Last updated October 31, 2026
Privacy Policy
CantoGo is an app for learning to speak Hong Kong Cantonese, made by Bitwise LLC (“we”, “us”). This policy explains what we collect when you use CantoGo on iPhone or Android, why, who helps us run the app, and the choices you have.
The short version
- We keep an account so your progress is saved and syncs between your devices.
- To score your speaking, your recording is sent to an AI speech-to-text service (ElevenLabs). Your phone asks for the microphone first, and says so. We don’t store your recordings. We keep the text of what was heard, with your account.
- We use analytics and crash reports to improve the app, and measure our ads with Meta (on iPhone, only if you allow tracking).
- We don’t sell your personal information.
- You can delete your account and its data at any time, in the app or from this website.
What we collect
Your account
When you start CantoGo we create an account for you, so your progress can be saved. You can then sign in with Apple (iPhone), Google, or an email and password. We store:
- Your email address, from the sign-in method you chose. From Apple we ask for your email only.
- Your Google account’s basic profile, if you sign in with Google.
- If you sign in with Apple, a token from Apple. We keep it only so we can revoke CantoGo’s access with Apple when you delete your account.
What you tell us during setup
Your first name, why you’re learning (for example family, travel or work), your Cantonese level, how many minutes a day you want to practise, and whether and when you’d like a daily reminder. We save these as you go through setup, so they may be stored even if you don’t finish it.
Your learning progress
Your lessons, words, flashcard reviews, saved and starred phrases, XP, streak and app preferences. We keep daily snapshots of your progress for 30 days, so we can restore it if something goes wrong.
Your voice
CantoGo uses the microphone only for speaking practice. In lessons it opens by itself when it’s your turn to speak, and closes when you stop.
We ask first. Before your first recording, your phone asks whether CantoGo may use the microphone, and says that your recording is sent to a third-party speech service to score it. Nothing is recorded or sent unless you allow it. If you don’t, you can keep practising by listening, without scores, and you can turn the microphone on or off at any time in your phone’s settings.
Once you’ve allowed it, here’s what happens to a recording:
- The app records the line, checks it on your phone, and trims the silence at each end.
- It sends the recording, with the line you were practising, to our server. Our server passes the audio to ElevenLabs, an AI speech-to-text service, to find out what was said.
- Our own scoring compares what was heard with the line and marks each character.
- The recording is deleted from your phone after use. Anything left behind, for example if the app was closed mid-recording, is cleared once it’s an hour old, the next time you practise. We don’t store the audio on our servers.
We do keep a record of each attempt with your account: the line, the text the speech recognition heard, the score and technical details such as timings and recording quality. We use it to fix scoring problems and improve scoring. It’s deleted when you delete your account.
The demo on our website works the same way, without an account: your recording is sent to our server, transcribed by ElevenLabs and scored, and the result is shown to you. Neither the recording nor the result is stored.
The voice you hear in the app is an AI voice from ElevenLabs. Those clips are made ahead of time and built into the app, so nothing you do is sent anywhere to play them.
Subscriptions
If you subscribe to CantoGo Pro, Apple or Google handles the payment. We never see your card details. We receive your subscription status (for example trial, active or expired) and purchase records through RevenueCat. On iPhone, RevenueCat also receives Apple’s Search Ads attribution token, which says whether an Apple Search Ads ad led to the install.
Notifications and email
If you allow notifications, we store a push token for your device so we can send your daily reminder. Tips, new lessons and offers are sent only if you said yes to them, by notification and, if your account has an email address, by email. You can turn them off at any time in the app’s Settings (“Tips & offers”) or in your phone’s settings, and every email has an unsubscribe link.
These emails come from contact@cantogoapp.com and include a welcome and first-week check-ins, a reminder before a free trial ends, a note if you haven’t practised for a while, an invitation to our learner community, and occasional offers. We use whether you’ve finished a lesson, when you last opened the app, your trial’s end date and whether you’ve joined the community to decide which ones to send.
Usage, diagnostics and device information
How you use the app (screens viewed, lessons started and finished, setup and paywall steps), crash and error reports, and device information such as the model, operating system, language and IP address. Usage reports can include a recording of your screens in the app, and error reports a short one of the moments before the error. In these recordings all text, everything you type (including passwords) and images are masked.
Rammy on iMessage
Rammy is our Cantonese tutor that you text in iMessage, separate from the app. When you sign up on cantogoapp.com/rammy, we register your phone number, and your first name if you give it, with Photon, the service that runs Rammy’s iMessage line, so Rammy can text you.
When you text Rammy, your messages are handled by these services so Rammy can reply:
- Photon delivers messages between you and Rammy.
- Anthropic (Claude, an AI model) reads the chat to write Rammy’s replies, including photos you send.
- ElevenLabs turns your voice notes into text, and makes Rammy’s voice notes.
- GIPHY receives a few search words when Rammy sends a GIF, never your messages.
We keep your recent chat with Rammy (up to the last 80 messages) and short notes Rammy makes about you, such as why you’re learning and the words you’ve practised, so it remembers you. Photos and voice recordings aren’t stored: we keep only the text of what you said. Text “/reset” to Rammy at any time to delete your chat history and notes. To remove your number from Rammy completely, email us.
Who helps us run CantoGo
We share data with these providers only so they can do their job for us:
- Supabase: our database, sign-in and server. Your account, progress and speaking attempts are stored with Supabase in the United States.
- ElevenLabs: AI speech-to-text for scoring your speaking, once you’ve agreed to it. It receives your recordings and the lines you were practising.
- Apple and Google: sign-in, payments, and push notification delivery.
- RevenueCat: manages subscriptions. It receives purchase records and your account ID; on Android, and on iPhone only if you allow tracking, also device identifiers and Meta’s ID for your device, so it can tell Meta about subscriptions.
- Expo: delivers app updates and some push notifications. It receives your device’s platform, app version and push token.
- OneSignal: sends notifications, in-app messages and email. It receives your account ID, push token, language and a few labels such as whether you’ve finished setup or a lesson and your subscription state, and your email address only if you said yes to tips and offers.
- PostHog: product analytics and masked session recordings, linked to your account ID.
- Sentry: crash and error reports, with a masked recording of the moments before an error.
- Meta: measuring which ads bring people to CantoGo. Meta receives app events such as installing the app, signing up, finishing the app tour, starting a lesson, finishing a level, opening checkout and subscribing, linked to your account ID. On iPhone this happens only if you allow tracking when asked: then Meta also receives your device’s advertising identifier. If you don’t, CantoGo doesn’t start Meta’s SDK and sends Meta nothing from your iPhone. On Android it receives app events and your device’s advertising ID, which you can reset or delete in Android settings.
Each provider handles data under its own privacy policy. Our account ID is a random identifier. We don’t send your name or email to analytics, crash reporting or Meta, and your email goes to OneSignal only to send the emails you agreed to.
We may also share information if the law requires it, or to protect CantoGo, our users or others. If CantoGo is ever sold or merged, your information may move with it under this policy.
How long we keep it
- Your account, setup answers, progress and speaking attempts: until you delete your account.
- Daily progress snapshots: 30 days.
- Recordings: not stored on our servers. On your phone, deleted after use (anything left behind, within about an hour, the next time you practise).
- Data held by our providers: purchase records as long as billing, tax and legal rules require; usage analytics up to 7 years and masked session recordings up to 90 days (PostHog); crash reports 90 days (Sentry); notification records until we delete them (OneSignal). Email us after deleting your account and we’ll have them deleted within 30 days, except purchase records we must keep.
Your choices and rights
- Delete your account: in the app, go to Settings, then Delete Account. Or request it from this website.
- Microphone, notifications and tracking: you can allow or turn these off at any time in your phone’s settings.
- Tips, new lessons and offers: turn them off in the app’s Settings (“Tips & offers”), or use the unsubscribe link in any email.
- Access, correct or export your data: email us. Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to or restrict how we use your data, or to complain to your data protection authority.
We use your information to provide the app and keep it working, to save and sync your progress, to score your speaking, to send the reminders and messages you agreed to, to improve CantoGo and to measure our ads.
Where your data is processed
We and our providers process data in the United States and other countries, which may have different data protection laws from where you live.
Security
Data is sent over encrypted connections, and each account can only read its own data. No system is perfectly secure, but we work to protect your information.
Children
CantoGo is not directed at children under 13, and we don’t knowingly collect their personal information. If you think a child has given us personal information, email us and we’ll delete it.
Changes to this policy
If we change this policy, we’ll update the date at the top of this page. If the changes are significant, we’ll also let you know in the app.
Contact
Questions or requests: contact@cantogoapp.com.