Last updated: 30 October 2026
This Privacy Policy explains how Roman Pieskov ("we", "us", or "our") collects, uses, discloses, and protects your information when you use the BlaBlaEng mobile application (the "Service") — an ad-supported app for practising English with other people through text chat and voice calls.
By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here. If you do not agree with any part of this Privacy Policy, please do not use the Service.
Terms used in this Privacy Policy have the same meanings as in our Terms of Use, unless otherwise defined herein.
The controller of your personal data — the person who decides why and how it is processed — is:
This is so wherever you obtained the app, and for everything the Service does with your data: the app talks to one set of servers, holds every account in one place, and matches people with each other across both platforms, so responsibility for it does not divide by the store you downloaded it from.
Who distributes the app to you is a separate matter, and that does depend on the store you obtained it from: each store identifies its own trader on the app's page and shows that trader's contact details there. On both Google Play and the Apple App Store the app is published under the developer and seller name Roman Pieskov (on Google Play it was previously listed under the developer name Rona Mobile Solutions; the legal name shown there is Pieskov Roman Petrovych), and our Terms of Use give the details. That has no bearing on how your data is handled or on whom you write to about it — for anything in this Privacy Policy, the address above is the one.
If you have any question about how your data is handled, or wish to exercise any of the rights described in Data Retention and Your Rights, write to the e-mail address above, whichever store you used. We answer in English.
We collect only the information needed to operate the Service: to create your account, to match you with conversation partners, to deliver messages and calls, to keep your learning progress, and to keep the Service safe. We do not sell your information, and we do not share it with any third party except as strictly required to operate and support the Service or as described in this Privacy Policy.
When you install the app today, an account is created for you as a guest profile from what you enter in the sign-up steps: we do not ask for a password, an email address, or a phone number. That profile consists of:
Some accounts created in earlier versions of the app are not guest profiles: they have an email address and a password, or they were created through Sign in with Apple. If your account is one of these, we also hold your email address (and, where you used Sign in with Apple and chose to hide it, the private relay address Apple gives us instead) and a cryptographically hashed version of your password — we never store the password itself. Your email address is used to identify your account and to contact you about it; it is shown on your own profile screen and is never shown to other users.
As you use the Service, you also provide us with the messages you write in chats (text only — the app does not send photos or files in chats), the ratings and feedback you give partners after a call, and any reports or complaints you submit about other users. Your English level and rating are not something you set yourself: they are derived from the feedback other users give you after calls.
The information we collect is retained by us and used as described in this Privacy Policy. You can change most of it at any time in the app, and you can delete your account together with the data associated with it (see Data Retention and Your Rights).
If you contact us from within the app, the message is composed in your own email app, so we receive your email address and anything you write. To help us investigate, the message is pre-filled with basic diagnostic details — your user identifier, the app version, your platform and operating system version, your device model, your app language, and the time — which you can see and edit before sending. We use this correspondence only to answer you and to fix the problem you reported.
Voice calls are transmitted in real time using WebRTC. Where a direct connection between the two devices cannot be established, the audio stream is relayed through STUN/TURN servers so the call can continue. Setting up a call discloses your device's IP address to the other participant's device and to those servers, which include our own relay servers and Google's public STUN server; this is how any WebRTC call works and cannot be avoided while placing one. We do not record or store the audio of your calls, and we do not listen in on them. We do store information about a call — who took part, when it started, how long it lasted, and how it ended — so that we can show your call history, count your practice time and statistics, award achievements, and apply limits, cooldowns, and safety measures. Ratings and reports you submit about a partner after a call are stored with that call.
When you use the Service, some information is collected automatically:
The Service relies on the following third-party platforms for hosting, storage, analytics, crash reporting, push notifications, advertising, and payment processing. Some parts of the Service depend on these providers to operate as intended, and these providers may collect information that could be used to identify you. We encourage you to review each provider's privacy policy:
If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a legal basis for each purpose for which we use your personal data. Ours are:
We do not ask for and do not want special categories of data — such as data about your health, religion, political opinions, or sexual orientation. Please do not put such information in your profile. Anything you choose to say about yourself during a call or in a chat is content you share with another user, and we process it only as described in this Privacy Policy.
The Service is ad-supported and shows advertisements through Google AdMob, including rewarded ads you can watch voluntarily to earn in-app coins. Advertising partners may use device and advertising identifiers and information about your use of the app to select and measure ads.
On iOS, the app asks for your permission through Apple's App Tracking Transparency dialog before any tracking identifier is used; if you decline, ads are still shown but are not personalised. In the European Economic Area, the United Kingdom, and Switzerland, we present a consent form provided by Google's User Messaging Platform where you can accept or refuse personalised advertising. You can change your advertising choices at any time in your device settings, and, where available, through the privacy options in the app.
Users with an active premium subscription do not see advertisements, and no advertising requests are made for them.
Separately from the advertisements shown inside the app, we measure which advertising campaigns bring people to it. RevenueCat, the provider that manages subscriptions for us, receives from the app the identifiers your device makes available for that purpose:
The app also gives RevenueCat the analytics instance identifier of your installation, so that a subscription can be connected to the campaign that led to it. We use all of this to understand which campaigns work; we do not receive your name or contact details through it, and it is not used to decide what you see inside the app.
Where the consent form applies to you — in the European Economic Area, the United Kingdom, and Switzerland — these identifiers are collected only if you allowed it there: until you answer the form, and after any answer that withholds it, none of them is collected at all. Elsewhere they are collected on the basis of our legitimate interest in knowing where our users come from, and you can stop that at any time by turning off or resetting the advertising identifier in your device settings — on Android under Settings, Google, Ads; on iOS by refusing or withdrawing tracking permission under Settings, Privacy & Security, Tracking.
Subscriptions are processed by the App Store or Google Play, and are managed on our side through RevenueCat. Coins are earned inside the app — by watching a rewarded advertisement or by completing an in-app goal — and are not sold for money, so earning or spending them involves no payment data. We never receive or store your payment card details. We receive from these providers the information needed to grant and verify entitlements — such as the purchased product, transaction identifiers, purchase and renewal dates, subscription status, and the customer identifier we give RevenueCat for you, which is your BlaBlaEng user identifier rather than a separate anonymous one. Refunds, cancellations, and billing are handled by the store where you made the purchase, in accordance with its terms.
If you allow notifications, we use Firebase Cloud Messaging to send you notifications about incoming calls, new messages, chat requests, and your learning progress. To do this, a device push token is stored with your account. You can turn notifications off at any time in the app settings or in your device settings — the app then tells our servers to stop sending them — and the token stored with your account is deleted together with the account when you delete it.
The app keeps a running diagnostic log of what it is doing — the screens it opens, the requests it makes to our servers, and the errors it runs into — and uploads it to us periodically while you are using the Service. This log is not limited to crashes: it records ordinary events too, which is what makes it possible to reconstruct what happened before something went wrong.
Each entry carries the message itself and the context needed to make sense of it:
These logs are stored in Amazon CloudWatch Logs, in our own account. We use them only to operate, diagnose, and secure the Service; they are never used for advertising and are not shared with advertising partners. They are kept for three months and then deleted automatically.
Crashes are additionally reported through Firebase Crashlytics, a third-party product. What it collects is the state of the app at the moment of the crash, together with your device's IP address, device model, operating system version, app configuration, and the date and time.
The legal basis for both is our legitimate interest in a Service that works and is secure.
Cookies are files containing a small amount of data that are commonly used as anonymous unique identifiers. They are sent to your browser from websites and stored on your device's internal memory. While our Service does not explicitly use cookies, third-party code and libraries used by the Service may use cookies or similar technologies to collect information and improve their services. You can choose to accept or refuse these cookies and be notified when a cookie is being sent to your device. Refusing cookies may limit your ability to use some portions of the Service.
We may engage third-party companies and individuals for the following purposes:
These third parties may have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
The Service connects you with other people, so part of your profile is visible to the partners you are matched with, chat with, or call: your username or display name, profile photo, gender, country, English level, rating, and whether you are currently online. Messages you send are visible to the recipient. Please do not share sensitive personal information — such as your full address, financial details, or identity documents — with other users.
To keep the Service safe, we allow you to block and report other users, and we apply automated filters to certain user-generated text. Reports, along with the messages and call records they concern, are reviewed and may lead to warnings, restrictions, or the termination of an account. We may also disclose information where we believe in good faith that doing so is required by law, or is necessary to enforce our Terms of Use, to detect and prevent fraud or abuse, or to protect the rights, safety, and property of our users or of any person.
