Privacy Policy

• Account. If you sign in with Apple or Google: an account ID, the identifier the provider assigns to you and the email it shares with us (with Apple it may be a private relay address). Optionally a name and a profile picture.
• Learning data stored in your account. Learning and native languages, level and goals you choose, videos you watched with watch time, words and phrases you saved together with the sentence from the video and their review schedule, practice results, streaks and settings. This is what lets your progress sync between devices.
• Requests to Lingo, the AI tutor. When you ask Lingo to translate or explain something, the subtitle text and your question are sent through our server to an AI provider to get the answer. We do not store the text of these requests on our servers. We keep only technical records: time, type of request, model used, response time and token count, to control costs and limits.
• Voice. In speaking practice your voice is recognized by the speech recognition of your device: Apple’s on iPhone, iPad and Mac, and the speech service of your Android device (usually Google’s), which may process audio under its own privacy policy. We do not upload your voice to our servers.
• Answers from onboarding. For example, why you learn a language and what feels hardest. We use them to personalize the app and, without your name or email, in product analytics.
• Subscription data. Plan, status, renewal dates and transaction IDs. Our subscription provider also receives your account email and name to find your purchase when you contact support. For website purchases, our reseller shares your email, country and order details with us. We never receive full card numbers.
• Device and usage data. Device model, OS and app version, language and region, a push notification token if you allow notifications, in-app events such as screens opened and features used, and crash reports.
• Attribution data (iOS only). Which ad campaign an install came from (including Apple Search Ads), the app’s vendor identifier and attribution IDs of our measurement partners. The device advertising identifier (IDFA) is collected only if you allow tracking in the iOS prompt. The Android app does not use advertising identifiers or attribution partners.
• Feedback and support. Messages and attachments you send from the app or by email, and your contact email if you give it.
• Website. Pages visited, referrer, device and browser type, approximate location.

We do not intentionally collect sensitive data such as health, religion or precise location.

• Providing PlayLingo — accounts, syncing progress between devices, subtitles, translations, AI explanations, practice and Pro access. Legal basis: performance of our contract with you.
• Payments and subscriptions — processing purchases, renewals, refunds and restoring Pro. Legal basis: contract, and legal obligations such as tax and accounting.
• Improving the product — analytics, experiments, fixing crashes. Legal basis: our legitimate interest in a reliable and better app.
• Measuring advertising — understanding which campaigns bring users. Legal basis: your consent where required, such as the iOS tracking prompt, otherwise our legitimate interest.
• Communication — answering support requests and sending service messages, such as a reminder that a trial is ending. Legal basis: contract and legitimate interest.
• Security and legal compliance — preventing fraud and abuse, meeting legal requirements. Legal basis: legitimate interest and legal obligation.

We do not sell your personal data and we do not use your learning content to train AI models.

We share data only with providers that help us run PlayLingo. They process it on our behalf or, where they act independently (such as Apple and YouTube), under their own privacy policies.

• Infrastructure and hosting. Cloud providers that host our backend, database, file storage and website.
• Subscriptions and payments. Apple for App Store purchases, Google for Google Play purchases, our reseller and Merchant of Record for website purchases, and a subscription management service that keeps your Pro status in sync.
• AI language models. OpenAI and DeepSeek generate the translations and explanations that Lingo shows. Which one handles a request depends on your region: DeepSeek serves users in mainland China. They receive the subtitle text and your question, never your account details.
• Product analytics and crash reporting. Services that count in-app events and collect crash reports, linked to a random account ID rather than your name or email.
• Advertising measurement partners. Attribution services that tell us which ad campaigns bring installs and purchases. Used in the iOS app only.
• Push notifications. Apple Push Notification service on iOS and Firebase Cloud Messaging (Google) on Android deliver notifications; they receive a device token, not the content of your learning data.
• Sign-in providers. Apple and Google, when you choose to sign in with them, under their own privacy policies.
• Website analytics. Services that measure visits to playlingo.app.
• YouTube. Videos play in YouTube’s official embedded player, which collects data under Google’s own privacy policy.

All providers get only the data they need for their task and are bound by contracts and their API or data processing terms.

In the iOS app we use attribution tools from our advertising measurement partners to understand which campaigns work. The device advertising identifier is shared only if you tap “Allow” in the App Tracking Transparency prompt. You can change this at any time in Settings → Privacy & Security → Tracking. Without permission, these tools work with limited, non-identifying data such as Apple’s aggregated attribution. The Android app contains no advertising attribution tools.

App Store purchases are processed by Apple and Google Play purchases by Google. Website purchases are processed by our reseller, which acts as the Merchant of Record and collects your payment details under its own privacy notice (see our Terms of Use). We receive only what is needed to give you Pro and support you: email, country, plan, amount, dates and order identifiers.

playlingo.app uses analytics to understand which pages are useful and which ads bring visitors. One of our analytics services (Google Analytics) sets cookies; the others work without cookies. You can block or delete cookies in your browser settings at any time. Pages that play videos load the YouTube player, which may set its own cookies.

Some providers store or process data outside Serbia and the European Economic Area, for example in the United States. Where required, transfers are protected by adequacy decisions or standard contractual clauses.

• Account and learning data — while your account exists, and deleted within 30 days after you delete it.
• Text of AI requests — not stored on our servers; technical records of requests — up to 2 years.
• Analytics and crash data — up to 2 years, then deleted or anonymized.
• Purchase and invoice records — as long as tax and accounting law requires, typically up to 10 years.
• Support emails — up to 3 years after the conversation ends.

Depending on where you live, you have the right to:

• access your data and get a copy of it;
• correct inaccurate data;
• delete your data;
• restrict or object to processing, including processing based on legitimate interest;
• data portability;
• withdraw consent at any time, without affecting earlier processing.

To use these rights, email info@playlingo.app. We answer within 30 days. You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs) or to the data protection authority in your country.

You can delete your account in the app settings. This removes your account and learning data from our servers. Data stored only on your device is removed when you delete the app. You can also ask us to delete your data by email.

Deleting your account does not cancel an active subscription — cancel it in your Apple Account, in Google Play or on the website as described in our Refund Policy.

PlayLingo is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We use encryption in transit, access controls and reputable infrastructure providers to protect your data. No system is perfectly secure, but we work to keep your data safe and to act quickly if something goes wrong.

We will update this policy when PlayLingo changes. If a change is significant, we will tell you in the app or by email. The effective date at the top shows the current version. See also our Terms of Use.

The controller of your personal data is the operator of PlayLingo listed in “Legal information” below. For any privacy question or request, write to info@playlingo.app.

We process data in line with the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR).