Privacy Policy

Last updated: 1 July 2026

Llenguapp is a language-learning app made by a small independent team based in Spain. We are in early access and moving toward general availability. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it. We have tried to write it in plain language. If anything is unclear, please email us at [email protected].

The short version: we use your Google account to sign you in, and we store your learning progress so it stays in sync across your devices. We do not sell your personal data, and we do not use third-party advertising trackers.

Who we are

Llenguapp is the data controller for the personal data described in this policy. We are based in Spain. Our website is llenguapp.com and the app runs at app.llenguapp.com. You can reach us any time at [email protected].

Information we collect and why

We keep the data we collect to a minimum. There are two main kinds.

Account information from Google Sign-In. We use Google Sign-In (through Firebase Authentication) as the only way to log in. When you sign in, Google shares the following with us so we can create and identify your account:

• your name,
• your email address,
• your profile photo URL,
• your Google account identifier.

We never receive your Google password. We use this information to sign you in, to recognise you when you return, and to contact you about your account when needed.

Your learning progress and preferences. To run the service and keep your progress in sync across your devices, we store:

• your lessons, vocabulary, and flashcards,
• your spaced-repetition review history (what you have practised and when it is next due),
• your streaks and daily goals,
• the language or languages you are learning,
• your native or interface language,
• your app settings and preferences (for example, light or dark theme).

When paid billing is active, we also process the information needed to manage your subscription (see "Payments and billing" below).

How we use your information

• To provide the app: sign you in, generate and deliver lessons, and save and sync your progress across devices.
• To personalise your learning, for example by scheduling reviews and tracking your streaks and goals.
• To generate lesson content and pronunciation audio (see "Who we share data with" for the services involved).
• To keep the service secure, reliable, and free from abuse.
• To respond to your questions and support requests.
• To manage your subscription and process payments, once paid billing is live.

Legal bases for processing

Under the GDPR we rely on the following legal bases.

• Performance of a contract. We process your account information and learning progress to deliver the service you signed up for, and to manage any subscription you take out.
• Legitimate interests. We process some data to keep the service secure, to prevent abuse, to fix problems, and to run and improve Llenguapp as a small business. We only rely on this where our interests are not overridden by your rights.
• Consent. Where we ask for your consent (for example, for any optional cookies or communications that require it), you can withdraw that consent at any time.
• Legal obligation. We may process limited data where the law requires it, for example to keep records related to payments.

Who we share data with

We do not sell your personal data, and we do not share it with advertisers. We do rely on a small number of trusted service providers (processors) to run the app. They only process data on our instructions and for the purposes below.

• Google. Firebase Authentication signs you in. Other Google Cloud services power parts of the app, including the Gemini API, which generates lesson content, and Cloud Text-to-Speech, which synthesises pronunciation audio.
• Amazon Web Services. Amazon Polly provides text-to-speech for some voices (for example, Catalan, Welsh, and Valencian).
• Cloudflare. Provides our content delivery network (CDN), DNS, and R2 object storage, which holds encrypted backups of our database.
• PostHog. Provides privacy-friendly product analytics so we can understand how the app is used and improve it. We use PostHog's EU cloud, first-party storage only, and no third-party advertising trackers. We do not send PostHog your name or lesson content.
• Our hosting provider. The app runs on a virtual private server located in Paris, France (in the EU).
• Stripe. Handles payment processing. This applies only once paid billing launches. Your card details are handled by Stripe and are never stored by Llenguapp.

We may also disclose data if we are required to by law, or to protect the rights, safety, or property of Llenguapp, our users, or others.

International transfers

Your data is stored in the EU (on our server in Paris), with encrypted backups on Cloudflare R2. Some of the providers listed above are based outside the European Economic Area, or may process data outside it. Where that happens, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data keeps a similar level of protection.

How long we keep your data

We keep your account information and learning progress for as long as your account is active, so your progress is there when you come back. If you ask us to delete your account, we will delete your personal data from our active systems, and it will be removed from our backups as those backups are rotated. We may keep limited records for longer where we need to, for example to meet legal or accounting obligations related to payments.

Security

We take reasonable steps to protect your data. Traffic to the app is encrypted in transit, database backups are stored encrypted on Cloudflare R2, and access to systems that hold personal data is limited to the people who need it to run the service. As a small team in early access, we cannot guarantee perfect security, and no method of transmission or storage is completely secure, but we work to protect your data and to keep improving our practices. If a data breach affects your rights, we will notify you and the relevant authority as required by law.

Cookies and local storage

We use a small amount of browser storage to make the app work, not to track you across the web. Specifically:

• Firebase authentication cookies keep you signed in.
• Browser local storage remembers preferences such as your light or dark theme.
• Our analytics (PostHog) uses first-party browser storage to recognise your device across visits and to link your activity on this site with the app. This is not shared with advertisers.

We do not use third-party advertising trackers. Our analytics rely on our legitimate interest in understanding and improving the product, and are configured to be privacy-friendly (EU hosting, first-party storage, no cross-site ad tracking).

Payments and billing

This section describes how billing works when it is active. Billing is not fully live yet. Llenguapp starts with a 14-day free trial, and no card is required to begin. After the trial, a subscription is $12 per month or $90 per year, with all languages included. Subscriptions renew automatically until you cancel, and you can cancel at any time. When you subscribe, payments are processed by Stripe. Your card details are handled by Stripe, and Llenguapp never stores them.

Your rights

If you are in the EU or Spain, the GDPR gives you the following rights over your personal data:

• access the data we hold about you,
• correct data that is wrong or incomplete,
• export your data (data portability),
• delete your data,
• object to, or ask us to restrict, certain processing,
• withdraw consent where we rely on it, without affecting processing that already took place.

To exercise any of these rights, or to delete your account, email us at [email protected]. We will respond within the time limits the law sets. If you are not happy with how we handle your data, you have the right to complain to your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Children

Llenguapp is not directed to children under 16, and you should not use it if you are under 16. If you believe a child under 16 has given us personal data, please contact us and we will delete it.

Changes to this policy

As Llenguapp grows and moves toward general availability, we may update this policy. When we make a meaningful change, we will update the date at the top of this page and, where appropriate, let you know in the app or by email. Please check back from time to time.

Contact

Llenguapp is the data controller, based in Spain. For any question about this policy or your data, email us at [email protected]. We are a small team, and we read every message.