Privacy Policy

LingoBlend ("we," "our," or "us") operates the LingoBlend mobile application (the "App"). This Privacy Policy explains how we collect, use, share, and protect your information when you use our App.

By using LingoBlend, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your personal data is:

Nikola Artukov
Email: support@lingoblend.app

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• First name and username
• Password (stored in hashed form by Firebase Authentication; we never see or store your plain-text password)
• Language preferences (target language and known language)

If you sign in with Apple or Google, we receive your name and email address from the respective provider. We do not receive or store your Apple or Google account password.

User-Generated Content

As you use the App, we store:

• Saved dictionary words, custom translations, and custom phrases
• Word lists you create or import
• Text you submit for blending (the "Blend" feature)
• Learning progress, game sessions, and daily practice data
• Story reading progress

Device and Technical Data

• Push notification tokens (used solely to deliver notifications you have opted into)
• Device platform (iOS or Android)

Analytics Data

We use PostHog to collect usage analytics, including screen views, session replays, and app lifecycle events. This helps us understand how the App is used and improve the experience. You may opt out of analytics collection through the App's settings.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the App's core features — account management, dictionary, text blending, games, stories, translations, and progress tracking.
• Legitimate interest (Art. 6(1)(f)): Sending service-related notifications (streak warnings, blend completion), maintaining security, and preventing abuse.
• Consent (Art. 6(1)(a)): Analytics and session replay (PostHog), marketing notifications (tips & updates), and daily reminder notifications. You can withdraw consent at any time through the App's Notification Settings.

4. How We Use Your Information

• Provide and personalize the service: Deliver language learning features including dictionary, text blending, games, and stories tailored to your language pair.
• Process content: Send text you provide to translation and AI services to deliver blended reading, translations, and example sentences.
• Track learning progress: Maintain your spaced repetition schedule, game history, streaks, and daily goals.
• Send notifications: Deliver daily reminders, streak warnings, and service-related messages when you have opted in.
• Improve the App: Analyze aggregated usage patterns to fix bugs, improve performance, and develop new features.

5. Third-Party Services

We use the following third-party services to operate the App. Each service receives only the data necessary for its function and operates under a data processing agreement where applicable:

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. Data is shared with the services listed above solely to provide the App's functionality.

6. Data Storage and Retention

• Cloud storage: Your account and learning data is stored in Google Cloud Firestore and retained for as long as your account is active.
• On-device caches: Translation and sentence caches are stored locally on your device with a 7-day expiration. All on-device caches are cleared when you log out.
• Account deletion: You may delete your account directly within the App through Account Settings, or by contacting us at support@lingoblend.app. Upon deletion, all associated data will be permanently removed from our servers within 30 days.

7. Data Security

We take reasonable measures to protect your data:

• All API keys and secrets are stored server-side in Firebase Secret Manager
• All data in transit is encrypted via HTTPS
• Access to user data is controlled by Firebase Authentication and Firestore security rules that restrict access to authenticated account owners only
• Passwords are hashed by Firebase Authentication and never stored in plain text

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights and Choices

All Users

• Access and correction: You can view and update your personal details in the App's Account settings.
• Account and data deletion: You can delete your account directly within the App through Account Settings. All associated data will be permanently removed within 30 days. You may also contact us at support@lingoblend.app.
• Notifications: You can opt out of push notifications at any time through the App's Notification Settings or your device settings.
• Data export: You may request a copy of your data in a machine-readable format by contacting us.

Additional Rights for EEA Residents (GDPR)

If you are located in the European Economic Area, you also have the right to:

• Restrict processing: Request that we limit how we process your data in certain circumstances.
• Object to processing: Object to processing based on legitimate interest, including analytics and profiling.
• Withdraw consent: Where processing is based on consent (e.g., analytics, marketing notifications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint: You have the right to lodge a complaint with your local data protection authority.

Additional Rights for California Residents (CCPA)

If you are a California resident, you have the following additional rights:

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale: We do not sell your personal information.
• Non-discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, service quality, or access to features as a result of exercising your rights.

To exercise any of these rights, contact us at support@lingoblend.app. We will respond to verifiable requests within 30 days.

9. Children's Privacy

LingoBlend is not directed at children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@lingoblend.app and we will promptly delete such information.

10. International Data Transfers

Your data may be processed in different regions depending on the services involved:

• United States: Google Cloud (Firebase, Firestore, Cloud Vision, Gemini), Anthropic (Claude), PostHog, Expo, Resend
• European Union: LibreTranslate (self-hosted in Helsinki, Finland)
• Other regions: Microsoft Azure (Translator) may process data in the region closest to you

Where data is transferred outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, and the data processing terms provided by our third-party service providers (such as Google's and Microsoft's data processing agreements).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App or sending you a notification. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Nikola Artukov
support@lingoblend.app