Privacy Policy
This policy covers all Abuelito apps and websites: Abuelito Driving School (driving and CDL), Abuelito Citizenship and Abuelito English, on iPhone, on the web (abuelito.co and abuelito.co/app) and, when available, on Android. They are made by Inappbot Inc. ("we"), a company based in the Bronx, New York.
The short version
- Everything works without an account. Without one, your progress stays on your phone or browser.
- The account is optional (email with a 6-digit code, or Sign in with Apple). It only saves your progress in the cloud, lets you use it on another phone and, once passes exist, keeps your passes.
- We never sell or share your data for advertising. No ads from other companies, no tracking across apps or websites, no third-party tracking or analytics tools.
- "My N-400" and your ZIP code never leave your phone.
- You can delete your account in the app (Profile → "Your account" → "Delete my account") or here.
1. What stays only on your phone
Your language, nickname and character, your state, your test or appointment date, your goal, answers, points, streak, practice tests, settings and, in Citizenship, "My N-400" (your practice answers to the form) and your ZIP code. Without an account, none of this leaves your device. Erase it with Profile → "Reset my progress" or by deleting the app (on the web, by clearing the site data).
2. What leaves your phone, why, and whether it is linked to you
| What | Why | Where it is stored | Linked to you? |
|---|---|---|---|
| Anonymous counters: what happened (opened the app, finished a lesson or unit, saw a card, shared a link…), app, course, language, version, platform, the day (no time) and a random number for your install | Learning what helps (our own analytics) | Our server (Supabase, USA) | Not by themselves. With an account, that random number travels with your progress and could be combined. Turn them off in Profile → "Help Grandpa with anonymous data" |
| Account: your email (or Apple's private relay email if you choose "Hide My Email"), a user ID and how you signed in | Sign-in and saving your progress | Supabase Auth (USA) | Yes |
| Synced progress (account only): nickname, character, state, test date, goal, lessons, answers, stats, practice tests, your signed promise and your welcome answers. Never "My N-400", your ZIP code or your notes | So you don't lose progress and can use it on another phone or the web | Supabase (USA) | Yes |
| Phones on the account: a random number per install, platform and last use (2 max) | So your account works on 2 phones and you can sign one out | Supabase (USA) | Yes |
| Passes and purchases (once passes exist): which pass, from and until when, where it came from (App Store, abuelito.co or gift) and any refund. We never see your card | Giving you what you bought on all your devices | Supabase (USA); Apple or Stripe charges | Yes |
| Family Pass: the email of the people you invite | Holding their seat | Supabase (USA) | Yes |
| Emails you send us | Answering you | Our mailbox (hello@abuelito.co) | Yes |
We do not collect precise location (no GPS), contacts, photos, health or financial data, or the advertising identifier (IDFA). The app doesn't ask for tracking permission because it doesn't track.
3. What is specific to each app
Abuelito Driving School (driving and CDL)
Uses the state and license type you pick to show your state's questions. Links to handbooks and DMV pages open the official site, which has its own privacy rules.
Abuelito Citizenship
- "My N-400" and your ZIP code stay on your phone. They are not uploaded with your account and we never see them.
- Read aloud (and the reading step of the mock interview): only if you agree (the app asks the first time), the short recording of the sentence you read (2–8 seconds) is sent to Microsoft Azure Speech, an artificial intelligence service, only to score your pronunciation, and the result comes back. Neither we nor Microsoft keep it for anything else (Microsoft acts as our service provider). If you say no, you still practice, without a score.
- The officer says your name (optional): if you allow it in "My N-400", we send only your name to record it in the officer's voice. We keep that name audio, with no other data about you, so it plays in your mock interview.
- Mock interview: what you answer the officer out loud is recognized only on your phone (reading works as above).
Abuelito English
Speaking practice ("Dilo tú", "Contesta", "Vívelo") uses your phone's speech recognition. We don't keep your voice.
In all apps: microphone, speech and notifications
- Hands-free and speaking practice use the microphone only while you practice. Recognition runs on your phone when possible; if your phone can't, Apple (on iPhone) or your browser does it under its own rules. We don't receive or keep your voice (except "Read aloud", above).
- Reminders are local notifications; nothing leaves the phone.
- Videos and voices download from our server (media.abuelito.co); downloading sends no data about you.
- "Spread the word": your link code comes from your random number, not your data. You choose who gets it; we never see your contacts or messages.
- Abuelito cards (when turned on) introduce other Abuelito apps, never ads from other companies, and are chosen on your phone from what you told the app.
4. The website
abuelito.co uses no advertising or analytics cookies. The web app keeps your progress in your browser (localStorage). Our hosting providers (Vercel and Cloudflare) log technical data for each visit (IP address, browser, page) for security and to run the site. If you buy on the web, Stripe processes the payment on its own page.
5. Who we share data with
Only with providers that help us run the service, acting on our behalf, who may not use your data for anything else:
| Provider | Purpose | Apps |
|---|---|---|
| Supabase (USA) | Accounts, progress, passes, counters | All |
| Cloudflare (USA) | Videos and voices (R2), api.abuelito.co, site protection | All |
| Vercel (USA) | Website hosting | Web |
| Resend (USA) | Sending your sign-in code from hello@abuelito.co | All |
| Microsoft Azure (USA) | Scoring "Read aloud" | Citizenship |
| Apple | Sign in with Apple, App Store purchases, iPhone speech recognition | iPhone |
| Stripe (USA) | Payments on abuelito.co | Web |
We may also disclose data when the law requires it (for example, a valid court order) or to protect someone from serious harm. If another company ever acquires Inappbot, this policy will keep applying to your data and we will tell you.
We do not sell your data or "share" it for cross-context behavioral advertising (as defined by California and other state laws). More in Your data and your rights.
6. How long we keep it
- Account, progress, phones and family seats: as long as you keep the account. Deleting it erases them right away; our provider's backups roll over within 30 days.
- Purchase records (which pass, dates, refunds): as long as tax and accounting law requires (up to 7 years), no longer linked to your account after you delete it.
- Counters: up to 24 months; after that we keep only totals.
- Support emails: up to 2 years after the last reply.
7. Your rights
Anyone, wherever they live, can ask us to see, correct, download or delete their data, and can turn off the counters. Email hello@abuelito.co from your account email. We answer within 45 days (usually much sooner) and never treat you differently for using your rights. Details for residents of California, Virginia, Colorado, Connecticut, Texas, New Jersey and other states, how to appeal, and Global Privacy Control (GPC) are in Your data and your rights.
8. Children
The apps are for people 13 and older and are not directed to children. We do not knowingly collect data from children under 13; if we learn we did, we delete it. More in Children's privacy.
9. Security
Everything travels encrypted (HTTPS). Your account session is kept in the iPhone Keychain. On the server, each person can only read their own data (row-level security) and only our server functions can write passes. No system is perfect: if something ever affects your data, we will notify you as the law requires.
10. Where data is stored
In the United States. The apps are meant for people in the US.
11. Changes
If we change this policy we update the date and version at the top; for important changes we also tell you in the app.
12. Privacy contact
Inappbot Inc. · Bronx, New York, USA · hello@abuelito.co (subject: "Privacy").