Privacy Policy
Last updated: June 27, 2026
This policy explains what personal data Lingomundo (operated by Greenglow Software LLC, doing business as Lingomundo, the data controller) collects, why, and what rights you have. Contact: lingomundo@proton.me.
1. Data we collect
- Account data — email address, password hash (or your Google account link if you sign in with Google), terms-acceptance timestamps.
- Content you create — prompts, phrase drills and their edits, generated audio, and settings such as language preferences.
- Connected AI clients — when you connect an assistant (e.g. Claude or ChatGPT) via OAuth, we store the client name, granted scopes, and token lifetimes so you can review and revoke access.
- Technical data — session cookies, CSRF cookies, server logs (IP address, user agent, timestamps) kept for security and debugging, and first-party analytics events configured with IP anonymization and without analytics cookies, user IDs, account identifiers, prompts, drill text, generated content, or raw dynamic route IDs.
- Generation metadata — which model produced a drill, token counts, and estimated cost, used for quality and abuse monitoring.
We do not sell personal data and we do not use third-party advertising or analytics trackers.
2. How we use your data
- To provide the Service: generating drills and audio from your prompts and serving them back to you.
- To enforce fair-use limits and prevent abuse.
- For first-party, privacy-preserving analytics: understanding aggregate traffic, page usage, reliability, and navigation problems. Analytics is configured without analytics cookies, without user IDs, and with IP anonymization; it is not used for advertising.
- For quality assurance: our team may review prompts and generated drills (including content created through connected AI assistants) to debug problems and improve generation quality. Don’t submit anything you wouldn’t want a human to see.
- To send transactional email (verification, password reset, material changes to the Service).
- Legal bases under the GDPR: performance of contract (Art. 6(1)(b)) for the Service itself; legitimate interest (Art. 6(1)(f)) for security, logging, and abuse prevention.
3. Processors we share data with
Your prompts and drill text are sent to AI models to generate phrases and audio. All production AI requests are routed through OpenRouter under a zero-data-retention configuration: OpenRouter and the upstream model providers it routes to are contractually configured not to retain your prompts or generated content beyond the time needed to serve the request, and not to use them to train models.
| Processor | Purpose | Data involved |
|---|---|---|
| OpenRouter | Text generation & text-to-speech routing (zero data retention) | Prompts, drill text |
| Google (Sign-in) | Optional OAuth login | Email, account identifier |
| Resend | Transactional email | Email address |
| DigitalOcean | App hosting, audio file storage (DigitalOcean Spaces) | All service data |
4. Cookies
We use only first-party cookies that are strictly necessary: a session cookie to keep you signed in and a CSRF cookie to protect forms. Analytics is configured without analytics cookies. No consent banner is required for these, and there are no marketing cookies.
5. Retention
- Account data and drills: kept until you delete them or your account.
- Server logs: kept for a short rolling window for security and debugging.
- Raw analytics visit/action data: kept for 30 days; aggregate non-user-level analytics reports may be kept for up to 12 months.
- Cached generated audio is content-addressed (keyed by text + voice). Audio for common phrases may persist in the cache after account deletion because it is not linked to you.
6. Your rights (GDPR & CCPA/CPRA)
- Access & portability — download a copy of your data from your profile page (JSON export).
- Erasure — delete your account from your profile page; this immediately and permanently deletes your account, drills, and connected-client tokens.
- Rectification — edit your drills in the app; change your email from your profile page.
- Objection & complaint — contact us at lingomundo@proton.me; EU/EEA residents may also complain to their supervisory authority. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor the rights to know, delete, and correct.
7. International transfers
Our servers and processors may be located outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by the processors above.
8. Changes to this policy
Material changes bump the published terms version, and you will be asked to review and accept again at next sign-in. See also our Terms of Service.