1. Our privacy-first approach
Open World is designed around data minimization. We collect only the limited personal information reasonably necessary to create and secure accounts, provide requested features, process subscriptions, respond to users, and comply with law.
2. Scope of this notice
This notice applies when you:
- visit openworld.page or another Open World site that links to this notice;
- download or use an Open World web, desktop, or mobile application;
- create or manage an Open World account;
- purchase or use an Open World subscription or service;
- contact us for support, submit a privacy request, or communicate with us; or
- participate in an Open World event, survey, or optional communication.
This notice does not govern third-party websites, applications, or services that have their own privacy practices.
3. On-device AI, audio, and learning analysis
Open World uses artificial intelligence and related technologies to support language-learning features such as speech recognition, pronunciation feedback, phoneme analysis, word timing, grammar feedback, vocabulary feedback, and interactive practice.
What remains on your device
- raw microphone audio and voice recordings;
- speech segments and temporary audio buffers;
- voice embeddings, acoustic features, or similar technical representations, if the feature creates them locally;
What Open World does not do with audio
- We do not store audio on our servers.
- We do not send audio to external AI, speech-recognition, or analytics providers.
- We do not use voice data to authenticate you.
You control device permissions through your browser or operating-system settings. You may also delete locally stored data using available in-app controls, by clearing the application's browser storage, or by uninstalling the application. The exact result depends on your device and operating system.
Model files and software components needed for on-device processing may be downloaded to your device. Downloading those components does not require sending your audio.
4. Information we collect
We collect a limited set of server-side information. The categories below apply only when relevant to the feature you use.
Account and authentication information
- name or display name;
- email address;
- username or account identifier;
- encrypted authentication credentials or authentication tokens;
- account status, plan, settings, and communication preferences; and
- information needed to prevent unauthorized access to your account.
Subscription and transaction information
If you purchase a subscription, our payment processor collects your payment-card details directly. Open World does not receive or store your complete payment-card number or card security code. We may receive limited transaction information such as:
- transaction and invoice identifiers;
- payment status and subscription status;
- purchase date and amount;
- card brand and the last four digits of the card, where provided by the processor;
- billing country or billing address details needed for invoices and tax compliance; and
- refund, dispute, or chargeback status.
Support and communication information
When you contact us, we collect the information you choose to provide, such as your email address, the content of your request, and any files or screenshots you choose to attach. Please do not send audio recordings or sensitive information unless it is necessary for your request.
Limited technical and security information
Our servers and infrastructure providers may process limited technical information needed to deliver and protect the Services, including:
- IP address;
- date and time of access;
- browser, application version, operating system, and device type;
- requested page, response status, and basic service events;
- authentication, fraud-prevention, and security logs;
- approximate country or region inferred from an IP address
Device permissions and notifications
The Services may request microphone permission to enable on-device speech features. The microphone stream remains on your device. If you enable push notifications, we may process a device notification token and your notification preferences so that notifications can be delivered.
Essential cookies and local storage
We use cookies, browser storage, and similar technologies only when reasonably necessary for login sessions, security, preferences, service continuity, and device-only feature operation. We do not use third-party advertising cookies or cross-site behavioral advertising trackers.
5. Information we do not collect
Unless we clearly notify you before a new feature begins collecting it, Open World does not collect:
- server-side audio recordings or live microphone streams;
- biometric identifiers or voiceprints used to identify a person;
- precise GPS location;
- address-book contacts or social-media friends lists;
- photos, camera data, or files from your device without a specific user-initiated action;
- government identification numbers;
- health, religious, political, racial or ethnic, sexual-orientation, or similarly sensitive profile information;
- complete payment-card numbers or card security codes;
- data purchased from data brokers; or
- personal information for sale, targeted advertising, or cross-context behavioral advertising.
6. Sources of personal information
We receive the limited personal information described above from:
- you, when you create an account, make a purchase, change settings, or contact us;
- your browser or device, for limited technical, session, security, and notification information;
- authentication providers, if you choose a third-party sign-in option, such as Google or Apple;
- payment processors, for limited subscription and transaction records; and
- service providers, for operational events such as delivery status, authentication status, or security alerts.
Third-party sign-in
If you choose to sign in using a third-party provider, we receive only the information the provider makes available for authentication, typically your name, email address, profile image, and provider-specific account identifier. We do not request your contacts or friends list.
Where Google user data is involved, our use and transfer of that data will comply with the Google API Services User Data Policy, including its Limited Use requirements.
