Privacy Policy

Who We Are

LingoUnify is a language learning platform operated by OmniOrion AS, a company registered in Norway. This policy explains how we collect, use, and protect your data.

For questions about this policy, contact us at support@lingounify.com.

What Data We Collect

We collect the following information:

• Account information: Your email address, display name, and profile image (if you provide one or sign in with Google/Microsoft).
• Authentication data: Information from Google or Microsoft when you use social login (basic profile only - we do not access your Gmail, Drive, or other services).
• Learning data: Words you save, flashcards you create, study progress, and language preferences.
• Browser extension data: When you use the browser extension, it can read page text locally to provide word tools. Word, phrase, and nearby context text is sent to LingoUnify only when you use extension tools such as translate, define, save, listen, or pronunciation. If you manually enable the saved-word overlay, the extension marks matching words on that page so it can show learning status locally. LingoUnify does not collect continuous browsing history through the extension.
• Social features: If you add friends, they can see your display name, profile image, and language learning statistics. Email addresses are never shared with friends.
• Payment data: If you subscribe to a paid plan, payment processing is handled by Paddle (our Merchant of Record). We do not store your credit card details.
• Radio usage data: If you use the radio feature, we track basic usage metrics for quota management. We do not record, store, or log any audio you listen to.
• Uploaded content: If you upload documents (.txt, .epub) for language learning, the text content is stored in your account. Uploaded content is private and never shared with other users or made publicly accessible.
• Browse video discovery: If you use embedded video discovery, we may temporarily cache YouTube preview metadata such as video title, channel name, thumbnail, video ID, and source links. We do not download, process, or store YouTube audio or captions.
• Technical data: Basic server logs for security and debugging purposes.
• Analytics and ad measurement data: With optional consent, we use PostHog to collect usage data such as pages visited, buttons clicked, device type, country, and session recordings, and we use the Google tag/Google Ads to measure ad clicks and subscription conversions. This helps us understand how the service is used and improve the experience.

How We Use Your Data

We use your data to:

• Provide the LingoUnify service: generate content, save your words, track your progress.
• Power the browser extension by highlighting saved words on pages you read and handling user-triggered extension tools such as translate, define, save, listen, and pronunciation.
• Authenticate you securely via Google, Microsoft, or email/password.
• Enable social features like adding friends and viewing each other's learning stats.
• Process payments through our payment provider.
• Provide text-to-speech pronunciation of words and phrases.
• Provide live radio streaming for language listening practice.
• Provide embedded YouTube video discovery for language immersion where available.
• Respond to support requests.
• Improve the service based on how it is used (in aggregate, not individually).
• Measure advertising campaign performance when you accept optional cookies.

Legal Basis (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your data based on:

• Contract: To provide the service you signed up for.
• Legitimate interests: For security, preventing abuse, and improving the service.
• Consent: Where required (e.g., optional features or communications).

Who We Share Data With

We use trusted third parties to run LingoUnify:

• Supabase: Authentication, database hosting, and file storage.
• OpenAI: AI content generation and user-triggered extension translation/definition tools (text is sent only when needed to generate learning content or answer the selected tool action). Processing is ephemeral - no user data is stored or used for model training.
• Microsoft Azure Speech Services: Text-to-speech for word pronunciation, including extension listen tools, and real-time speech-to-text for pronunciation scoring and pronunciation practice. Audio and text are processed in real time and not stored at rest by Microsoft.
• YouTube/Google: Embedded video discovery and playback. YouTube videos are played through the official embedded player, and YouTube/Google may process playback-related data under their own terms and privacy policy.
• Paddle: Payment processing for subscriptions (Merchant of Record).
• Hosting provider: Server infrastructure.
• PostHog: Product analytics, session recordings, and heatmaps to understand how the service is used and identify issues. Data is processed in the United States.
• Google Ads/Google tag: Ad measurement and conversion tracking after optional consent.

We do not sell your data to third parties. All AI and speech processing, including extension translation, definition, listening, and pronunciation tools, is ephemeral - we do not store, log, or retain any audio, transcriptions, or AI-generated content beyond what is needed to deliver the response to you in real time. LingoUnify uses and transfers information received through the LingoUnify browser extension in compliance with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Google Sign-In

When you sign in with Google, we receive your basic profile information (email, name, profile picture) to create and manage your account. We do not request access to Gmail, Google Drive, Calendar, or any other Google services. Our use of Google data complies with the Google API Services User Data Policy.

International Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers.

Data Retention

We keep your data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we need to retain it for legal obligations or legitimate business purposes (e.g., fraud prevention, resolving disputes).

Server logs are retained for up to 90 days for security purposes.

Your Rights

You have the right to:

• Access: Request a copy of your data.
• Correction: Update inaccurate information.
• Deletion: Delete your account and associated data from your settings.
• Portability: Request your data in a portable format.
• Object: Object to certain processing activities.
• Withdraw consent: Where processing is based on consent.

To exercise these rights, email us at support@lingounify.com or use the account deletion feature in your settings.

If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

LingoUnify is not intended for children under 16. We do not knowingly collect data from children under this age. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the service. The "Last updated" date at the top shows when this policy was last revised.

Contact Us

Questions or concerns? Reach out to us:

Email: support@lingounify.com