Privacy Policy

1. Who is responsible

LinguaPair is operated by Thuyen Nguyen, an individual based in Vietnam, who is the controller of your personal data. Contact: support@linguap.com, phone +84 394 764 921. For help with the app, write to support@linguap.com.

2. Information we collect

• Account details. Your email address, display name, chosen native and learning languages, and a securely hashed password (or, if you use Google or Apple sign-in, the identifier those providers return). We never store your third-party password.
• Pairing data. The link between you and your partner’s account, created when one of you redeems an invite code, so progress and couples features can be shared between the two paired accounts.
• Learning activity. Lessons, vocabulary, saved words, streaks, XP, game results, and the lines of your Live Translator conversations, so we can track progress and power spaced-repetition review.
• Content you upload. Subtitle files and similar material you submit to features such as Films, used to build your word lists, and the text and screenshots or photos you attach to a bug report.
• Purchases. Subscriptions are bought through the App Store or Google Play. We receive the subscription status and a transaction reference (through our subscription provider Adapty), never your card details. Web payments through Stripe are not offered at the moment.
• Text and speech for AI features. The text you type and the transcript of what you say in the Live Translator and in speaking exercises are sent to our AI providers (OpenAI, and Google Cloud Translation for some translations) to translate conversations, build lessons and read texts aloud. Speech is turned into text by your device’s or browser’s own speech recognition (Apple, Google or your browser vendor); only the resulting text reaches us and our providers. In the in-person mode the other person’s speech is processed the same way, so please let them know before you start.
• Device and usage data. A device or installation identifier, the push-notification token, app version and crash reports (Crashlytics); in the app, the screens and features you use only if you allow usage analytics (Firebase Analytics). On the website, usage analytics run only if you accept analytics cookies (section 8).
• Usage statistics on our servers. For your account our servers record on which days and in which hours (UTC) you used LinguaPair, from which app (iOS, Android or the website), which features you used (for example lessons, review, the translator, games, reading, films) and whether each lesson exercise was answered correctly on the first try. The content of your messages is not part of it.
• Test group. If you join the test group: your application and its note, when you last used LinguaPair (a request from the app or the website while signed in) and the emails we send you about your test access.
• Technical data. IP address, browser or device type and server logs needed to keep the service secure and reliable.

3. Why we use it and on what legal basis

• Providing the service – account, pairing, courses, translator, vocabulary, games, syncing your devices: performance of our contract with you (GDPR Art. 6(1)(b)).
• Learning progress – your lesson results and exercise answers, kept so that you can see your progress and the course can adapt to you: performance of the contract (Art. 6(1)(b)).
• AI features – translation, lesson content and voice-over through OpenAI and Google: performance of the contract; in the app you are also told about it and agree before the first use.
• Subscriptions – checking your Premium status and keeping purchase records: performance of the contract and our legal obligations (tax and accounting).
• Service messages – sign-in codes, security notices and the invitations you ask us to send: performance of the contract.
• News and learning tips by email – only with your consent (Art. 6(1)(a)), which you can withdraw at any time in your profile or with the link in every such email.
• Website and app analytics (Google Analytics, Firebase Analytics) – only with your consent (Art. 6(1)(a)), given or refused in the website’s cookie banner or the app’s analytics question and withdrawn at any time in Cookie settings or with the Usage analytics switch in the app.
• Crash reports – our legitimate interest in fixing errors (Art. 6(1)(f)); you can switch them off in the app at any time (section 9).
• Server-side usage statistics – active days and hours, the apps and features you use and the accuracy of lesson exercises, so that we can see how far learners get and improve the courses: our legitimate interest (Art. 6(1)(f)). You can object at any time with the Usage statistics switch in your profile, in the app or on the website; after that only the day and the app you used are kept for statistics. Refusing analytics cookies or app analytics does not change this switch.
• Test group – running the test group you joined: checking when you last used LinguaPair so that we can remind you and end the test access after 14 days without use, and sending the test-group emails that are part of its rules (Terms of Service, section 5): performance of the contract (Art. 6(1)(b)). The Usage statistics switch does not affect this.
• Security and abuse prevention – our legitimate interest in keeping the service safe (Art. 6(1)(f)).
• Legal requirements – when the law requires us to keep or disclose data (Art. 6(1)(c)).