7. How we use personal information
We use server-side personal information only for the following purposes:
- create, authenticate, maintain, and secure your account;
- provide requested features and maintain service availability;
- process subscriptions, payments, refunds, invoices, and taxes;
- respond to support inquiries and privacy requests;
- send account, security, billing, and service communications;
- send optional product communications when you have chosen to receive them;
- detect, investigate, and prevent fraud, abuse, security incidents, and technical problems;
- understand basic service reliability and diagnose errors using minimized operational data;
- enforce our terms and protect the rights, safety, and integrity of users and the Services; and
- comply with applicable legal, tax, accounting, and regulatory obligations.
8. Legal bases for processing
Where a law requires us to identify a legal basis, we rely on one or more of the following:
- Performance of a contract. We process account, authentication, subscription, and support information to provide the Services you request.
- Legitimate interests. We process limited technical and security information to operate, protect, troubleshoot, and improve the reliability of the Services, provided those interests are not overridden by your rights.
- Legal obligations. We retain or disclose limited information when required for tax, accounting, regulatory, court, or lawful government obligations.
- Consent. We rely on your consent for optional communications, permissions, or processing where consent is required by law. You may withdraw consent at any time.
On-device AI analysis does not require Open World to receive the speech content being analyzed. Device permission for microphone access is controlled by you.
9. How we disclose personal information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We disclose limited information only as described below.
Service providers
We may disclose limited personal information to service providers that perform functions on our behalf under contractual restrictions. Depending on the Services you use, these may include:
- cloud hosting, database, content-delivery, and infrastructure providers;
- account authentication and identity providers;
- payment processors, including Stripe;
- transactional email and notification providers;
- customer-support providers;
- security, fraud-prevention, and error-monitoring providers; and
- professional advisers such as auditors, accountants, insurers, and legal counsel.
Legal and safety disclosures
We may disclose limited information when we reasonably believe disclosure is required by law, legal process, a valid government request, or is necessary to protect the rights, safety, security, and integrity of Open World, our users, or others.
Business transactions
If Open World is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, limited server-side personal information may be disclosed as part of that transaction, subject to appropriate confidentiality and legal protections. Device-only audio and learning analysis cannot be transferred by us because we do not possess it.
At your direction
We may disclose information when you intentionally ask us to do so, such as when you connect a third-party service or submit content to support. We will identify the relevant disclosure at the time of the request when it is not already covered here.
10. How long we retain information
| Information | Retention approach |
|---|---|
| Device-only audio and learning analysis | Open World does not retain this information on its servers. It remains on your device until you delete it, clear application or browser storage, or uninstall the application, subject to your device's behavior. |
| Account and authentication information | Retained while your account is active and for a limited period after closure when needed to complete deletion, protect account security, resolve disputes, prevent fraud, or comply with law. |
| Subscription and transaction records | Retained for the period required for billing, refunds, disputes, accounting, tax, and legal compliance. |
| Security and operational logs | Retained only for the limited period reasonably necessary to detect security incidents, investigate errors, prevent abuse, and maintain service integrity. |
| Support communications | Retained as needed to resolve the request, maintain an appropriate support history, establish or defend legal claims, and meet legal obligations. |
| Privacy-request verification data | Used only to verify and complete the request, then deleted when no longer reasonably necessary for verification, recordkeeping, or legal compliance. |
When information is no longer needed, we delete it, anonymize it, or securely isolate it until deletion is technically possible. Backup systems may retain encrypted copies for a limited backup cycle before they are overwritten.
11. How we protect information
We use reasonable administrative, technical, and organizational safeguards designed to protect the limited personal information we process. Depending on the system, safeguards may include access controls, encryption in transit, encryption at rest, account authentication, least-privilege access, logging, monitoring, secure development practices, and service-provider reviews.
The most important privacy safeguard for speech content is architectural: microphone audio and device-only learning analysis are processed locally and are not transmitted to our servers.
No system can be guaranteed to be completely secure. You are responsible for using a strong password, protecting your device, and keeping your account credentials private.
12. International data transfers
Open World Group LLC is based in the United States. If you access the Services from another country, the limited server-side personal information described in this notice may be processed in the United States or in other countries where our service providers operate.
Where required, we use legally recognized transfer safeguards and contractual protections. Privacy and data-protection laws in the receiving country may differ from those in your country.
