Čiriklo

Privacy Policy

Effective date: November 5, 2026

Čiriklo is operated by Rudolf Cicko in the Czech Republic. Contact: support@ciriklo.app.

Overview

Čiriklo is a Romani language-learning app. The course works without registration and your course progress is saved on your phone. If you turn on the Friends feature (Přátelé), we create a pseudonymous profile on our server. You don't need an email address, phone number or password for it.

Information on your device

Your course progress – completed lessons, word memory strength, XP, streak, coins, daily quests, settings and your name if you enter one – and the other data the app needs to teach you (exercise answers, review statistics, daily goal, reminder time and your onboarding choices) are kept by the app on your phone. The only course progress the app sends to our server is which units and sections of the course you have finished, anonymously (see Anonymous usage statistics), and, if you turn on Friends, the progress summary and the XP records described under Friends and races. Deleting the app removes the data on your phone (subject to device backups managed by you, Apple or Google). You can also erase everything in Settings → Delete all progress (Smazat veškerý postup); this also deletes your Friends profile. On iPhone, the secret key of your Friends profile and your recovery code are kept in the Keychain, where they may remain even after the app is deleted.

Pronunciation and reminders

Romani pronunciation is generated by on-device speech synthesis. The app does not use the microphone. Reminders and race alerts are local notifications scheduled on your device and do not require a server.

Anonymous usage statistics

To learn which lessons are too hard and what to improve, Čiriklo sends anonymous statistics via TelemetryDeck (TelemetryDeck GmbH, servers in the EU). These are only events such as "lesson completed" (unit, accuracy, duration), "out of hearts" or "Pro offer shown", together with the app version, OS version and device type. The app also sends where you are in the course (current unit and lesson, how much of the course you have finished and how many words you have learned), so we know when to add new lessons. We never send your name, your answers or anything you type. From the Friends feature we only send anonymous events such as "invite shared" (and how) or "race finished" (length and result), never names, codes, profile identifiers or friend lists. The device identifier is one-way hashed before it is sent, so the data cannot identify you. The data is not used for advertising or for tracking you across apps.

When you finish a unit of the course or a whole section (for example section 1, "Základy"), the app also tells our own server at Cloudflare in the EU (see below), once: it sends only the unit or section number and whether the app runs on iPhone or Android. The server adds one to the number of people who finished that unit or section that day. It stores no profile, device identifier, IP address or anything else that could tell who you are – only these daily totals. They show us how far people get in the course.

Advertising

Čiriklo is free thanks to ads from Google Mobile Ads (AdMob). Ads are never shown during lessons. Before loading ads the app asks for consent where required by law (e.g. GDPR in the EU) and asks for tracking permission on iOS (App Tracking Transparency). Google may process information such as your IP address, device identifiers, approximate location, ad interactions and diagnostics to deliver and measure ads, subject to your choices and applicable law. You can change your consent at any time in Profile → Settings → Privacy and ads. Čiriklo does not send your course progress or answers to Google. See Google's Privacy Policy and How Google uses information from sites or apps that use its services.

Friends and races (optional)

What we store on the server: a random profile ID; your friend code (e.g. ROM-7K3P); fingerprints (hashes) of your device's secret key and of your recovery code (only your phone and its backups have the keys themselves); the name or nickname you choose; the progress summary the app sends (total XP, XP over the last 7 days, the length and validity of your streak, whether you have studied today, your current unit); records of the XP you earned (number of points, type of activity, the time on your phone and on the server, and whether the record counts; never the content of lessons) for the last 40 days, to score races; your friends list, requests, invites and blocked players; a record of whom you removed from your friends or blocked, and when, so your older invites can't add them back; races (opponent, start, end, points, result, reward) and, for a claimed reward, a random identifier of the app installation; reports and moderator actions; the version of the rules you agreed to and the time you agreed; when your profile was created, when the app last connected and last synced, and when you last changed your name and code; daily counts of the requests, challenges and reports you sent (for limits); an automatic suspected-cheating flag.

What we do not store on the server: your lesson answers, contacts from your phone's address book, location, email address, phone number, IP address or time-zone setting. The progress summary does, however, contain when your recent days started in local time (local midnight), from which your offset from UTC can be inferred. You send invites through the system share sheet, WhatsApp or SMS. If you pick a friend from your contacts, the number is used only on your phone to open an SMS and is never sent anywhere.

Who sees what: your name, friend code, XP, streak, unit, whether you have studied today and whether you have not opened the app for more than 30 days, and your race results are visible only to friends you add through an invite or by accepting a request. Someone who sends you a request does not see your name until you accept it. If you send someone a request, they see your name. Someone who opens your invite sees your name. Your invite is valid for 60 days and can be used by up to 50 people; anyone who gets it becomes your friend with one tap on "Přidat do přátel" (Add as friend), without further approval. You can invalidate the link at any time in the app (Pozvat kamaráda → Vytvořit nový odkaz, i.e. Invite a friend → Create a new link). Players you raced against see the race result for about a month after the race ends: with your current name and code while you are friends; once you are no longer friends (removal or block), only with your code from that time and without your name. Someone who blocks you sees in their blocked list only the code and name from the time of the block (the name only if they already knew it), not later changes. Your data is shown to others with a delay of up to 15 minutes. There is no public search and there are no leaderboards.

Legal basis: performance of a contract, that is, providing the feature you turn on (Art. 6(1)(b) GDPR), and our legitimate interest in security, moderation and preventing cheating (Art. 6(1)(f) GDPR). Names are checked automatically against a list of offensive words; reports are reviewed by a person. If two players report a name, or a friend reports it for hate, the name may be hidden automatically before that review; a person then reviews the reports.

The community and race rules are in the Terms of Use.

Android release notice (website)

On the ciriklo.app website you can leave your e-mail address so that we can tell you when Čiriklo for Android is on Google Play. We store only the address, the language of the page and the time you signed up, on the server at Cloudflare in the EU (see below); we do not link them to a Friends profile or to the app. We use the address only for one e-mail about the release and then delete it. We do not sell it or share it for advertising; an e-mail delivery service may process it only to send that one e-mail. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by e-mailing support@ciriklo.app; we then delete the address.

Processor: Cloudflare

The server is run by Cloudflare, Inc. (Cloudflare Workers and the D1 database). The database was created in the EU jurisdiction, so the data is stored in the EU. Cloudflare processes IP addresses only transiently, to deliver requests and to protect against abuse; we do not store them or write them to logs. The transfer is covered by Cloudflare's data processing agreement (DPA), which relies on the EU–U.S. Data Privacy Framework and standard contractual clauses. Cloudflare, TelemetryDeck and Google protect data to at least the standard of this policy.

Retention

Deleting your profile

Children

Čiriklo is not directed primarily at children. Ads are limited to content suitable for all ages with parental guidance. The Friends feature is intended for users aged 13 and over. It shows only a name and statistics, it has no messages or chat, and a profile is visible only to accepted friends (with the exceptions described under Who sees what).

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data and to object to processing. You manage the course progress on your phone directly in the app. For your Friends profile you also have these options:

We use request emails (they contain your address and codes) only to handle the request and delete them at the latest 30 days after we have handled it. Contact us with any questions.

Changes

We may update this policy as Čiriklo changes. The effective date above will be updated when we do.