Privacy Policy

1. Who is responsible for your information?

The Langlen operator named above is responsible for personal information processed to run this service. Contact support@langlen.com for privacy questions and requests. This policy applies to people using Langlen worldwide; particular rights depend on the law that applies to you.

2. Information you provide

Account and preferences: your name, email address, password in hashed form, language choices, starting and target levels, reason for learning, age group and daily learning goal. Required fields are marked when we ask for them. Without required details, we may not be able to create an account or provide the requested feature.

Learning activity: lessons completed, answers, practice attempts, scores, progress, daily activity and AI conversation messages. When you use voice features, your recording and the resulting transcript are processed to recognise speech and provide replies or feedback.

Enquiries: information sent in the contact or business form, such as your name, email, organisation, team size, topic, message and permission to respond. Subscription records may include your plan, payment status and transaction references. Where a payment provider handles checkout, it receives payment details under its own notice.

3. Technical information, cookies and external assets

Operating the website and APIs can produce IP addresses, browser or device information, request times, error records and security logs. Form protection uses short-lived keys derived from a client IP to limit repeated submissions; those keys do not contain the raw IP address. Server access logs may still contain IP addresses.

Essential cookies and local device storage support sessions, security, sign-in and preferences. Blocking them may prevent some features from working. The website loads fonts from Google Fonts and learning media may load from Cloudinary or other content hosts; those providers receive connection details such as your IP address when your browser requests an asset. Additional non-essential tracking would need the information and consent required by law before activation.

4. Why we use information and the legal bases

To provide the service or respond before a contract: we use account details, preferences, learning interactions and subscription information to deliver the features you request, personalise lessons and answer enquiries. For people covered by the GDPR, the basis is performance of a contract or pre-contract steps under Article 6(1)(b).

For legitimate interests: limited technical and usage information helps us protect accounts, prevent abuse, diagnose errors and improve reliability. We balance these interests against your rights (Article 6(1)(f) GDPR). You can object to processing based on legitimate interests. We also process information needed to meet legal duties, such as accounting or lawful requests (Article 6(1)(c)).

For consent-based features: where required, optional notifications, marketing or non-essential technologies use your consent (Article 6(1)(a) GDPR). You may withdraw consent for future processing without affecting earlier lawful processing. Device permission alone does not replace any other consent required by law.

5. AI conversations, recordings and generated speech

AI chat, translations, suggested replies and feedback send the text needed for that task, relevant conversation context and learning settings to the configured AI provider. Speech recognition sends your recording to a speech provider; text-to-speech sends text and voice settings to a speech service. Depending on the configured feature, these services may include OpenAI-compatible providers such as Groq or OpenAI, and Microsoft speech services.

Conversation text and learning results can be saved in your account. For speech recognition, your uploaded recording is processed to obtain a transcript rather than kept as a permanent recording in your account. Generated speech is different: audio created from text can be cached to avoid repeated generation, and public course audio may be hosted separately from private generated audio.

Providers may process or retain request data under their applicable service terms, security rules and configured settings. Contact us for the current providers and relevant transfer information before sharing sensitive material. Do not enter passwords, payment details, medical information or other sensitive personal details into a learning conversation. This policy does not authorise publication of private conversations or unrelated advertising use of their content.

You can turn off private generated-audio caching in Profile → Privacy preferences. Turning it off clears indexed private server copies and cached speech audio on the device you are using; shared course audio remains separate. Clearing saved AI chats deletes the saved conversation history, but does not request erasure of an independent provider’s records. Optional notification choices are saved in your account; reminder delivery remains planned until the delivery service is introduced.

6. Planned learning reminders and daily summaries

We plan to offer optional reminders and daily learning summaries, including a reminder when you have not met a chosen daily learning-time target. When available and enabled, these may use your goal, recorded activity, language preference, chosen reminder time and time zone. Push delivery may need a device token; email reminders need your email address.

The reminder service is not currently described as an active feature. Before introduction, we will explain the delivery providers, ask for permission where required and provide reminder controls. You will be able to disable optional reminders through those controls, device settings or an email unsubscribe link. We will distinguish reminders from promotional messages and necessary security, account or billing notices. Notifications may appear on a device lock screen, so consider your device privacy settings.

7. Who may receive information?

Information needed to run Langlen may be handled by hosting and database services, AI and speech providers, media and font hosts, email delivery services and, when used, payment or app-store providers. Authorised staff may access the information needed to answer your request, investigate an issue or maintain the service. We do not sell personal information.

We may disclose information where legally required, to protect rights or security, or in a business transfer subject to applicable safeguards and notices. Your personal learning conversations are not made public through the normal learning features. If an employer supplies access, any sharing with that employer must be explained in the relevant team arrangement; purchasing access alone does not give an employer unrestricted access to private chats.

8. International processing

You can use Langlen from different countries, and service providers may process information outside your country, including outside the EEA or UK. Data-protection rules can differ. Where an international transfer requires protection, it must rely on an applicable legal mechanism, such as an adequacy decision or standard contractual clauses with additional measures where needed. Contact support@langlen.com for information about the safeguards relevant to your data and how to obtain a copy.

9. How long information is kept

Account details, progress and saved conversations are kept for the purposes of providing and supporting your account. Contact and business enquiries are kept to respond, follow up and maintain necessary records. Retention depends on the type of information, whether your account or request remains active, legal requirements and any unresolved dispute. Information should be deleted or anonymised when it is no longer needed for these purposes.

Saved account information and conversations do not currently have a fixed automatic expiry. You may request account or conversation deletion by email. Some records may need to remain for legal obligations, fraud prevention or legal claims; restricted backup copies may remain until the applicable backup cycle replaces them. Ask us for the retention criteria relevant to your request. Provider-side processing and retention may differ from Langlen’s own storage.

Profile settings offer self-service account deletion, clearing saved AI chats and clearing private generated audio. Account deletion removes the live account and its linked learning, chat, exam and preference records, plus contact and business enquiries matched to the current account email. An optional leaving reason is added only to a category total; no name, email, user reference, individual deletion time or free-text feedback is stored in those totals. Deletion from our live systems does not instantly erase data independently held by a payment or AI provider, legally required records or existing backups. Contact us about information outside the linked account records.

10. Security and your responsibilities

We use technical and organisational measures intended to protect personal information, including account authentication, password hashing, access controls and form-abuse protection. No online service can guarantee absolute security. Use a strong password, protect your device and contact us promptly if you suspect unauthorised access. Where a data incident requires notification, we will follow the applicable legal requirements.

11. Your privacy rights and requests

Depending on applicable law, you may request access, a copy, correction, deletion, restriction or portability of your information; object to processing based on legitimate interests; and withdraw consent. You may also have rights concerning direct marketing and certain automated decisions. Learning recommendations and practice scores support learning; they are not decisions about employment, credit or legal eligibility.

Write to support@langlen.com, preferably from your account email, and describe your request. We may need proportionate verification to protect your information. GDPR requests are normally answered within one month; if a lawful extension is necessary, we will explain it within that period. Other local deadlines and appeal rights apply where required. You can complain to your local data-protection authority without contacting us first.

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) ↗

12. Younger learners

Local rules may require a parent or guardian’s authorisation for a younger learner or parental consent for particular processing. An age-group selection is not proof of parental consent. If you believe a child has provided information without the permission required by law, contact us so we can investigate and take appropriate steps, including deletion where required.

13. Changes and contact

We update this Privacy Policy when our practices or legal requirements change. Material changes, new processing purposes or newly introduced reminder providers will be explained before they apply, and consent will be requested where required. The date above identifies this version. Contact the operator shown above or support@langlen.com with any questions.