Privacy Policy

Privacy Policy

Effective date: 2026-10-24

Welcome to PassionalAI. Your privacy matters to us. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access our website and AI-powered learning services.

PassionalAI is operated by Chizsa Lee Ibañez, acting personally as its individual founder and operator in the Philippines.

This Privacy Policy applies exclusively to PassionalAI at https://passionalai.com (the "Service"). It does not govern other websites, applications, or businesses associated with Chizsaleei.

By using PassionalAI, you acknowledge this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent separately.

1. Information We Collect

We collect information necessary to provide educational services, manage accounts, process subscriptions, personalize learning, and maintain platform security.

Account and profile information

This may include:

Email address, display name, and authentication identifiers.

Account settings and profile information.

Preferred language, learning level, educational goals, and selected topics.

Learning preferences, professional interests, and selected AI coaches.

Subscription plan, access permissions, and account status.

Family membership, learner-profile settings, and associated entitlements.

Users may register using supported email authentication or Google sign-in.

Learning and practice information

Depending on the features you use, PassionalAI may collect or process:

Topics, questions, and learning instructions.

Text, images, audio, and documents submitted for learning.

Website links, video links, and source materials supplied for lesson generation.

Voice recordings and speech transcripts.

Written answers and spoken responses.

AI-generated lessons, explanations, feedback, and practice materials.

Pronunciation assessments and educational performance scores.

IELTS practice results and simulated examination records.

Saved vocabulary, expressions, exercises, and learning materials.

Completed lessons, practice history, progress records, and review schedules.

Learning-session information needed to resume or manage activities.

We process this information to deliver the features you request and maintain your learning experience.

Please do not submit identifiable patient records, confidential third-party information, or personal data that you are not authorized to provide.

Subscription, billing, and credit information

Payment providers process payment credentials. PassionalAI receives information needed to manage subscriptions and confirm transactions, which may include:

Payment-provider transaction identifiers.

Subscription plan and billing period.

Payment amounts and currency.

Payment, renewal, cancellation, refund, and dispute status.

Purchased or promotional credit allowances.

AI credit reservations, usage, charges, and releases.

Shared Family credit-pool information where applicable.

We do not store complete payment-card numbers.

Legal acknowledgment and eligibility information

PassionalAI maintains records of required legal acknowledgments and adult-eligibility declarations.

These records may include:

Authenticated account identifier.

Applicable learner-profile identifier.

Accepted Terms and Privacy Policy versions.

Document content hashes.

Server-recorded acceptance date and time.

Explicit declaration that the learner is at least 18 years old.

Application, request identifiers, and limited technical information associated with the acknowledgment.

An adult-eligibility declaration does not independently verify a person's identity or age.

The legal acknowledgment process does not require a full date of birth or government identification document.

Technical, security, and support information

We may process:

Browser and device information.

Request identifiers and timestamps.

Network and security information.

Error and diagnostic logs.

Activity necessary to detect abuse or unauthorized access.

Messages submitted through support channels.

Feedback, ratings, complaints, and privacy requests.

Network information, including IP addresses, may be processed by hosting and security infrastructure.

We do not represent that every technical identifier is stored in the same system or retained for the same period.

2. How We Use Personal Information

We use personal information for purposes connected to operating and maintaining PassionalAI.

These include:

Account management: Creating accounts, authenticating users, managing profiles, and maintaining account security.

AI learning: Generating lessons, interactive practice, educational explanations, speech transcripts, and personalized feedback.

Learning progress: Saving appropriate learning records, supporting session recovery, tracking progress, and scheduling review activities.

Subscriptions and credits: Processing subscriptions, applying credit allowances, recording usage, and maintaining billing accuracy.

Family accounts: Managing eligible adult memberships, permissions, and shared benefits where available.

Support and privacy requests: Responding to inquiries, resolving account problems, and handling applicable data-subject rights.

Security and reliability: Detecting misuse, investigating errors, protecting accounts, and maintaining service stability.

Legal obligations: Maintaining records required for lawful financial, security, contractual, regulatory, or dispute-resolution purposes.

Service improvement: Understanding operational problems and evaluating service quality using information processed for appropriate, disclosed purposes.

Where applicable, processing may rely on contractual necessity, compliance with legal obligations, consent, or other lawful grounds recognized by relevant data-protection laws.

Acknowledging this Privacy Policy does not automatically constitute consent to optional marketing, advertising, or tracking activities.

3. Artificial Intelligence and Speech Processing

PassionalAI uses third-party artificial intelligence and cloud technologies to provide educational features.

These may include Google Cloud, Firebase, Gemini AI models, and supported speech recognition and text-to-speech services.

Depending on the feature selected, the information processed may include:

User instructions and learning topics.

Text and uploaded educational materials.

Audio recordings and speech transcripts.

Practice answers and relevant lesson context.

Information required to generate educational feedback.

AI-generated content may contain mistakes, omissions, or inconsistent assessments.

