Who is responsible
MARDONTECH MChJ, Toshkent shahri, Yangihayot tumani, Xushnud MFY, 5-qurilish hududi daxasi, 30-uy, 27-xonadon, Uzbekistan, is responsible for your personal data in RoleReady: the interpreter app and the website roleready.uz. Questions and requests: [email protected].
In short
- Your voice is never stored.
- Text history is off unless you turn it on.
- No advertising, no selling of data, no analytics on this website.
Your account
If you sign in with Google: the identifier, name and email address your Google account shares with us; with email: your address and a hash of your password (never the password itself). Also your sign-in sessions, your settings and the consent you gave. We need these to provide your account (contract, Art. 6(1)(b) GDPR).
Conversations
The sound of both speakers goes from your phone to our server and from there to the AI services listed below, which recognise the speech, translate it and produce the voices. The German voice is made by your phone or by the same voice service, depending on your settings. The audio is processed in memory and never stored by us. Our providers process it only to answer each request and don't use it to train their models.
Transcripts and translations are stored only if you turn on history in the settings (it's off by default). Otherwise they are gone when the conversation ends.
We process conversations to provide the interpreting you asked for (contract, Art. 6(1)(b) GDPR).
What is said is up to you. Conversations in care, at the doctor or at an office may contain health data or other specially protected information (Art. 9 GDPR). We process it only because you — and the other person — explicitly agree when a conversation starts (Art. 9(2)(a) GDPR); it is never stored as audio either. You can withdraw that consent at any time by ending the conversation or writing to us.
The other person
Their words are processed the same way. Before your first conversation, the app asks them on its German half whether they agree (consent, Art. 6(1)(a) GDPR); they can say no, and then nothing is translated. If you've turned on history, their words are kept as text in your history.
For the other person (Art. 14 GDPR): your words reach us through the microphone of the phone of the person you are talking to. We create no account or profile for you and cannot identify you unless you say your name. This policy is reachable from the German half of the screen and at roleready.uz/de/privacy; your rights are listed below, and we answer questions at [email protected].
Translations you report
Under each translation there is a button for telling us it is wrong. When you use it, the app first says what will happen, then sends us that sentence and its translation — which may include the other person's words. We keep both with your account to check and improve the translations, until you delete your account (consent, Art. 6(1)(a) GDPR; you can withdraw it by writing to us).
Your German mistakes and practice
When you speak German yourself on your own button (and, if you switch it on, on the German button too), the app has your German checked by the same AI service that translates (Google Gemini) and shows you the mistakes. The check is part of the service (contract, Art. 6(1)(b) GDPR), on by default and can be switched off in the settings; the other person's German is never checked. The mistakes — the sentence as you said it, the corrected sentence and a short explanation — are kept with your account only if you agree when the app first asks; they then come back for practice. When you practise, your recording goes to the AI service to be checked and, like all audio, is not stored. You can delete kept mistakes in the settings at any time, and they are deleted with your account (consent, Art. 6(1)(a) GDPR; you can withdraw it in the settings). How often the phrasebook's lines are played and practised is counted for everyone together, without names, to show the most used ones.
Minutes and payments
For every conversation and every turn in it we record when it happened, how many seconds of speech it used, whether the translation worked, how long it took and what it cost us — not what was said. We need this to count your minutes (contract) and to keep the service affordable (legitimate interest, Art. 6(1)(f) GDPR).
Paddle sells RoleReady as Merchant of Record and processes your payment under its own privacy policy (paddle.com/legal/privacy). We receive what we need to give you your minutes — your plan, payment status and country — never your card details. For each payment we keep the amount, currency, plan and the country of the billing address and, when Paddle tells us, of the card, to match payments and keep our accounts (contract; legal obligation, Art. 6(1)(c) GDPR).
If you buy in the app from Google Play, Google processes the payment under its own privacy policy (policies.google.com/privacy). Google tells us the order number, the product bought, a purchase token, the subscription's status and the order's price, tax and country — never your payment details — and we keep them as above, to give you your minutes and keep our accounts (contract; legal obligation).
So that the trial counts once per person, we keep a hash of the app's installation and of your Google account — never the values themselves. It stays after you delete your account, so the same installation or Google account doesn't get a second trial (legitimate interest, Art. 6(1)(f) GDPR).
Telegram
If you choose "Connect Telegram" in the app and start the bot @roleready_bot, we keep your Telegram chat's identifier with your account. The bot writes to you when your minutes run low or run out, and /balans shows your plan and minutes (contract, Art. 6(1)(b) GDPR). We note which reminder we sent so that it comes only once. /uzish in the bot, blocking the bot or deleting your account removes the link. Telegram processes your messages under its own privacy policy (telegram.org/privacy).
Errors
When something fails — on our server or in the app — we record the type of error, its technical message and where in our code it happened, with the account it happened to. Never what was said. We use this to find and fix faults (legitimate interest, Art. 6(1)(f) GDPR) and keep it only as long as we need it for that. No outside error-tracking service is used.
This website
roleready.uz sets no cookies and uses no analytics. Cloudflare, which delivers the site, processes technical data such as your IP address to do so and to protect the site from abuse (legitimate interest).
Who processes data for us
| Service | What for | Where |
|---|---|---|
| Google (Gemini) | Speech recognition and translation | USA |
| Microsoft (Azure AI Speech) | The voices | EU |
| Google (Sign-In) | Signing in with your Google account | — |
| Railway | Our servers and database | EU (Netherlands) |
| Cloudflare | Delivering this website | Worldwide network |
Each works for us under a data processing agreement. We use only paid AI services, which don't use your data to train their models. Paddle, Google Play (purchases in the app) and Telegram (the bot) are controllers in their own right for what they process.
How long we keep it
- Audio: not stored.
- History: until you delete your account.
- Translations you reported: until you delete your account.
- Your account: until you delete it in the app or through Delete account; it is then erased within 30 days.
- Telegram link: until you unlink it or delete your account.
- Records of minutes and payments: as long as tax law requires.
- Trial hashes: as long as RoleReady exists; they can't be traced back to you.
Where your data is
Our servers and database are in the European Union (Netherlands). We are based in Uzbekistan, for which there is no adequacy decision of the EU Commission; from there our team accesses only what is needed to run the service and answer your requests, over encrypted connections and never audio. That access is necessary to perform our contract with you (Art. 49(1)(b) GDPR).
Some providers process data outside the EU: Google (Gemini, Sign-In) and Cloudflare in the USA under the EU-US Data Privacy Framework and the EU Commission's standard contractual clauses; Railway is a US company whose servers for us are in the EU, with standard contractual clauses for support access; Paddle is in the United Kingdom, covered by an adequacy decision; Telegram processes messages on its own servers worldwide. Microsoft (Azure AI Speech) processes in the EU (West Europe). A copy of the safeguards is available on request.
Security
All connections are encrypted (TLS). Audio is processed only in memory, passwords are stored only as hashes, and access to our systems is limited to the team that runs them. There is no automated decision-making with legal effect and no profiling (Art. 22 GDPR).
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interest. You can withdraw a consent at any time. Write to [email protected]; much of this is also in the app's settings (delete account, history).
Objection (Art. 21 GDPR): you can object at any time, on grounds relating to your particular situation, to processing based on legitimate interest; we then stop unless compelling legitimate grounds override.
You don't have to give us any data; without an account and audio there is no interpreting, though. You can also complain to a data protection authority — in Germany, the one for the state where you live; in any other EU country, its supervisory authority.
Children
RoleReady isn't intended for anyone under 16.
Changes
If we change this policy, the new version will be here with a new date; if a change matters to you, we'll tell you in the app.