Privacy Policy

1. Introduction

LinguaMama ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our language acquisition platform and services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account (email address, password, name)
• Set up your profile and preferences (target language, proficiency level)
• Contact us for support or inquiries
• Subscribe to our newsletter or marketing communications
• Participate in surveys, contests, or promotions
• Provide payment information (processed securely through Stripe)

2.2 Automatically Collected Information

When you use our Services, we automatically collect certain information, including:

• Usage Data: Video viewing history, watch time, completion rates, replay counts, scene interactions, playback position, and learning progress
• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Session Data: Session start/end times, navigation paths, feature usage patterns
• Performance Data: Page load times, error logs, diagnostic information
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance user experience and analyze service usage

2.3 OAuth and Third-Party Authentication

If you choose to sign in using a third-party service (such as Google OAuth), we collect:

• Your name and email address from the third-party provider
• Profile information you've made publicly available
• Any other information you authorize the third-party provider to share with us

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide, maintain, and improve our language learning platform
• Personalization: Customize content, recommendations, and learning paths based on your proficiency level and preferences
• Progress Tracking: Monitor your learning progress, viewing history, and completion status
• Account Management: Create and manage your account, authenticate your identity, and process payments
• Communication: Send service-related announcements, updates, security alerts, and support messages
• Marketing: Send promotional materials, newsletters, and special offers (you can opt-out at any time)
• Analytics: Analyze usage patterns, measure effectiveness, and improve our Services
• Research & Development: Develop new features, improve existing features, and conduct research on language acquisition
• Security: Detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: Comply with legal obligations, enforce our terms, and protect our rights

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services:

• Supabase: Database, authentication, and storage services
• Stripe: Payment processing (we do not store your full credit card information)
• Cloudflare: Content delivery, security, and performance optimization
• OpenRouter/AI Providers: Content generation and analysis (no personal user data shared)
• Analytics Providers: Usage analytics and performance monitoring

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.4 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our Services
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes. Some information may persist in backup systems for up to 90 days.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal exceptions)
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent (without affecting prior processing)
• Opt-Out of Marketing: Unsubscribe from marketing emails using the link in our emails

To exercise these rights, please contact us at privacy@linguamama.ai. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze how you use our Services
• Measure the effectiveness of our marketing campaigns
• Provide personalized content and recommendations

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure cloud infrastructure with industry-leading providers
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

10. Children's Privacy

Our Services are not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information as soon as possible. If you believe we have collected information from a child, please contact us at privacy@linguamama.ai.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@linguamama.ai or call us at the number provided on our website.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

• The right to access, correct, or delete your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent
• The right to lodge a complaint with your local data protection authority

Our legal basis for processing your personal information includes:

• Contract: Performance of our contract with you (providing Services)
• Legitimate Interests: Improving our Services, security, and fraud prevention
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legal Obligation: Compliance with legal requirements

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new effective date
• Sending an email notification to your registered email address
• Displaying a prominent notice on our Services

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: