Privacy Policy
Effective date: 15 September 2026
This policy explains how personal data is handled when you use the PlayLingo app, visit playlingo.app or buy PlayLingo Pro. We collect what the product needs to work and to get better, and we don’t sell your personal data.
1. What we collect
- Account. If you sign in with Apple: an account ID, your Apple account identifier and the email Apple shares with us (it may be a private relay address). Optionally a name and a profile picture.
- Learning data stored in your account. Learning and native languages, level and goals you choose, videos you watched with watch time, words and phrases you saved together with the sentence from the video and their review schedule, practice results, streaks and settings. This is what lets your progress sync between devices.
- Requests to Lingo, the AI assistant. When you ask Lingo to translate or explain something, the subtitle text and your question are sent through our server to an AI provider to get the answer. We do not store the text of these requests on our servers. We keep only technical records: time, type of request, model used, response time and token count, to control costs and limits.
- Voice. In speaking practice your voice is recognized on your device by Apple’s speech recognition. We do not upload your voice to our servers.
- Answers from onboarding. For example, why you learn a language and what feels hardest. We use them to personalize the app and, without your name or email, in product analytics.
- Subscription data. Plan, status, renewal dates and transaction IDs. Our subscription provider also receives your account email and name to find your purchase when you contact support. For website purchases, our reseller shares your email, country and order details with us. We never receive full card numbers.
- Device and usage data. Device model, OS and app version, language and region, a push notification token if you allow notifications, in-app events such as screens opened and features used, and crash reports.
- Attribution data. Which ad campaign an install came from (including Apple Search Ads), the app’s vendor identifier and attribution IDs of our measurement partners. The device advertising identifier (IDFA) is collected only if you allow tracking in the iOS prompt.
- Feedback and support. Messages and attachments you send from the app or by email, and your contact email if you give it.
- Website. Pages visited, referrer, device and browser type, approximate location.
We do not intentionally collect sensitive data such as health, religion or precise location.
2. Why we use it and legal bases
- Providing PlayLingo — accounts, syncing progress between devices, subtitles, translations, AI explanations, practice and Pro access. Legal basis: performance of our contract with you.
- Payments and subscriptions — processing purchases, renewals, refunds and restoring Pro. Legal basis: contract, and legal obligations such as tax and accounting.
- Improving the product — analytics, experiments, fixing crashes. Legal basis: our legitimate interest in a reliable and better app.
- Measuring advertising — understanding which campaigns bring users. Legal basis: your consent where required, such as the iOS tracking prompt, otherwise our legitimate interest.
- Communication — answering support requests and sending service messages, such as a reminder that a trial is ending. Legal basis: contract and legitimate interest.
- Security and legal compliance — preventing fraud and abuse, meeting legal requirements. Legal basis: legitimate interest and legal obligation.
We do not sell your personal data and we do not use your learning content to train AI models.
3. Service providers
We share data only with providers that help us run PlayLingo. They process it on our behalf or, where they act independently (such as Apple and YouTube), under their own privacy policies.
- Infrastructure and hosting. Cloud providers that host our backend, database, file storage and website.
- Subscriptions and payments. Apple for App Store purchases, our reseller and Merchant of Record for website purchases, and a subscription management service that keeps your Pro status in sync.
- AI language models. OpenAI and DeepSeek generate translations, explanations and answers from Lingo. Which one handles a request depends on your region: DeepSeek serves users in mainland China. They receive the subtitle text and your question, never your account details.
- Product analytics and crash reporting. Services that count in-app events and collect crash reports, linked to a random account ID rather than your name or email.
- Advertising measurement partners. Attribution services that tell us which ad campaigns bring installs and purchases.
- Website analytics. Services that measure visits to playlingo.app.
- YouTube. Videos play in YouTube’s official embedded player, which collects data under Google’s own privacy policy.
All providers get only the data they need for their task and are bound by contracts and their API or data processing terms.
4. Advertising attribution and tracking
We use attribution tools from our advertising measurement partners to understand which campaigns work. On iOS, the device advertising identifier is shared only if you tap “Allow” in the App Tracking Transparency prompt. You can change this at any time in Settings → Privacy & Security → Tracking. Without permission, these tools work with limited, non-identifying data such as Apple’s aggregated attribution.
5. Payments
App Store purchases are processed by Apple. Website purchases are processed by our reseller, which acts as the Merchant of Record and collects your payment details under its own privacy notice (see our Terms of Use). We receive only what is needed to give you Pro and support you: email, country, plan, amount, dates and order identifiers.
6. Website analytics and cookies
playlingo.app uses analytics to understand which pages are useful and which ads bring visitors. One of our analytics services can set cookies; the others work without cookies. In the European Economic Area, the United Kingdom, Switzerland and Serbia these cookies are set only after you click “Accept” in the cookie banner. You can change your choice at any time with “Cookie settings” at the bottom of every page, or block cookies in your browser. Pages that play videos load the YouTube player, which may set its own cookies.
7. International transfers
Some providers store or process data outside Serbia and the European Economic Area, for example in the United States. Where required, transfers are protected by adequacy decisions or standard contractual clauses.
8. How long we keep data
- Account and learning data — while your account exists, and deleted within 30 days after you delete it.
- Text of AI requests — not stored on our servers; technical records of requests — up to 2 years.
- Analytics and crash data — up to 2 years, then deleted or anonymized.
- Purchase and invoice records — as long as tax and accounting law requires, typically up to 10 years.
- Support emails — up to 3 years after the conversation ends.
9. Your rights
Depending on where you live, you have the right to:
- access your data and get a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing, including processing based on legitimate interest;
- data portability;
- withdraw consent at any time, without affecting earlier processing.
To use these rights, email info@playlingo.app. We answer within 30 days. You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs) or to the data protection authority in your country.
10. Deleting your account and data
You can delete your account in the app settings. This removes your account and learning data from our servers. Data stored only on your device is removed when you delete the app. You can also ask us to delete your data by email.
Deleting your account does not cancel an active subscription — cancel it in your Apple Account or on the website as described in our Refund Policy.
11. Children
PlayLingo is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12. Security
We use encryption in transit, access controls and reputable infrastructure providers to protect your data. No system is perfectly secure, but we work to keep your data safe and to act quickly if something goes wrong.
13. Changes to this policy
We will update this policy when PlayLingo changes. If a change is significant, we will tell you in the app or by email. The effective date at the top shows the current version. See also our Terms of Use.
14. Who is responsible for your data
The controller of your personal data is the operator of PlayLingo listed in “Legal information” below. For any privacy question or request, write to info@playlingo.app.
We process data in line with the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR).