Privacy Policy

This Privacy Policy explains how LENGO handles personal data when you use our applications, website and related services. Personal data means information that identifies you or can reasonably be linked to you.

The information processed depends on the features you use, whether you create an account and the permissions you provide.

1. About Us

LENGO is language-learning software developed and provided by individuals, collectively referred to in this Privacy Policy as “LENGO”, “we”, “us” or “our”.

For privacy questions or requests concerning your personal data, contact contact@lengo.io.

2. Data security

We use technical and organisational measures intended to protect personal data against unauthorised access, misuse, loss and disclosure. No internet transmission, device or storage system can be guaranteed completely secure.

Where a personal data breach requires notification under applicable law, we will notify the relevant authority and affected individuals as required.

2.1 Collection of Personal Data

Depending on your use of LENGO, we process the following categories of information.

Account information includes your name or username, email address, login credentials and account identifiers. If you use Sign in with Apple, we receive the information Apple makes available according to your choices, which may include a private relay email address.

Profile information includes information you provide, such as a profile image, biography, language skills, region and social links. Some profile presentation may also be based on information inferred from details you provide.

Learning information includes your selected languages, onboarding answers, interests, goals, preferences, exercise results, progress, activity statistics and learning content you create or save.

Technical information includes device and session identifiers, device name, operating system, application version, language settings, IP address, request logs and information about how the Service operates on your device.

Purchase information includes purchased products, transaction identifiers, purchase or renewal dates, subscription status and verification information received from the relevant store. App-store payment details are handled by the store; LENGO does not receive your full payment-card details through those purchases.

Support information includes messages, contact details, attachments and relevant technical information you provide when asking for help.

If you use speech, scanning, image or AI-assisted features, relevant audio, recognised text, selected images, prompts, learning context or generated content may be processed to provide the feature. Processing may occur on your device or through LENGO and the service providers involved. Apple’s speech-recognition services may process audio remotely depending on the device, language and settings.

Microphone and camera access require the applicable device permissions. You can change those permissions in your device settings. Please avoid including sensitive personal information or information about other people in prompts, uploads or shared learning materials unless necessary and lawful.

2.1.1 Usage Information:

We process information about sessions, screens and features used, interactions, learning activity, purchases and referrals. This can include the timing, frequency and duration of activity and the source of a promotional or referral link.

Technical and session information can be processed even if you do not create an account. Information associated with a device or session may be linked to your account when you sign in or register.

2.1.2 Collection point

We collect information when you use our apps or website, complete onboarding, create or update an account, practise, make purchases, upload or share content, or contact us.

We also receive relevant information from app stores, sign-in services and providers supporting the features you use. Some information remains on your device; other information is transmitted when required for online features, account synchronisation, service operation or the other purposes described here.

Providing optional profile information or using optional features is your choice. If information necessary for a particular feature is not provided, that feature may be unavailable.

2.1.3 Collection Purpose

We process personal data to provide and maintain LENGO, manage accounts, synchronise supported information, deliver learning materials and personalise practice.

We also use relevant information to verify purchases, provide support, operate community features, understand usage, assess referrals and promotions, improve the Service, prevent misuse and meet legal obligations.

2.1.4 Reasoning of collection

Where the GDPR applies, our legal bases for processing depend on the purpose.

Article 6(1)(b) applies where processing is necessary to provide the service you request, including account functions, purchases and requested online features.

Article 6(1)(f) applies where processing is necessary for legitimate interests such as securing the Service, preventing fraud, troubleshooting and proportionate service improvement, provided those interests are not overridden by your rights and freedoms.

Article 6(1)(c) applies where processing is necessary to comply with a legal obligation.

Article 6(1)(a) applies where we rely on your consent, including optional marketing or tracking where consent is required. Consent can be withdrawn without affecting the lawfulness of earlier processing. Device permission and consent under data-protection law are separate requirements where applicable.

2.1.5 Access to information

You can request confirmation of whether we process your personal data, access to that data and a copy by contacting contact@lengo.io.

We may request information reasonably necessary to verify your identity and protect other people’s data. We respond within the time limits required by applicable law.

2.1.6 Accuracy and updating of the information

You can update supported account and profile details in the app. Contact us if other personal information is inaccurate or incomplete.

Learning recommendations and inferred preferences may change as you use the Service. They are estimates and may not always reflect your circumstances accurately.

2.2 Further rights

Depending on the applicable law and circumstances, you may request correction, deletion, restriction of processing or portability of your personal data.

You may object to processing based on legitimate interests for reasons relating to your situation. You may object to direct marketing at any time and withdraw consent where processing relies on consent.

You can request account deletion through the app’s available account controls or contact contact@lengo.io. Deleting an account does not automatically cancel a subscription billed by an app store.

You may lodge a complaint with a competent data-protection authority, including in the EU country where you live or work or where you believe an infringement occurred.

2.3 Time-span of using information

We retain personal data for as long as necessary for the purposes described in this policy. Relevant criteria include the type of information, whether your account remains active, the service you request, security needs, legal retention requirements and applicable limitation periods.

Account and synchronised learning information is generally retained while needed to provide your account and associated features. Purchase, accounting and dispute-related records may need to be retained after account deletion where required or justified by applicable law.

When deletion applies, information is deleted or anonymised, subject to lawful retention exceptions. Residual backup copies may remain until overwritten through the backup cycle. Content already received or copied by other users may remain outside our control.

2.4 Information usage

LENGO uses preferences, interests and learning activity to recommend content, adjust practice and show progress. This personalisation is intended to support learning and does not constitute an accredited assessment or a decision producing legal or similarly significant effects.

Depending on the community features used, other users may see your username, profile image, biography, languages, region, scores, ranking, subscription indicator and social information you provide. Your email address and login credentials are not displayed as public profile information.

Content you share, including through a sharing link, may be accessible to its recipients and anyone to whom they forward the link.

We may send account, security, purchase and support communications. Promotional messages are subject to applicable marketing rules and any required consent. You can object to marketing or unsubscribe using the instructions provided. Learning reminders and device notifications can be managed through the available app and device settings.

2.5 Information Protection

Connections to LENGO’s online services use encrypted transport. Access to personal data is restricted to authorised persons and providers who need it for the purposes described in this policy, subject to appropriate confidentiality and data-protection obligations.

Please protect your account credentials and device. Public profiles and shared content should not be used to store confidential information.

3.1 Third-party disclosure

We disclose relevant information to providers supporting hosting, storage, website operation, communications, purchase verification and features such as speech processing, translation and AI-assisted content generation. Information disclosed depends on the service involved and the feature used.

Providers acting on our behalf process information under applicable contractual requirements. App stores, sign-in services and some other providers also process information independently under their own privacy policies.

We may disclose information where required by law or where necessary and lawful to protect users, investigate misuse or establish, exercise or defend legal claims.

Processing may take place outside your country, including outside the European Economic Area. Where GDPR transfer rules apply, transfers require an applicable legal mechanism, such as an adequacy decision or appropriate contractual safeguards, with additional protection where necessary. You can contact us for information about the recipients, destinations and safeguards relevant to your data.

3.2 Third-party links

The Service may contain links to external websites, resources, social platforms or integrations. Opening a link or enabling an integration may disclose information necessary for that interaction to the third party.

Our website also uses externally provided hosting, security and font-delivery services. These services may receive technical information, including your IP address and browser information, when resources load.

Third-party services have their own privacy policies. Please review them before providing information or using their services.

4. third-party behavioral tracking

Our website measures its own use with a small first-party script: it keeps a random identifier in your browser's local storage and sends us the pages you open, how long they are on screen, what you click, the page you came from and the country of your address. The address itself is not stored, no cookie is set, and no third party receives this information. We use it to see which pages are read and for how long (Art. 6(1)(f) GDPR). Blocking scripts from api.lengo.io stops the measurement without affecting the site.

LENGO processes technical, session and referral information as described above. Third-party services used on the website may also process technical information and use cookies or similar technologies for their operation, security, measurement or attribution.

Where non-essential cookies, device access or tracking require consent or platform permission, those requirements apply separately. Acceptance of the Terms or acknowledgement of this Privacy Policy does not itself provide that consent.

You can manage available browser, cookie and device privacy settings and contact contact@lengo.io concerning consent withdrawal or an objection to processing. Blocking certain technologies may affect some website or app functions.

5. COPPA (Children Online Privacy Protection Act)

LENGO is a general-audience language-learning service and is not specifically directed to children under 13.

Where applicable law requires parental authorisation for collecting or processing a child’s personal data, that authorisation is required before the relevant use. The applicable age threshold may vary by country.

If you believe a child has provided personal data without the authorisation required by law, contact contact@lengo.io. We will investigate and take appropriate steps, including deleting information or restricting the relevant account where required.

6. FURTHER INFORMATION

For information about using LENGO and purchases, please read our Terms.

For privacy questions or to exercise your rights, contact contact@lengo.io.

We may update this Privacy Policy to reflect changes to the Service or applicable requirements. The date above indicates the latest revision. We will provide additional notice or request consent where required for material changes.

‍