Privacy Policy
Last Updated: July 15, 2025
1. Introduction
Welcome to LingoVerse! This Privacy Policy (the "Policy") explains what information we, a sole proprietorship registered under the laws of Ukraine ("LingoVerse," "we," "us"), collect, how we use it, and with whom we share it when you use our website and related services (collectively, the "Service").
By using our Service, you agree to the terms of this Policy. If you do not agree with it, please discontinue using the Service.
This Privacy Policy is an integral part of our Terms of Service.
2. What Information We Collect
We adhere to the principle of data minimization and collect only the information necessary to provide, protect, and improve the Service. Here’s what this includes:
2.1. Information You Provide to Us Directly
- Account Creation Data (via Clerk): When you register, we receive your email address and name. If you use social sign-in (e.g., Google), we may also receive your profile picture. We do not have access to your password, as it is processed and stored in an encrypted form by Clerk.
- User Content: We store and process any content you voluntarily create, upload, or enter into the Service. This includes, but is not limited to: words you are learning, translations you create, usage examples, and study cards.
2.2. Information We Receive from Third Parties
- Payment Information (via Paddle): If you make a purchase, our payment partner Paddle collects the information necessary to process the payment. This may include your name, country, postal code, and transaction history. Important: we never receive or store your full credit card details.
2.3. Information Collected Automatically
When you use the Service, we and our partners automatically collect certain information for analytics and security purposes:
- Usage Data (via PostHog): We record how you interact with the Service: which features you use, which pages you visit, which buttons you click, and how much time you spend in the application. This helps us understand what you like and improve the product.
- Technical and Device Information: We collect technical data such as your IP address, operating system type and version, device model, browser type and version, and language preferences.
- Security Data (via Arcjet and Cloudflare): To protect the Service from bots, spam, and DDoS attacks, we use systems that may analyze technical data, including IP address and request characteristics, to identify suspicious activity.
3. How We Use Your Information
We use the collected information for the following purposes:
3.1. To Provide and Support the Service
- Creating and Managing Your Account: To allow you to securely log in, manage your profile, and handle your subscription.
- Processing Payments: To securely process your purchases and subscriptions through our partner, Paddle.
- Personalizing Your Experience: To tailor learning materials and features to your needs, for example, by tracking your progress in learning words.
- Ensuring Functionality: For the proper operation of all Service components, including data synchronization between your devices.
3.2. For Research, Analytics, and Product Improvement
- We analyze anonymized and aggregated usage data (via PostHog) to understand which features are most popular, identify issues, test new ideas, and generally make LingoVerse more convenient and effective.
3.3. To Train Artificial Intelligence Models
- We do not use your personal information (name, email) to train AI models.
- However, we may use the user content you create (e.g., words and translations) in a strictly anonymized and aggregated form to train and improve our algorithms (provided by Google AI). This allows us to enhance the quality and accuracy of AI-based features for the entire community.
3.4. For Security and Fraud Prevention
- We use technical data (including IP addresses) to monitor and protect our Service from malicious activity, spam, DDoS attacks, and other security threats (with the help of Arcjet and Cloudflare).
3.5. To Communicate with You
- Service Messages: We may send you important notifications related to your account, subscription, or changes to the Terms or this Policy.
- Marketing Messages: With your consent, we may inform you about new features, special offers, and LingoVerse news. You can always opt out of receiving such messages by clicking the "Unsubscribe" link in the email.
3.6. To Comply with Legal Obligations
- We may use and disclose your information if it is necessary to comply with legislation, enforce court orders, or respond to lawful requests from government authorities.
4. Who We Share Your Information With
We do not sell your personal information. We only share it with a limited circle of trusted partners (sub-processors) who help us provide the Service:
5. Your Rights and Choices
5.1. Your Rights under GDPR:
If you are in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request the deletion of your account and data.
- Right to Restrict and Object to Processing.
- Right to Data Portability.
To exercise these rights, please contact us at the address provided in the "Contact Information" section.
5.2. Marketing Communications:
You can opt out of receiving our promotional emails by clicking the "Unsubscribe" link in any of them.
6. Cookies and Similar Technologies
Like most online services, we use cookies and similar technologies to operate and improve our Service.
6.1. What Are Cookies?
Cookies are small text files that are stored on your device (computer or mobile phone) when you visit websites. They help us recognize you and remember your preferences.
6.2. What Types of Cookies Do We Use?
We categorize the cookies we use as follows:
-
Strictly Necessary Cookies: These files are essential for the basic functions of the Service. Without them, you cannot log into your account or make a purchase. They are used for:
- Authentication and session management (Clerk).
- Security and fraud protection (Cloudflare, Arcjet).
- Payment processing (Paddle).
-
Functional Cookies: These files are used to remember your settings and preferences (e.g., chosen language or theme) to make your experience more convenient and personalized.
-
Analytical Cookies: These files help us understand how you use our Service. They collect anonymized information about your visits and interactions with the interface. This information helps us improve the product and make informed decisions about its development. Our primary tool for this is PostHog.
-
Marketing Cookies: We may use data obtained from analytical cookies to show you more relevant information about our features and special offers within the Service.
We do not use third-party advertising cookies to track you and show you ads on other websites.
6.3. How to Manage Cookies?
You can manage cookies through your web browser settings. You can delete existing cookies or configure your browser to block their installation. However, please note that disabling strictly necessary cookies will prevent you from using the main features of the Service, such as logging into your account.
7. Data Security and Storage
We take the security of your information seriously and use a comprehensive approach to protect it.
7.1. Security Measures
- Encryption: All data transmitted between your device and our Service is protected using encryption (HTTPS/TLS). Data stored with our partners is also encrypted at rest.
- Trusted Partners: We do not store critical data on our own servers. Instead, we entrust its storage and processing to trusted partners who specialize in security and comply with high industry standards.
- Access Minimization: We adhere to the principle of least privilege, granting access to data only to those systems and employees who need it to perform their job duties.
7.2. Where Your Data Is Stored
Your information is distributed among our technology partners depending on its purpose:
- Account Information (Clerk): Authentication data (name, email, hashed passwords) is securely stored in our partner Clerk's infrastructure.
- User Content and Application Data (Xata, Upstash): Your words, translations, progress, and other data you create in the application are stored with our database hosting partners, Xata and Upstash.
- Infrastructure and Content Delivery (Cloudflare): We use Cloudflare's infrastructure for our backend, website hosting, as well as for security and caching.
- Payment Information (Paddle): Transaction data is processed and stored in the secure infrastructure of our payment partner, Paddle. We do not have direct access to your full credit card details.
- Analytics (PostHog): Anonymized product usage data is stored in PostHog to improve our service.
7.3. Data Retention Periods
We retain your personal information as long as you have an active account with LingoVerse. You can request the deletion of your account and associated data at any time. After deletion, we may retain some anonymized information for analytics, as well as data necessary to comply with legal obligations (e.g., transaction information).
8. International Data Transfers
Your information may be processed and stored on servers located outside your country (e.g., in the US and EU countries). We and our partners ensure an adequate level of data protection for such transfers.
9. Children
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children.
10. "Do Not Track" (DNT) Signals
Some web browsers may transmit "Do Not Track" signals. There is currently no industry-wide standard for handling these signals, so our Service does not currently respond to them.
11. Changes to the Policy
We may update this Policy. All changes take effect from the moment they are published on this page. We recommend reviewing it regularly.
12. Contact Information
If you have any questions about this Policy or wish to exercise your data rights, please contact us:
Data Controller: A sole proprietorship registered under the laws of Ukraine.
Email for privacy inquiries: legal@lingoverse.net
