Privacy Policy

We collect the following types of information:

Account Information: When you create an account, we collect your email address and display name. If you sign in anonymously, we generate a unique anonymous identifier.

Language & Learning Preferences: Your home language, target languages, CEFR proficiency level, and reading interests that you set during onboarding or in settings.

Reading & Learning Data: Books and stories you read, reading progress, saved vocabulary in your phrase book, dictionary lookups, and reading session duration.

User-Uploaded Content: Any ebooks, articles, or text you upload to the Service for reading purposes.

Device & Usage Information: Device type, operating system, app version, crash logs, and general usage patterns to help us improve the Service.

Subscription Information: Purchase history and subscription status, processed through Apple App Store or Google Play Store.

We collect information in the following ways:

Directly from you: When you create an account, set preferences, save vocabulary, upload content, or contact our support team.

Automatically: When you use the Service, we automatically collect device information, usage analytics, and crash reports through Firebase Analytics and Crashlytics.

From third-party services: If you subscribe through Apple App Store or Google Play Store, we receive confirmation of your subscription status (but not your payment card details).

We use the information we collect to:

• Provide, operate, and maintain the Service
• Personalize your experience by generating AI stories at your CEFR level and in your chosen languages
• Sync your reading progress, phrase book, and preferences across your devices
• Process text-to-speech for stories and uploaded content
• Provide tap-to-translate functionality using offline dictionaries and online translation services
• Process and manage your subscription
• Send important service notifications (e.g., updates, security alerts)
• Analyze usage patterns to improve the Service and fix bugs
• Respond to your support requests and inquiries
• Comply with legal obligations

Polylingo uses artificial intelligence to enhance your learning experience:

AI Story Generation: When you request an AI-generated story, we send your selected language, CEFR level, topic, and genre preferences to our AI service provider (OpenAI) to generate content. We do not send any personally identifiable information to the AI provider.

Text-to-Speech: Story text is processed through text-to-speech services to generate audio. This processing occurs on-device or through cloud services depending on your platform.

Translation Services: Word and phrase translations primarily use offline dictionaries stored on your device. Some features may use online translation APIs, in which case only the text being translated is sent — no personal data is included.

We do not sell, trade, or rent your personal information to third parties. We may share data with the following service providers who assist us in operating the Service:

Firebase (Google): We use Firebase for authentication, cloud storage (Firestore), file storage, analytics, and crash reporting. Google's privacy policy applies to their processing of this data.

OpenAI: We use OpenAI's API for AI story generation. Only language preferences and content parameters are sent — no personal data.

RevenueCat: We use RevenueCat to manage in-app subscriptions and purchases. They process subscription-related data according to their privacy policy.

Apple / Google: In-app purchases are processed through the respective app stores. We do not have access to your payment card details.

We may also disclose your information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Polylingo, our users, or others.

Your data is stored securely using Firebase Cloud Firestore and Firebase Storage, hosted on Google Cloud infrastructure. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) for all data transferred between your device and our servers
• Encryption at rest for stored data
• Firebase Security Rules to ensure users can only access their own data
• Anonymous authentication to minimize the personal data we collect
• Regular security reviews of our infrastructure

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained until you delete your account
• Reading progress and phrase book: Retained until you delete your account or remove individual items
• Uploaded content: Retained until you delete the content or your account
• Usage analytics: Aggregated and anonymized data may be retained indefinitely for service improvement

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law.

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data. You can delete your account directly from the app settings, or by visiting our account deletion page, or by emailing privacy@polylingo.io.
Data Portability: Export your phrase book and reading data from the app.
Restriction: Request that we restrict processing of your data in certain circumstances.
Objection: Object to our processing of your data for certain purposes.

For EU/EEA residents (GDPR): You have the rights listed above and may lodge a complaint with your local data protection authority.
For California residents (CCPA): You have the right to know what personal data we collect, request deletion, and opt out of the sale of personal data. We do not sell personal data.

To exercise any of these rights, contact us at privacy@polylingo.io.

Polylingo is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal data from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@polylingo.io.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Firebase/Google, OpenAI) operate their servers. These countries may have different data protection laws than your jurisdiction. By using the Service, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy within the app or on our website with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@polylingo.io
Website: https://polylingo.io/privacy

We will respond to your inquiry within 30 days.