Privacy Policy

1. What Information Do We Collect?

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user, including AI-powered language learning features.
• To respond to user inquiries and offer support to users.
• To fulfill and manage your orders and subscriptions.
• To request feedback and improve the Services.
• To send you marketing and promotional communications (where permitted by law).
• To protect our Services from fraud, abuse, and security threats.
• To identify usage trends and improve user experience.
• To comply with our legal obligations.

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you. We may rely on the following legal bases:

• Consent: You can withdraw your consent at any time.
• Performance of a Contract: To fulfill our contractual obligations to you.
• Legitimate Interests: For our business interests that do not override your rights.
• Legal Obligations: To comply with the law.
• Vital Interests: To protect your or others' vital interests.

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section.

We do not sell your personal information. We share information with service providers that help us run the Service, including:

• Supabase — authentication, database, and related infrastructure;
• Google — sign-in and cloud services used for speech synthesis or image generation;
• Stripe — payments and subscription billing;
• PostHog — product analytics;
• AI model providers (e.g. DeepSeek) — powering language learning features such as chat and journey generation;
• Professional advisers, regulators, or others when required by law or to protect rights and safety.

Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale, financing, or acquisition of all or a portion of our business.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to keep you signed in, remember preferences, measure performance, and prevent fraud. You can control cookies through your browser settings; disabling cookies may limit some features of the Services.

6. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed by us and our third-party service providers in the United States and other countries. Those countries may have different data protection laws than your country of residence.

7. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. You may request deletion of your account data as described below.

8. Jurisdiction-Specific Provisions

9. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission over the Internet or method of electronic storage is 100% secure; we cannot guarantee absolute security.

10. What Are Your Privacy Rights?

In Short: In some regions, such as the EEA, UK, and Canada, you have rights that allow you greater access to and control over your personal information.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to you, contact us using the details in the Contact section below. We may need to verify your identity before fulfilling your request.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us at cameron@lingoisland.com.

Account Information: You may at any time review or change the information in your account by logging into your account settings. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. Do California Residents Have Specific Privacy Rights?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at cameron@lingoisland.com or visit our Contact page.

15. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email cameron@lingoisland.com with your request. We will respond to your request within 30 days.