We value your trust in providing us with your information and use commercially acceptable means to protect it, including encryption in transit (HTTPS/TLS) and access controls on the systems that store it. However, no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Two parts of the Service work automatically. When you choose a display name or write a chat request, the text is checked automatically against a list of offensive words and is rejected if it matches. And when you look for a partner, you are matched automatically with another user who is searching at the same time.
Neither of these produces a legal effect on you or similarly significantly affects you, and we do not make decisions about restricting or terminating an account by automated means alone: a report is looked at by a person before an account is restricted, and if you contest a decision under our Terms of Use, it is reviewed by a person.
We keep personal data only for as long as we need it for the purposes described above, or for as long as the law requires. In practice:
Subject to the conditions and exceptions in the law that applies to you, you have the right to:
You can exercise most of these rights yourself in the app: you can edit your profile at any time, and you can delete your account in the app settings. For anything else, write to admin@blablaeng.com. We will respond within one month of receiving your request; if your request is complex we may extend that by a further two months and will tell you if we do. Exercising these rights is free, and we will never treat you differently for having used them. Because a guest account is not tied to an email address, we may need to ask you for information from within the app — such as your user identifier — to be satisfied that the account is yours before we act on a request.
Because a guest account has no email address or password attached to it, access to it is held by the app on your device: the sign-in tokens are stored in the app's own storage. If you delete the app or clear its data, that account can no longer be reached from the app, and a fresh account is created the next time you sign up.
Our Service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided us with personal information, we will promptly delete that information from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take the necessary action.
The Service runs on Amazon Web Services; profile photos and other public assets are stored in the AWS London region (eu-west-2), in the United Kingdom. We are established in Ukraine, and some of the providers listed above — Google, RevenueCat, Apple — process data in the United States and in other countries. Your information may therefore be transferred to, stored in, and processed in a country other than your own, where data protection law may differ from the law of your own country.
Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on a transfer mechanism recognised by law rather than on your consent: an adequacy decision of the European Commission or of the UK government covering the receiving country, where one is in force, or otherwise the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, supplemented where necessary by additional technical and organisational safeguards. You may ask us for a copy of the safeguards that apply to a particular transfer by writing to the address in Who Is Responsible for Your Data.
Separately from this, the Service matches you with people around the world: the part of your profile described in Information Visible to Other Users is shown to the partner you are matched with, wherever that person happens to be, and your device connects directly to theirs to carry the call. That is inherent to what the Service does.
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights. In the last 12 months we have collected the categories of personal information described in Why We Process Your Information: identifiers (such as a user identifier, a device identifier, an advertising identifier, an IP address, and, for older accounts, an email address); commercial information (subscription status and transaction identifiers); internet and network activity (how you use the app, the campaign information described in Advertising and Attribution, and crash and diagnostic data); audio information, in the sense that calls pass through our infrastructure in real time without being recorded; inferences drawn about your English level from the ratings other users give you; and the content you create in chats. We collect it from you, from your device, and from our service providers, for the purposes described above, and we disclose it to the service providers listed above for those purposes only.
We do not sell your personal information, and we have not sold it in the last 12 months. We do not knowingly sell or share the personal information of anyone under 16. Showing personalised advertising, and the campaign measurement described in Advertising and Attribution, may count as “sharing” for cross-context behavioural advertising under the CPRA; you can stop both at any time by refusing tracking in Apple's App Tracking Transparency dialog and by turning off the advertising identifier in your device settings, or by writing to us at the address below. You also have the right to know what we have collected, to have it deleted, to correct it, to limit the use of sensitive personal information (we do not collect any), and not to be discriminated against for exercising any of these rights. To make a request, write to admin@blablaeng.com.
We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and change the “Last updated” date at the top of it. If a change materially affects how we use your personal data, we will give you reasonable advance notice before it takes effect — by e-mail where we have your address, or by a notice in the app — and, where the change requires your consent, we will ask for it. We encourage you to review this page from time to time.
If you have any questions or suggestions about this Privacy Policy, or if you would like to exercise your rights, please contact us at admin@blablaeng.com.