Privacy Policy

Who We Are

LingoUnify is a language learning platform operated by OmniOrion AS, a company registered in Norway. This policy explains how we collect, use, and protect your data.

For questions about this policy, contact us at support@lingounify.com.

What Data We Collect

We collect the following information:

• Account information: Your email address, display name, and profile image (if you provide one or sign in with Google/Microsoft).
• Authentication data: Information from Google or Microsoft when you use social login (basic profile only - we do not access your Gmail, Drive, or other services).
• Learning data: Words you save, flashcards you create, study progress, and language preferences.
• Social features: If you add friends, they can see your display name, profile image, and language learning statistics. Email addresses are never shared with friends.
• Payment data: If you subscribe to a paid plan, payment processing is handled by Paddle (our Merchant of Record). We do not store your credit card details.
• Radio usage data: If you use the radio feature, we track basic usage metrics (such as daily caption seconds used) for quota management. We do not record, store, or log any audio you listen to.
• Uploaded content: If you upload documents (.txt, .epub) for language learning, the text content is stored in your account. Uploaded content is private and never shared with other users or made publicly accessible.
• Technical data: Basic server logs for security and debugging purposes.
• Analytics data: We use PostHog to collect anonymous usage data such as pages visited, buttons clicked, device type, country, and session recordings (replays of how you navigate the site). This helps us understand how the service is used and improve the experience. No personally identifiable information is tied to analytics data unless you are logged in.

How We Use Your Data

We use your data to:

• Provide the LingoUnify service: generate content, save your words, track your progress.
• Authenticate you securely via Google, Microsoft, or email/password.
• Enable social features like adding friends and viewing each other's learning stats.
• Process payments through our payment provider.
• Provide text-to-speech pronunciation of words and phrases.
• Provide live radio streaming and real-time captions for language listening practice.
• Respond to support requests.
• Improve the service based on how it is used (in aggregate, not individually).

Legal Basis (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your data based on:

• Contract: To provide the service you signed up for.
• Legitimate interests: For security, preventing abuse, and improving the service.
• Consent: Where required (e.g., optional features or communications).

Who We Share Data With

We use trusted third parties to run LingoUnify:

• Supabase: Authentication, database hosting, and file storage.
• OpenAI: AI content generation (text is sent to generate learning content). Processing is ephemeral - no user data is stored or used for model training.
• Microsoft Azure Speech Services: Text-to-speech for word pronunciation and real-time speech-to-text for radio captions. Audio and text are processed in real time and not stored at rest by Microsoft.
• Paddle: Payment processing for subscriptions (Merchant of Record).
• Hosting provider: Server infrastructure.
• PostHog: Product analytics, session recordings, and heatmaps to understand how the service is used and identify issues. Data is processed in the United States.

We do not sell your data to third parties. All AI and speech processing is ephemeral - we do not store, log, or retain any audio, transcriptions, or AI-generated content beyond what is needed to deliver the response to you in real time.

Google Sign-In

When you sign in with Google, we receive your basic profile information (email, name, profile picture) to create and manage your account. We do not request access to Gmail, Google Drive, Calendar, or any other Google services. Our use of Google data complies with the Google API Services User Data Policy.

International Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers.

Data Retention

We keep your data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we need to retain it for legal obligations or legitimate business purposes (e.g., fraud prevention, resolving disputes).

Server logs are retained for up to 90 days for security purposes.

Your Rights

You have the right to:

• Access: Request a copy of your data.
• Correction: Update inaccurate information.
• Deletion: Delete your account and associated data from your settings.
• Portability: Request your data in a portable format.
• Object: Object to certain processing activities.
• Withdraw consent: Where processing is based on consent.

To exercise these rights, email us at support@lingounify.com or use the account deletion feature in your settings.

If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

LingoUnify is not intended for children under 16. We do not knowingly collect data from children under this age. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the service. The "Last updated" date at the top shows when this policy was last revised.

Contact Us

Questions or concerns? Reach out to us:

Email: support@lingounify.com