Privacy Policy

Version 2026-04-17

DRAFT: pending legal review. Use with care; final terms will be published before payments launch.

1. Who we are

The NoticiaLingo team is the data controller for your account information. Contact us at privacy@noticialingo.com with any questions.

2. What data we collect

  • Account email and Google OAuth profile fields (where applicable).
  • Lesson progress, exercise answers, streaks, and earned achievements.
  • AI Teacher chat history (premium accounts only).
  • Theme preferences and selected interests.
  • Billing records for Premium: customer and subscription identifiers from our payment provider, plan status and entitlement history (card details stay with the payment provider).
  • Push-notification device details, only if you turn notifications on.
  • Email preferences, time zone and a record of which reminder emails were sent.

3. Why we collect it

To provide the learning service, personalise lessons for premium users, and improve content quality. We do not sell personal data.

4. Legal basis

We process account data under Article 6(1)(b) GDPR (contract). Optional streak reminders and come-back emails rely on Article 6(1)(a) (consent): they are off until you turn them on, and you can turn them off at any time in Settings or with the one-click unsubscribe link in every email.

5. Sub-processors

ProviderLocationPurpose
SupabaseBeing confirmed before launchDatabase and sign-in
VercelBeing confirmed before launchApplication hosting and scheduled jobs
OpenAIBeing confirmed before launchLesson generation and the AI Teacher
StripeBeing confirmed before launchPayments
ResendBeing confirmed before launchAccount and reminder email
SentryBeing confirmed before launchError tracking
UpstashBeing confirmed before launchAbuse protection (rate limits)
GoogleBeing confirmed before launchSign in with Google, if you choose it
Your browser's push serviceBeing confirmed before launchDevice notifications

What each receives and the safeguards for transfers are on the subprocessors page.

6. Data retention

Successful account deletion removes your sign-in account, profile, lesson progress, friendships and conversations from the live app. It does not erase every record held by us or our service providers.

Billing records retain provider identifiers after their account link is removed. Admin audit records retain account identifiers, actions and recorded reasons. Email suppression records retain addresses to prevent further unwanted delivery.

We keep these records for set periods, then delete them or remove your account from them:

DataKept forThen
AI Teacher conversations90 daysDeleted
Record of reminder emails sent90 daysDeleted
Email delivery reports90 daysDeleted
Offline lesson completion claims30 daysDeleted
Devices that have received no notification180 daysDeleted
AI usage records90 daysYour account id removed; cost totals kept
Unanswered friend requests7 daysDeleted
Lessons you have not saved or opened30 daysDeleted

Billing and entitlement records, the admin audit and email suppressions have no set period yet; that is being decided before launch. Deletion from provider backups is not yet confirmed, so this draft does not promise it.

7. Your rights

Under GDPR you can exercise rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and protection from automated decisions (Art. 22).

8. In-app self-service

From the Settings page you can download a JSON export of account, learning, consent and billing data, with a limited audit history, or delete your account as described in the retention section above.

The download is not a complete copy of every record. Some checkout, delivery, identity-provider and internal audit records need review to protect security and other people's information. You can request a reviewed copy.

9. Cookies

We use first-party authentication cookies only. We will update this policy before introducing any analytics or other cookies.

10. Children

NoticiaLingo is only available to people aged 18 or older. You must confirm this before using the app. This is a self-declaration, not independent age verification.

11. International transfers

Some sub-processors may process your data outside the UK. The safeguard for each transfer is shown on the subprocessors page; where it reads “Being confirmed before launch”, it has not yet been verified.

12. Changes to this policy

Material changes will be announced in-app and via email. Continued use after the effective date constitutes acceptance.

13. Contact

privacy@noticialingo.com

Privacy Policy | NoticiaLingo