice data is encrypted during transmission and processing.

Mistral AI (Language Processing): We share conversation context and educational queries with Mistral for AI tutoring services. Data is processed to generate educational responses and explanations. Personal identifiers are removed before sharing data with Mistral. Data sharing is limited to what's necessary for service delivery.

4.2 Data Licensing and Sales

Educational Institutions: We may license anonymized learning patterns and educational analytics to schools, universities, and research institutions. This helps educational institutions understand learning trends and improve their teaching methods. All data is completely anonymized with no possibility of identifying individual users. Revenue from data licensing helps us keep our core tutoring service affordable.

Voice AI Companies: We may license anonymized voice patterns, intonations, and accent data to voice AI technology companies. This helps improve voice AI systems to better understand diverse accents and speaking patterns. Voice data is processed to remove all personal identifiers and cannot be traced to individuals. This contributes to building more inclusive voice AI technology for global users.

Important Guarantees: All licensed data is completely anonymized and aggregated; no personal information or identifiable data is ever sold or licensed; data licensing is governed by strict contractual privacy protections; you can opt out of having your anonymized data included in licensing programs.

4.3 Other Third Parties

Analytics Providers: We use analytics services to understand service usage and performance. Data is anonymized and aggregated before sharing. Personal identifiers are removed from analytical data.

Payment Processors: Subscription and payment information is processed by third-party payment providers. We do not store complete payment card information. Payment data is handled according to PCI DSS standards.

Cloud Infrastructure: We use cloud services (Firebase, Google Cloud, Supabase) for data storage and processing. Data is encrypted at rest and in transit. Access is strictly controlled and monitored.

4.4 Legal Requirements

We may disclose your information when required by law or to: comply with legal obligations and court orders; protect our rights, property, and safety; prevent fraud or illegal activities; respond to government requests and regulatory inquiries.

5. Data Anonymization and Privacy Protection

5.1 Anonymization Process

Learning Analytics: All learning pattern data is anonymized before analysis. Personal identifiers are permanently removed from analytical datasets. Data cannot be traced back to individual users. Aggregated data is used for AI model improvement.

Voice Data Protection: Voice interactions are processed in real-time with temporary storage for service delivery. Voice patterns, intonations, and accents are extracted and anonymized for research purposes. Raw audio is not permanently retained after processing completion. Anonymized voice characteristics may be used to improve voice AI technology globally. Transcripts are anonymized and personal references removed.

5.2 Privacy by Design

Data Minimization: We collect only data necessary for service delivery; personal data is deleted when no longer needed; user profiles contain minimal identifying information; optional data collection is clearly marked.

Security Measures: All data is encrypted in transit and at rest; access to personal data is strictly controlled; regular security audits and penetration testing; staff training on privacy and security practices.

6. Your Privacy Rights

6.1 Access and Control

Account Management:

• View and edit your profile information
• Download your learning data and progress reports
• Adjust privacy and communication preferences
• Delete your account and associated data

Data Portability:

• Export your educational progress and achievements
• Transfer learning data to other compatible services
• Request copies of your personal data

6.2 Consent and Choices

Communication Preferences:

• Opt out of marketing communications at any time
• Choose which types of notifications to receive
• Control frequency of progress reports and updates

Data Processing:

• Withdraw consent for optional data processing
• Object to automated decision-making
• Request restrictions on data processing
• Opt out of anonymized data licensing programs (note: this may affect service personalization)

6.3 Regional Privacy Rights

GDPR Rights (EU Users):

• Right to access, rectify, and erase personal data
• Right to data portability and restriction of processing
• Right to object to processing and automated decision-making
• Right to lodge a complaint with supervisory authorities

CCPA Rights (California Users):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we may sell anonymized data but never personal data)
• Right to non-discrimination for exercising privacy rights

Other Regional Rights: We comply with applicable data protection laws in all jurisdictions. Contact us for information about specific regional rights.

7. Data Security

7.1 Technical Safeguards

Encryption:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• End-to-end encryption for sensitive communications
• Encrypted backups and disaster recovery systems

Access Controls:

• Multi-factor authentication for all systems
• Role-based access controls with principle of least privilege
• Regular access reviews and permission audits
• Automated monitoring for unauthorized access attempts

7.2 Organizational Security

Staff Training:

• Regular privacy and security training for all employees
• Background checks for personnel with data access
• Confidentiality agreements and privacy commitments
• Clear incident response and data breach procedures

Vendor Management:

• Due diligence on all third-party service providers
• Data processing agreements with strict privacy requirements
• Regular security assessments of partners and vendors
• Monitoring of third-party compliance with privacy standards

8. Data Retention

8.1 Retention Periods

Account Data:

• Active account data retained while account is active
• Account data deleted within 30 days of account deletion
• Some data may be retained longer for legal compliance

Learning Data:

• Educational progress data retained for service personalization
• Anonymized learning patterns retained for AI improvement
• Voice interaction data processed in real-time only

Legal Retention:

• Some data retained longer for legal, regulatory, or safety reasons
• Financial records retained as required by applicable laws
• Security logs retained for fraud prevention and compliance

8.2 Data Deletion

Account Deletion:

• Complete account deletion available through user settings
• All personal data deleted within 30 days of account deletion
• Anonymized data may be retained for service improvement

Automatic Deletion:

• Inactive accounts may be deleted after extended periods
• Temporary data automatically purged according to retention schedules
• Regular deletion of unnecessary data and system logs

9. International Data Transfers

9.1 Global Service Delivery

Cross-Border Transfers:

• Your data may be transferred to countries where our service providers operate
• We ensure appropriate safeguards for all international transfers
• Data is protected by contractual agreements and security measures

Adequacy Decisions:

• We prioritize transfers to countries with adequate data protection laws
• Standard contractual clauses used for transfers to other countries
• Regular assessment of transfer mechanisms and protections

9.2 Regional Considerations

Data Localization:

• We comply with local data residency requirements where applicable
• Some data processing occurs in your region when possible
• Clear disclosure of where your data is processed and stored

10. Children's Privacy

10.1 Age Requirements

Minimum Age:

• Users must be at least 13 years old
• Users under 18 require parental consent
• Special protections for users under 16 in applicable jurisdictions

Parental Consent:

• Verifiable parental consent required for users under 13
• Parents can review and delete their child's data
• Clear notice to parents about data collection and use

10.2 Additional Protections

Limited Data Collection:

• Minimal data collection from users under 18
• No targeted advertising to minors
• Enhanced security measures for accounts with minors

11. Changes to This Privacy Policy

11.1 Policy Updates

Notification of Changes:

• Material changes will be announced via email and in-app notifications
• Updated policies posted on our website with effective date
• Continued use of service constitutes acceptance of changes

Review Process:

• Regular review and updating of privacy practices
• Consultation with privacy experts and legal counsel
• User feedback considered in policy development

12. Contact Information

12.1 Privacy Inquiries

Data Protection Officer: privacy@amamihe.tech

General Privacy Questions: support@amamihe.tech

Legal and Compliance: legal@amamihe.tech

12.2 Company Information

Amamihe, a Delaware corporation

Website: https://amamihe.tech

Response Time: We aim to respond to all privacy inquiries within 30 days.