Privacy Policy
Version 2026-04-17
1. Who we are
The NoticiaLingo team is the data controller for your account information. Contact us at privacy@noticialingo.com with any questions.
2. What data we collect
- Account email and Google OAuth profile fields (where applicable).
- Lesson progress, exercise answers, streaks, and earned achievements.
- AI Teacher chat history (premium accounts only).
- Theme preferences and selected interests.
- Billing records for Premium: customer and subscription identifiers from our payment provider, plan status and entitlement history (card details stay with the payment provider).
- Push-notification device details, only if you turn notifications on.
- Email preferences, time zone and a record of which reminder emails were sent.
3. Why we collect it
To provide the learning service, personalise lessons for premium users, and improve content quality. We do not sell personal data.
4. Legal basis
We process account data under Article 6(1)(b) GDPR (contract). Optional streak reminders and come-back emails rely on Article 6(1)(a) (consent): they are off until you turn them on, and you can turn them off at any time in Settings or with the one-click unsubscribe link in every email.
5. Sub-processors
| Provider | Location | Purpose |
|---|---|---|
| Supabase | Being confirmed before launch | Database and sign-in |
| Vercel | Being confirmed before launch | Application hosting and scheduled jobs |
| OpenAI | Being confirmed before launch | Lesson generation and the AI Teacher |
| Stripe | Being confirmed before launch | Payments |
| Resend | Being confirmed before launch | Account and reminder email |
| Sentry | Being confirmed before launch | Error tracking |
| Upstash | Being confirmed before launch | Abuse protection (rate limits) |
| Being confirmed before launch | Sign in with Google, if you choose it | |
| Your browser's push service | Being confirmed before launch | Device notifications |
What each receives and the safeguards for transfers are on the subprocessors page.
6. Data retention
Successful account deletion removes your sign-in account, profile, lesson progress, friendships and conversations from the live app. It does not erase every record held by us or our service providers.
Billing records retain provider identifiers after their account link is removed. Admin audit records retain account identifiers, actions and recorded reasons. Email suppression records retain addresses to prevent further unwanted delivery.
We keep these records for set periods, then delete them or remove your account from them:
| Data | Kept for | Then |
|---|---|---|
| AI Teacher conversations | 90 days | Deleted |
| Record of reminder emails sent | 90 days | Deleted |
| Email delivery reports | 90 days | Deleted |
| Offline lesson completion claims | 30 days | Deleted |
| Devices that have received no notification | 180 days | Deleted |
| AI usage records | 90 days | Your account id removed; cost totals kept |
| Unanswered friend requests | 7 days | Deleted |
| Lessons you have not saved or opened | 30 days | Deleted |
Billing and entitlement records, the admin audit and email suppressions have no set period yet; that is being decided before launch. Deletion from provider backups is not yet confirmed, so this draft does not promise it.
7. Your rights
Under GDPR you can exercise rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and protection from automated decisions (Art. 22).
8. In-app self-service
From the Settings page you can download a JSON export of account, learning, consent and billing data, with a limited audit history, or delete your account as described in the retention section above.
The download is not a complete copy of every record. Some checkout, delivery, identity-provider and internal audit records need review to protect security and other people's information. You can request a reviewed copy.
9. Cookies
We use first-party authentication cookies only. We will update this policy before introducing any analytics or other cookies.
10. Children
NoticiaLingo is only available to people aged 18 or older. You must confirm this before using the app. This is a self-declaration, not independent age verification.
11. International transfers
Some sub-processors may process your data outside the UK. The safeguard for each transfer is shown on the subprocessors page; where it reads “Being confirmed before launch”, it has not yet been verified.
12. Changes to this policy
Material changes will be announced in-app and via email. Continued use after the effective date constitutes acceptance.
13. Contact
privacy@noticialingo.com