PassionalAI provides educational assistance, not guaranteed factual accuracy or professional certification.

Medical and professional education

Medical English and clinical communication exercises are intended for non-clinical education and simulated learning.

They must not be used to diagnose, treat, prescribe for, or make professional clinical decisions about real patients.

Users must not provide identifiable patient records to AI learning features.

Provider handling

Third-party providers may process information according to their applicable service configurations, contracts, and privacy terms.

Data handling, security logging, caching, storage location, and deletion capabilities may differ between providers.

We do not guarantee that all providers use identical retention periods or that every provider-held copy can be immediately deleted.

The production Gemini project currently permits durable caching and uses a global endpoint. Google documents project-scoped implicit caching for supported models for up to 24 hours after writing; applicability depends on the model and feature. Provider abuse monitoring and optional feature-specific processing are separate from caching. We do not claim zero provider retention, an abuse-monitoring exemption, or verified immediate deletion of every provider copy.

Speech workflows include different recognition paths. Google documents temporary result retention for its asynchronous Speech-to-Text V1 service; this must not be assumed to describe every V2 request. Enrollment in optional speech data logging has not been independently confirmed. Google states that Cloud Text-to-Speech does not log customer text or audio; this does not remove recordings, transcripts or generated audio stored by PassionalAI.

4. How We Share Information

We do not sell personal information.

We may disclose information to service providers when reasonably necessary to operate the Service, including:

Google Cloud and Firebase: Authentication, database services, cloud storage, hosting, functions, and related infrastructure.

AI and speech-processing providers: Educational content generation, transcription, voice output, and feedback.

Payment providers: Subscription billing, transaction verification, renewals, refunds, and disputes.

Communication and support providers: Account-related communications, inquiries, and service support.

Security and diagnostic providers: Technical monitoring, abuse prevention, and troubleshooting where configured.

We may also disclose information when legally required, to protect legitimate rights or safety interests, or in connection with a lawful business transaction subject to appropriate safeguards.

Any disclosure must have an appropriate lawful basis and be limited to information reasonably necessary for its purpose.

5. Adult Eligibility and Family Privacy

PassionalAI's AI-powered learning services are intended only for adults aged 18 or older.

This applies to guest AI previews, registered learners, paid subscribers, Family members, and additional learner profiles.

Parental authorization does not create an exception to this eligibility requirement.

Each learner must satisfy the applicable eligibility and legal-acknowledgment requirements.

We may restrict AI access if eligibility is unknown or there is information indicating that an account or learner is ineligible.

Family privacy

Family subscriptions may allow eligible adults to share subscription benefits and credit allowances.

A Family plan does not automatically authorize one separately authenticated member to access another member's private learning records.

However, additional learner profiles under the same login may be accessible to anyone controlling that login.

Users should choose separate authenticated accounts when independent access and privacy are required.

If you believe an ineligible person has provided information to PassionalAI, contact us at founder@chizsaleei.com.

6. Cookies and Similar Technologies

PassionalAI may use cookies, local storage, and related browser technologies necessary for authentication, session continuity, user preferences, security, and application functionality.

These technologies may help maintain your login session and restore supported learning activities.

Any optional analytics, advertising, or marketing technology that requires separate consent under applicable law must be handled through an appropriate permission mechanism.

Acknowledgment of this Privacy Policy does not automatically authorize optional tracking or marketing.

7. Data Retention

We retain personal information for purposes connected to providing the Service, complying with applicable obligations, protecting security, and resolving legitimate disputes.

Retention requirements vary according to the type of information and the reason it is processed.

Examples include:

Account records: Maintained as necessary to operate accounts and fulfill applicable obligations.

Learning information: May remain available until removed through an applicable deletion or support process.

Uploaded documents and recordings: Subject to the relevant storage, deletion, and provider-handling processes.

Subscription and payment records: May be retained when required for accounting, transaction verification, refunds, disputes, or legal obligations.

Legal acknowledgments and audit records: May be retained for accountability, security, and lawful recordkeeping.

Security and technical logs: Subject to configured infrastructure retention policies and legitimate operational purposes.

Backups and provider copies: May be subject to separate retention, soft-deletion, recovery, or disposal processes.

Deletion limitations

Deleting your account does not necessarily remove every related record immediately.

The current self-service account-deletion function removes the Firebase Authentication identity. It does not, by itself, establish deletion of all learning information, uploaded files, voice recordings, billing records, legal acknowledgment records, backups, or third-party provider copies.

For broader deletion requests, contact founder@chizsaleei.com.

Authorized administrators will review the request, verify the appropriate account ownership or authority, and determine which information can be deleted and which must be retained under applicable law.

The primary application file bucket currently retains soft-deleted objects for seven days after deletion or overwrite. Removal from active access is not immediate physical erasure. Infrastructure operational logs are currently retained for 30 days, and the required audit-log bucket has locked 400-day retention. These settings do not establish a universal retention period for learning, financial, legal-acknowledgment or provider records. Temporary anonymous sign-in identities may be cleaned up automatically; identity cleanup does not establish deletion of related learner records.

