Privacy policy.

Who is responsible

Palki is operated by [operator legal name]. For privacy questions or requests, contact [privacy contact email]. These details must be completed before the preview is made public.

Information we handle

• Website visits: our public homepage does not ask you to create an account or submit personal information. The web server may process your IP address and basic request details to deliver pages and protect the service. The current homepage does not use analytics or advertising trackers.
• Sign-in: if you use the invited preview, Google sign-in through Firebase Authentication provides an account identifier, email address, and authentication information. We check that your Google email is verified and on our preview allowlist.
• Learning activity: the app sends your language choices, lesson requests, answers, and any questions you type to our services. Tutor conversations and session identifiers are held in server memory while a session is active.
• Technical information: our services may process request identifiers, errors, and security-related events needed to operate and troubleshoot the preview.

Why we use it

We use this information to provide lessons and tutoring, confirm that preview users are authorized, respond to your requests, maintain the service, and prevent misuse. Where the GDPR applies, the basis is providing the service you request and our legitimate interests in operating and securing the invited preview. We do not sell personal information or use it for advertising.

Services involved

Firebase Authentication, provided by Google, handles Google sign-in and account verification. Our hosting provider processes the technical data needed to serve the website and APIs. When you ask the tutor a question, relevant lesson context, recent conversation, and your message are sent to the configured AI model provider to produce a response. The current backend supports Alibaba Cloud Model Studio and an OpenAI-compatible provider; the active provider depends on the deployment configuration.

Those providers may process information in other countries under their own service terms. Please avoid entering sensitive personal information in tutor messages.

How long information is kept

Tutor sessions are kept in server memory until you end the session or the service restarts; they are not saved to Palki's PostgreSQL database. Production configuration disables logging of model prompts and responses. Firebase account records, operational logs, and provider records may remain until removed under the applicable account, hosting, and provider retention settings. Contact us to request removal of information we control.

Your choices and rights

You can stop using the preview and request access to, correction of, or deletion of information we control. Depending on where you live, you may also have rights to object to processing, restrict it, receive a copy, or complain to a data protection authority. We may need to verify your identity before acting on a request. You can manage your Google account through Google separately.

Changes to this policy

We will update this page when the app, its providers, or its data practices change, and show the new update date above.