← Home

النسخة العربية

App: LingoAula · Last updated: August 23, 2026

Privacy Policy for LingoAula

Email: support@lingoaula.com

LingoAula

This text describes current privacy practices and is not legal advice. We recommend a legal review before final reliance.

This Privacy Policy applies to the LingoAula mobile application and official website, operated and published by LingoAula.

1. Introduction and scope

This policy explains how personal data may be collected, used, stored, shared with service providers, retained, and deleted when you use LingoAula. We do not claim the product collects “no data” while third-party services process information needed to run it.

2. App name

The application covered is LingoAula.

3. Responsible developer

LingoAula is operated and published by LingoAula.

4. Privacy contact

5. Types of data that may be collected

  • Account data: email, account identifiers, and password hashes for authentication.
  • Learning progress: lessons, vocabulary, level, and preferences.
  • User-provided content: support messages and deletion requests.
  • Purchase / subscription status: order or entitlement identifiers (payment cards are processed by Apple/Google).
  • Technical data: device, OS, app version, language, IP address for delivery and security.
  • Ads & measurement (with consent): Google Analytics and AdSense cookies on the public website.
  • Website preferences: cookie choice and language in localStorage.

6. How data is collected

  • Directly from you (registration, login, forms).
  • Automatically via servers and APIs for operation and security.
  • From app stores for purchase status.

7. Why we use data

  • Provide learning features.
  • Manage accounts and sync progress.
  • Unlock paid content and subscriptions.
  • Measure traffic and show ads on the public site after consent.
  • Support, privacy, and deletion requests.
  • Security and fraud prevention.
  • Legal obligations where applicable.

We do not sell your personal data.

8. Legal bases (where applicable)

Processing may rely on contract performance, legitimate interests, consent (for non-essential cookies/ads), and legal obligation.

9. Sharing with service providers

We use hosting, database, email, analytics, ads, and store billing providers. They process data on our behalf or as independent controllers under their policies.

10. Third-party services in current configuration

  • PostgreSQL (Prisma): accounts, sessions, progress, login attempts, password-reset token hashes.
  • Netlify: website hosting and support forms when enabled.
  • Google Analytics 4 (G-JHH0XR4YLC): public pages only, after cookie consent.
  • Google AdSense (ca-pub-7787949033244476): public pages only, after consent.
  • Google Consent Mode v2 / CMP: defaults denied until you accept or reject; a Google-certified CMP may be enabled in AdSense.
  • Resend (when configured): transactional email such as password reset; API key is server-only.
  • Cloudflare Stream: paid video lessons when configured.
  • Apple / Google stores: payments and subscription status.

11. Advertising

Google AdSense may show ads on the public website after you consent. Google may process ad identifiers and interaction data under its policies. You can reject non-essential cookies on this site.

12. Analytics

Google Analytics 4 runs after consent on public pages. Firebase Analytics and Crashlytics are not enabled in the current configuration.

13. Sign-in and accounts

Login uses email and password. Password reset links expire in 20 minutes and are single-use. We never ask for your password in support forms.

14. User-generated content

Support and deletion forms are processed to handle your request. Do not submit passwords or full card numbers.

15. Device data

Device and app information may be processed for compatibility, security, and ad delivery when consented.

16. Cookies and local storage

  • Cookie banner with accept/reject and Consent Mode v2.
  • Analytics and AdSense are excluded from privacy, login, admin, and private lesson paths.
  • No Meta Pixel.
  • localStorage for cookie choice and language.

See Cookies.

16a. Google AdSense

Google and partners may use cookies to serve ads. Opt out via Ads Settings or aboutads.info.

17. Data security

We use reasonable measures (HTTPS, password hashing, access controls). No method is 100% secure.

18. Retention

Data is kept as long as needed for the service, legal duties, and security. After verified deletion, data is removed or de-identified within a reasonable period unless law requires retention.

19. Account deletion

Request deletion at /delete-account. Approximate response: 30 days.

20. Your rights

Depending on location you may have access, correction, deletion, restriction, objection, and consent withdrawal rights. Contact the privacy email above.

21. Children

Educational product. We do not knowingly collect data from children below applicable consent age without parental consent.

22. International transfers

Providers may process data in other countries with appropriate safeguards.

23. External links

Third-party sites have their own policies.

24. Changes

We may update this policy; the date above changes when published.

25. Contact

Backups

Administrative backups may exclude raw password hashes and sensitive store payloads from exported files.