We do not promise an unverified universal retention period or immediate deletion of every backup and provider copy.

Information that is no longer necessary and is not subject to a lawful retention requirement should be securely deleted or otherwise appropriately disposed of. Broader requests are assessed record by record: pending provider work and credit reservations must first reach a verified safe state; necessary financial, security and legal evidence may be retained only for an identified lawful purpose or hold; approved temporary export copies require controlled delivery and disposal. A comprehensive fixed schedule for every application record, external backup and provider copy has not been verified. Support will identify the confirmed scope and any outstanding actions rather than represent a partial deletion as a complete purge.

8. Data Security

PassionalAI uses technical and organizational safeguards intended to protect personal information against unauthorized access, alteration, loss, and misuse.

These include, where applicable:

Authentication and account-access controls.

Server-side authorization.

Restricted administrative permissions.

Cloud-provider security controls.

Security and audit logging.

Controlled access to user records and uploaded materials.

Procedures for reviewing privacy and data-access requests.

Authorized administrators are expected to access personal information only for legitimate and permitted operational purposes.

Although we take reasonable measures to protect information, no internet-based platform or electronic storage system can guarantee absolute security.

We will assess and handle security incidents and applicable notification obligations in accordance with relevant law.

9. International Data Processing

PassionalAI uses cloud, AI, and payment technologies that may process or store information outside the Philippines or your country of residence.

The location and nature of processing depend on the relevant provider and configured service.

Where applicable, international processing must comply with relevant privacy obligations and appropriate contractual, technical, or organizational safeguards.

We do not guarantee that all learning information or AI-processing data remains within a single country or cloud region.

10. Your Privacy Rights

Depending on applicable law, you may have rights to:

Be informed about the processing of your personal information.

Access personal information held about you.

Request correction of inaccurate or incomplete information.

Request deletion or blocking where legally applicable.

Object to certain processing.

Withdraw consent where consent is the applicable processing basis.

Request data portability where applicable.

Submit a privacy complaint or exercise other available statutory rights. Where Philippine law applies, available rights may also include damages and a complaint to the National Privacy Commission, subject to applicable conditions. You may consult https://privacy.gov.ph/data-subject-rights/ without first waiving any other available remedy.

To make a request, email founder@chizsaleei.com.

How requests are handled

Authorized PassionalAI administrators receive and review privacy requests under the responsibility of the individual operator.

For security, we may need to confirm your identity or authority using your authenticated account, registered email, or other proportionate verification methods.

Depending on the request, administrators may review records, prepare an export, correct information, assess deletion requirements, or coordinate appropriate actions involving cloud and service providers. An owner-approved manual procedure governs identity verification, scoped inventories, human approval, limited export/correction/deletion and completion evidence. Limited steps were verified using synthetic staging data; this does not certify every production store, provider or backup erasure process. The Admin dashboard is not a complete account-wide export or purge tool.

Before disclosing, changing or deleting records, the authorized human handler must verify identity and scope, approve the specific action plan, and arrange restricted case tracking and secure delivery where needed. AI agents must not autonomously approve requests or disclose or erase personal records. A request remains open for follow-up where provider copies, backups, pending work or lawful retention decisions remain unresolved.

Certain records may be retained where required or permitted by applicable law.

We will communicate the outcome of a request through an appropriate channel, subject to applicable legal requirements.

We do not require you to accept revised AI learning Terms merely to submit a privacy request.

11. Account Management and Subscription Choices

You may manage supported account settings and learning preferences through PassionalAI.

Available account and billing functions may allow you to:

Update supported personal and learning preferences.

Review subscription status and plan information.

Cancel eligible future subscription renewals.

Review available learning history.

Submit support or privacy requests.

Deleting an account is not the same as canceling an externally managed subscription.

If your subscription is billed through a third-party payment provider, use the appropriate cancellation process or contact support to prevent future renewals.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our learning features, service providers, operational practices, or applicable legal requirements.

The currently published version and effective date will be displayed on this page.

When material changes affect applicable legal acknowledgments, PassionalAI may require users to review the updated documents before continuing to access AI-powered learning.

Authentication or account login alone does not constitute automatic acknowledgment of a revised policy.

We may retain applicable historical policy versions and acknowledgment records where necessary for lawful accountability.

13. Contact Information

For privacy questions, requests, or concerns, contact:

Service: PassionalAI

Responsible operator: Chizsa Lee Ibañez Individual founder and operator, Philippines

Place of business: Cansoso, Matag-ob, Leyte 6532, Philippines

Business phone: +63 961 980 1968

Email: founder@chizsaleei.com

Website: https://passionalai.com

Privacy requests: Handled by authorized PassionalAI administrators under the responsibility of the individual operator.

We welcome questions about how personal information is processed and protected when using PassionalAI.

PassionalAI is committed to responsible AI learning, transparent data practices, and respect for the privacy and rights of its adult learners.