1. Information Collection and Legal Basis

We collect the following types of information with corresponding legal basis:

Account Information: Email address, username, password (encrypted) - Legal Basis: Contract Performance
Usage Data: Learning progress, practice records, duration statistics - Legal Basis: Legitimate Interests (service improvement)
Technical Information: Device type, operating system, browser type, IP address - Legal Basis: Legitimate Interests (security and analytics)
Voice Data: Your voice recordings - Legal Basis: Explicit Consent

Our legitimate interests assessment has determined that data processing for service improvement and security does not override your fundamental rights and freedoms.

2. Information Use

We use the collected information for:

Providing and improving language learning services
Sending service notifications and updates
Analyzing and optimizing user experience
Fulfilling legal obligations and protecting rights

3. Data Retention

We retain your data only as long as necessary:

Account data: 5 years after account deletion or last activity
Usage analytics: 2 years for trend analysis
Technical logs: 90 days for security purposes

You can contact us at any time to request immediate deletion of all your data, but this usually also means we will delete your account.

4. Data Security

We implement comprehensive security measures including: TLS 1.3 encryption for data transmission, strict access controls and user authentication, database-level row security policies, API authentication and permission checking systems. Our data is stored on the Supabase platform, which provides enterprise-grade data encryption. While we strive to protect your information, please understand that no internet transmission is 100% secure.

5. International Data Transfers

Your data may be transferred and processed in countries other than your own:

We use Standard Contractual Clauses (SCCs) approved by the European Commission
We only transfer to countries with adequacy decisions where applicable
All transfers include appropriate safeguards to protect your data
You can request details about international transfers of your data

6. Data Sharing

We do not sell or rent your personal information. We only share information in the following circumstances:

With your explicit consent
To comply with legal requirements or respond to legal process
In the event of a merger, acquisition, or sale of assets
With trusted third-party service providers who help us provide services

7. Your Rights

You have the following rights regarding your personal information:

View and obtain a copy of your data
Correct inaccurate information
Delete your account and data
Object to certain data processing

Users in certain regions may have additional statutory rights. Please contact us for details or to exercise your rights.

8. Cookie Usage and Tracking Technologies

We use different types of cookies and tracking technologies:

Essential Cookies: Required for basic site functionality (no consent needed)
Analytics Cookies: Help us understand site usage (consent required)
Functional Cookies: Remember your preferences (consent required)
Marketing Cookies: Currently not used

You can manage cookie preferences through our cookie banner or browser settings. Essential cookies cannot be disabled.

We use cookies and similar technologies to improve user experience, remember your preferences, and analyze website usage.

View full Cookie Policy

9. Children's Privacy and Age Verification

Our service is not directed to children under 13. We require users to confirm they are at least 13 years old during registration.

Age verification required at sign-up
Parental consent required for users aged 13-16 in certain jurisdictions
Immediate deletion of data if we discover collection from children under 13
Parents can contact us to review or delete their child's information

Parents with concerns should contact our Data Protection Officer immediately.

10. Use of AI Technology

We use AI technology solely for providing core service functions:

AI-powered translation between languages
Automated speech-to-text conversion for voice input
We do not create user profiles or make automated decisions that affect your rights or access to services

These AI technologies only process your input in real-time to provide translation services. No data is used for profiling or automated decision-making.

11. Policy Updates

We may update this Privacy Policy from time to time. For significant changes, we will notify you via email or in-service notification. Continued use of the service constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Officer: support@linguamirror.com

LinguaMirror Inc.

Privacy Department

We aim to respond to all privacy requests within 30 days.