13. Your privacy rights
Depending on your location and applicable law, you may have the right to:
- know whether we process your personal information;
- request access to and a copy of your personal information;
- correct inaccurate personal information;
- request deletion of personal information;
- receive certain information in a portable format;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- opt out of sale, targeted advertising, or qualifying profiling, if applicable;
- appeal a decision concerning a privacy request where applicable; and
- receive equal service and not be discriminated against for exercising a privacy right.
Open World does not make decisions based solely on automated processing that produce legal or similarly significant effects. Language feedback and learning scores are educational features, not employment, credit, housing, insurance, medical, or legal decisions.
How to submit a request
Submit a request through openworld.page/data-request or email contact@openworld.page.
We may need to verify your identity before completing a request. We use verification information only for verification, security, fraud prevention, and legally required request records. You may use an authorized agent where applicable law permits it.
Regional information
Residents of the European Economic Area, United Kingdom, or Switzerland may also have the right to lodge a complaint with their local data-protection authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator. Other jurisdictions may provide similar complaint or appeal rights.
14. United States state privacy disclosures
This section supplements the rest of this notice for residents of states with comprehensive privacy laws, including California where applicable.
Categories handled during the preceding 12 months
| Category | Examples relevant to Open World | Collected | Disclosed for a business purpose | Sold or shared for behavioral advertising |
|---|---|---|---|---|
| A. Identifiers | Name, email address, username, account ID, IP address | Yes | Yes, to operational service providers | No |
| B. California customer-record information | Name, contact information, limited billing information | Yes | Yes, to payment and operational providers | No |
| C. Protected classifications | Race, ethnicity, religion, marital status, and similar information | No | No | No |
| D. Commercial information | Subscription, transaction, invoice, refund, and payment status | Yes | Yes, to payment and accounting providers | No |
| E. Biometric information | Voiceprints or biometric identifiers used to identify a person | No | No | No |
| F. Internet or network activity | Limited login, page-request, security, and service-event information | Yes, limited | Yes, to infrastructure and security providers | No |
| G. Geolocation data | Approximate country or region inferred from IP address, not precise GPS location | Yes, approximate only | Yes, to infrastructure and security providers | No |
| H. Sensory information | Audio, video, images, or call recordings held by Open World | No server-side collection | No | No |
| I. Professional or employment information | Job title, employer, employment history | No | No | No |
| J. Education records | Records governed by education-record laws | No | No | No |
| K. Inferences | Server-side profiles about preferences, abilities, or characteristics | No | No | No |
| L. Sensitive personal information | Account login and authentication information used to secure access. We do not collect precise location, government IDs, full payment-card credentials, or qualifying biometric data. | Yes, limited to account authentication | Yes, only to authentication and security providers as necessary | No |
Sources, purposes, and recipients
The sources, business purposes, and categories of recipients are described in Sections 6, 7, and 9 of this notice. In summary, information comes from you, your device, authentication providers, payment processors, and operational service providers. It is used to provide, secure, support, and bill for the Services and to comply with law.
No sale or behavioral-advertising sharing
In the preceding 12 months, Open World has not sold personal information and has not shared personal information for cross-context behavioral advertising. We do not have actual knowledge that we sell or share personal information belonging to anyone under 18.
Global Privacy Control and Do Not Track
We do not sell or share personal information for cross-context behavioral advertising, so a Global Privacy Control signal does not change those practices. Where a legally recognized universal opt-out signal applies to a future practice, we will honor it as required by law.
Some browsers provide a legacy "Do Not Track" signal. Because there is no generally accepted standard that requires a uniform response to that separate signal, our Services do not currently respond to it. This does not limit our handling of legally recognized universal opt-out signals.
California Shine the Light
We do not disclose personal information to third parties for their own direct-marketing purposes. California residents may contact us using the details below with questions about this practice.
15. Minors
The Services are intended for adults and are not directed to children under 18. You must be at least 18 years old to create an account or use the Services.
We do not knowingly collect server-side personal information from anyone under 18. If we learn that a person under 18 created an account, we will take reasonable steps to deactivate the account and delete the related server-side information, subject to legal and security requirements.
Contact contact@openworld.page if you believe a minor has provided personal information to us.
16. Changes to this notice
We may update this Privacy Notice to reflect changes in the Services, our practices, or applicable law. We will update the "Last updated" date when we make changes. If a change materially affects how we handle personal information, we will provide additional notice when required, such as through the Services or by email.
If a future feature would transmit information that this notice currently describes as device-only, we will provide clear notice before that transmission begins, request consent where required, and update this notice.
17. Contact us
Questions, concerns, or privacy requests can be sent to: