Legal
Privacy Policy
Updated September 26, 2026
Your voice
Pronunciation checking listens on your device wherever it can. The first time you practise a language, Orablo asks before it downloads that language's speech recognition model: between about 32 and 50 MB depending on the language, plus about 6 MB for the recogniser itself, both served from Orablo's own site. The model is kept in your browser's cache, so it downloads once. With it, your voice never leaves the phone or computer, and the text is not kept after your attempt is graded. The Android app always listens this way.
Where the model cannot run, or if you choose the browser instead of the download, Orablo uses your browser's built-in speech recognition. In Chrome and Edge that feature sends the audio to Google's servers to be turned into text, between your browser and Google. That is the browser's behaviour, not something Orablo adds. In that case Orablo never records your audio and only ever sees the text the browser hands back.
You can use Orablo without a microphone: playback and reading work with speech recognition switched off.
Signing in with Google
Signing in is optional. It exists so your streak and your progress follow you across devices instead of living in one browser.
We ask Google for two things, and only these two: your email address (the email scope) and your basic profile (the profile scope, which is your name and picture). We do not request access to your Gmail, your contacts, your files, or anything else, and we cannot read them.
Of that, we store your Google account identifier and your email address. Your picture is not stored, and your name only as the next section says. Alongside them we keep your streak: how long it is now and at its longest, the date you last practised, and the range of time zones your days were counted in, worked out from the time zone your phone reports (kept in a cookie, orablo-tz). When a streak breaks and can still be earned back, we keep its length and last day, the round that started earning it back, the month you last earned one back and the day you closed the notice. If you subscribe, we also keep when your subscription runs to, whether it renews and the store's identifier for it.
For each language you learn, we also keep which collections you finished and in which mode (Spell it or Say it), your best score in each, the words you missed, and the dates you finished and last practised them. The dates you get words right in a review, the collections and series you star and the playlists you save, with any names you give them, are kept with the rest.
We do not sell this data or use it for advertising, and it goes to no one beyond the services named on this page that run Orablo for us. It exists to show you your streak and your progress, to show your profile to the people you give its link to, and to unlock what you paid for.
People
Nobody sees anything of yours until you make your follow link, on the People page, or follow someone. From then on, anyone with the link can see your profile: your first name (the first word of the name on your Google account), your current streak, the days and the situations you practised this week, the languages you practise, and your starred collections and series and your saved playlists if you switch those on. Each collection on your profile shows whether you finished it and in which mode (Spell it or Say it). The link is not listed or searchable anywhere. Resetting it makes the old one stop working, and your followers stay.
Blocking someone stops them following you and opening your profile while they are signed in. You can unblock them later. The link itself still opens for anyone who has it, so reset it to cut it off.
Following someone from their link makes your profile if you have none, because the people you follow see your first name among their followers. We keep who you follow, who follows you and whom you block. Stop sharing removes your profile and your follows, both ways.
If you report a profile, we keep that you reported it and when, and look at the reports ourselves.
Paying
On the website, payments are handled by Polar, who act as the merchant of record and are the legal seller. They receive what they need to bill you and to charge the right tax: your name, your email address, your card details and your country. We never see your card details. They do not pass through Orablo.
What comes back to us is only what unlocks content: that a payment succeeded, which product it was for, and when a subscription runs to. Polar keeps its own record of the transaction under its own privacy policy.
In the Android app, the Pass is bought through Google Play. Google is the seller and handles the payment under Google's own terms and privacy policy.
RevenueCat processes the purchase record on our behalf, to tell Orablo when your Pass is active. It receives your Orablo account identifier (a random code, not your email address), the product with its price and country, the purchase and expiry dates, and Google Play's transaction id. No card details reach Orablo or RevenueCat.
Deleting your account
Delete account on the account page deletes your record at once: email address, identifier, streak, purchases, progress, profile, follows and reports. Deletion is permanent, and nothing can be restored. While your Pass still renews, cancel it first. What is left in our encrypted backups is gone within thirty days.
We keep your record for as long as your account exists. If you never sign in again, we delete accounts untouched for two years.
On your device
Your theme choice, whether hands-free practice is on and whether you agreed to the model download are kept in your browser's local storage, and the speech model in its cache. They never leave your device.
In the Android app, the streak reminder setting is kept there too, and the next reminder is scheduled on the phone itself.
If you practise without signing in, the collections you finish, your stars and your playlists are kept there too. They are added to an account only if you sign in and choose to add them. To show your recent words, the page sends Orablo, in its address, the collections you finished in the last 30 days and the words in them you missed or later got right, and whether each miss was in Spell it or Say it. They are used only to build that page. To name your stars and playlists, the Saved page and the playlist chooser send them to Orablo, which uses them only to show those names.
A playlist you share is a link, and the link carries only its list of words: not its name, and nothing about you.
Counting visits
Orablo uses Cloudflare Web Analytics to count page views. It sets no cookies, stores nothing on your device, and does not build a profile or follow you to other sites. Web Analytics itself has no way to tell one visitor from another across days.
What it reports is which pages were opened, how often, roughly where in the world from, and how quickly they loaded. It is the only third-party script on the site.
Orablo also counts a few steps itself: arriving, hearing a word, trying to say it, starting and finishing a round of practice, sharing, creating an account, opening the Pass page, starting a checkout and subscribing. For that it keeps two cookies. orablo-land holds the first page you opened here, the site that linked to it (or the Instagram, Facebook or TikTok app that opened it), the campaign the link named, the ad network if you came from an ad (never the click's id), the page's language and the day, for 90 days. orablo-aid is a random number that lets those steps be counted per browser; it goes when you close the browser, and the Android app does not get it. Neither holds your name, email or IP address. The counts go to Cloudflare Workers Analytics Engine. If you subscribe, that first page is kept with the subscription, so we know which pages lead to one. If you create an account, that first arrival is kept with it, along with the days in its first month on which you practise, so we know which channels bring people who come back. It goes when the account is deleted.
Who runs Orablo for us
These services handle data on Orablo's behalf, each only for the part named here:
- Cloudflare hosts the site, its database and the speech models, and counts visits.
- Google handles signing in.
- Polar handles payments on the website.
- RevenueCat, with Google Play, handles payments in the Android app.
Your rights
The account page deletes your account and, on the website, downloads everything we hold about you as a file you can take elsewhere. To have something corrected, email hello@orablo.com. If you think we have handled your data wrongly, you can also complain to the data protection authority where you live.
Changes
If this policy changes in a way that affects data we already hold, we will say so on this page and update the date above before the change applies.