Privacy Policy

Muffin English — last updated 11 October 2026

Who we are

Muffin English ("the app") is operated by Tomáš Tichý, Brno, Czech Republic. For anything in this policy, contact support@muffinenglish.com.

What we collect

Account: your email address and a securely hashed password (we never store the password itself).

Learning activity: your exam answers, scores, writing submissions, and AI feedback, so the app can show your progress and past work.

Speaking practice: when you record a speaking answer, the audio is sent to our server, converted to text, and the recording is then discarded — we keep only the text transcript and the feedback, not your voice.

Purchases: the purchase receipt data Apple or Google gives us to verify your subscription or purchase. Payment details (cards etc.) are handled entirely by Apple/Google and never reach us.

Feedback board: ideas you suggest, reports you file and your votes. We read every suggestion before it is published and may shorten or edit it (for example, to remove personal details). Published ideas never show your name or email address.

Advertising (free plan only)

On the free plan you can choose to watch a rewarded ad to unlock a practice task for 30 days. Ads are served by Google AdMob. We request non-personalized ads only; to serve and measure them, Google may process device information including advertising identifiers (Apple IDFA / Google Advertising ID) under its own privacy policy. Watching an ad is always your choice — nothing plays automatically. Paid plans (Plus, Pro, Max) contain no ads at all.

If you are in the EEA or UK, we ask for your consent through Google’s consent form before any ad is requested, and no advertising SDK starts until you have answered. You can change or withdraw that choice at any time in Profile → Ad privacy choices.

What we do NOT collect

No analytics or tracking SDKs beyond the ad serving described above, no location, no contacts, no selling of data — to anyone, ever. If you are on a paid plan, no advertising SDK is used for you and no ad identifiers are processed.

Microphone access

The microphone is used only while you record an answer to a speaking task, and only after you allow it. Recordings are processed as described above and are not stored.

Notifications

If you enable study reminders, the reminder schedule is stored on your device. You can turn them off anytime in the app or in system settings.

Emails we send

Account email goes to everyone with an account: address confirmation, password resets, sign-in codes, confirming a change of email address, and — if you start a free trial — one reminder about a day before it ends, so a charge never comes as a surprise.

Tips and offers go only if you switch them on — with the box when you sign up, or later in Profile → Tips & offers by email; both are off unless you turn them on. They are a short series after you join — getting started, practice tips, what Plus includes — a note about the free plan if a trial ends without a subscription, and a reminder if a week goes by without practice. Every one has an unsubscribe link that works without signing in, and you can switch them off in Profile at any time. We record when you switched them on and which of these emails we sent you, and both are included in Download my data.

Who processes data for us

OpenAI (writing/speaking evaluation and speech-to-text): your submitted text or audio is processed to generate feedback; via the OpenAI API it is not used to train their models.

Apple / Google: purchase verification.

Google AdMob: serves rewarded ads to free-plan users who choose to watch one (see "Advertising" above).

Our email provider: sends the account email described in "Emails we send", and tips and offers only to people who switched them on.

Have I Been Pwned (breached-password check): when you choose a password we send only the first five characters of its hash so we can warn you if that password already appears in a public breach. Your password, and the full hash, never leave our server.

Our database hosting provider: stores the account and learning data described above.

How long we keep data

Until you delete your account. You can delete it in Profile → Delete account; deletion is scheduled with a 10-day grace period (so you can change your mind by signing back in), after which your account and all associated data — results, essays, transcripts, purchase records — are permanently erased. The one exception is an idea you suggested that was already published on the feedback board: it stays, with no link to you, because other learners voted on it.

Your rights

In the app you can view your learning history, change your email address or password, and delete your account entirely.

To receive a copy of everything we hold, use Profile → Download my data. We email it to your confirmed address as a JSON file (profile, results, submissions and their AI feedback, purchases and credits, your feedback-board activity, and your email choices and the tips-and-offers emails we sent you). You can also email support@muffinenglish.com instead.

EU/EEA users have GDPR rights of access, rectification, erasure, portability, and restriction, and may complain to a supervisory authority (in the Czech Republic, the Office for Personal Data Protection).

AI feedback — what it is and is not

Feedback on writing and speaking tasks is generated by an AI model (OpenAI), not by a human examiner, and every screen showing it says so.

Scores are estimates produced for learning purposes. They are not official Cambridge results, they carry no certification, and they can be wrong — a model can misjudge a good answer or be generous with a weak one. Nothing in the app makes an automated decision that affects your legal rights or access to anything outside it.

If you think a piece of feedback is wrong or unfair, email support@muffinenglish.com and a human will look at it.

Children

The app is intended for learners preparing for Cambridge English exams and is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

We will update this policy if our practices change and revise the date above.