4. Who receives your data

Your learning progress is shared with the partner you explicitly pair with. Otherwise we share data only with providers that run parts of the service on our behalf, under data processing terms, and only as far as each of them needs:

• Hetzner Online GmbH (Germany) – our servers, database and backups.
• OpenAI (USA) – translation, lesson content and AI-generated voice-over.
• Google (USA, EU) – Google Cloud Translation, Firebase Analytics, Crashlytics and Cloud Messaging (analytics, crash reports, push notifications), Google sign-in and, on Android, Google Play purchases.
• Apple (USA) – Sign in with Apple, App Store purchases and push notifications.
• Adapty (USA) – keeping your subscription status in step with the App Store and Google Play.
• Resend (USA; sent from its EU region in Ireland) – sending our emails (sign-in codes, invitations, test-group emails).
• Cloudflare (USA) – our domain’s DNS and the forwarding of emails you send to our addresses.
• Telegram (United Arab Emirates) – internal notices for the operator, including the bug reports you send, identified by an internal user id.
• Sentry (Functional Software, Inc., USA) – technical error reports from the website and the server (error message, page, browser and a pseudonymous user id), only while error monitoring is switched on; legitimate interest in keeping the service working.
• Stripe (USA) – web payments; not in use while web checkout is switched off.

5. International transfers

Our servers are in Germany, but some providers above process data in the USA, the United Arab Emirates and other countries, and the operator is in Vietnam. Where data leaves the European Economic Area we rely on the European Commission’s Standard Contractual Clauses in the providers’ data processing terms or, for certified US providers, on the EU–US Data Privacy Framework.

6. How long we keep data

• Account and learning data: for as long as your account exists. When you delete your account it is erased at once.
• Database backups: overwritten within 30 days, so deleted data disappears from them within that time.
• Accounts that were never confirmed and never used: deleted after 7 days.
• Sign-in codes expire after 10 minutes; a sign-in session ends after 7 days without use and after 90 days at the latest.
• Server logs: kept in size-limited files that are overwritten automatically.
• Website analytics: at most 14 months in Google Analytics; crash reports: 90 days in Crashlytics.
• Server-side usage statistics: 400 days, then deleted automatically.
• Test group: the membership record (dates, last use, how it ended) and the record of the test-group notices we sent you, for as long as your account exists.
• Purchase records: as long as tax and accounting law requires.

7. AI-generated content

The voice-overs of texts and many illustrations in LinguaPair are generated by AI and reviewed before use. Translations in the Live Translator are produced automatically and can contain mistakes.

8. Cookies and similar technologies

The website uses cookies and browser storage that it needs to work, and analytics cookies only with your consent. You can change your choice at any time with Cookie settings at the bottom of every page and in your profile.

• Necessary: lp_at and lp_rt (your sign-in session), lp_2fa, lp_2fa_m and lp_fresh_login (sign-in steps), lp_pair_code (an invitation you opened), NEXT_LOCALE, lp_study_lang and lp_speech (language and speech preferences), lp_consent (your cookie choice, 12 months); browser storage for a lesson draft, your daily goal, hints you have seen, celebrated achievements and the map sound setting.
• Analytics, with consent only: Google Analytics (Firebase) cookies _ga and _ga_<id> (up to 2 years) and its browser database, and lp_ev (60 seconds; hands a sign-in or sign-out event to analytics).
• Sign-in providers: the sign-in and sign-up pages load Google’s and Apple’s own scripts when they open, so that their buttons work; their cookies are governed by their own policies.

9. Your rights

You can access and correct your data under Account → Settings and delete your account there (section 10). You may also ask us for a copy of your data in a portable format, to restrict its processing, or object to processing based on our legitimate interests, including analytics; you can withdraw any consent at any time without affecting what was done before. We answer within 30 days. You can also complain to the data protection authority of your country.

California: we do not sell or share your personal information and do not use sensitive personal information beyond providing the service. You can ask to know, correct and delete your information, and we will not treat you differently for doing so.

Vietnam: under the Law on Personal Data Protection (No. 91/2025/QH15) you have the right to be informed, to give and withdraw consent, to access, correct and delete your data, to restrict or object to processing, and to complain.

To exercise any right, email support@linguap.com.

10. Deleting your account

You can permanently delete your account and the personal data linked to it directly in the app or on the website: Account → Settings → Delete account. Deletion is immediate and irreversible and also unlinks you from your partner. Deleting the account does not cancel a subscription bought in the App Store or Google Play – cancel it in your store account.

11. Children

LinguaPair is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data. In the European Union, where we rely on consent (news emails, website and app analytics), that consent must come from a person aged at least 16, or the lower age set by their country, or from a parent.

12. Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated in the app.

13. Contact

Privacy questions or requests: support@linguap.com. Help with the app: support@linguap.com.