Privacy Policy

LinguaBite
Effective Date: March 5, 2026
Last Updated: September 8, 2026

LinguaBite Ltd ("we", "us", "our") operates the LinguaBite mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the App.

By using LinguaBite, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: When you create an account, we collect your email address and display name. On Android you may instead sign in with Google, in which case we receive your name and email from Google.
• Learning preferences: Your selected languages, daily goals, and theme settings.

1.2 Information Generated by Your Use

• Learning progress: Sentences completed, exercise results, mastery levels, spaced repetition data, streaks, and bookmarks.
• App usage data: Screens visited, features used, and session duration. This data is collected in aggregate form to improve the App.

1.3 Information Collected Automatically

• Crash reports: If the App crashes, we collect diagnostic data (device model, operating system version, stack trace) to identify and fix bugs. This data does not include personal content.
• Analytics events: We collect anonymous usage events (e.g., "exercise completed", "streak milestone reached") to understand how the App is used. Your account identifier is never attached to these events, so they are not linked to your identity.

1.4 Information We Do NOT Collect

• We do not collect your precise location.
• We do not access your contacts, photos, camera, or microphone. The App does not request these permissions at all.
• We do not sell or share your personal data with advertisers.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's core functionality (learning progress, spaced repetition, streaks).
• Sync your progress across devices when you are signed in.
• Improve the App based on aggregate usage patterns.
• Diagnose and fix technical issues.
• Communicate with you about your account or important changes to the App (only via email, and only when necessary).

3. Data Storage and Security

3.1 Local Storage

Your learning progress, bookmarks, and preferences are stored locally on your device in an encrypted database. On Android the database files themselves are encrypted with AES-256 (SQLCipher), using a key generated on your device and held in the Android Keystore — it is never transmitted to us and we cannot recover it. On iOS the same data is protected by the operating system's own file encryption, which is tied to your device passcode. This data remains on your device unless you create an account and enable cloud sync.

3.2 Cloud Storage

If you create an account, your data is synced to our cloud infrastructure hosted by Supabase (supabase.com), which uses Amazon Web Services (AWS) data centres in the European Union. Data is encrypted in transit (TLS 1.2+) and at rest.

3.3 Security Measures

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS).
• Encrypted local database storage: AES-256 via SQLCipher on Android, with a device-generated key in the Android Keystore; iOS Data Protection on iOS.
• Secure token storage using platform-native secure storage (Android Keystore / iOS Keychain).
• Row-level security on cloud databases ensuring users can only access their own data.
• No plaintext storage of passwords or authentication tokens.

4. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

We do not share your personal data with any third party for advertising or marketing purposes.

5. Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days.
• Local data: Remains on your device until you uninstall the App or clear its data.
• Crash reports: Retained for 90 days, then automatically deleted.
• Analytics data: Retained in anonymous, aggregate form. Individual event data is deleted after 14 months.

6. Your Rights

Depending on your jurisdiction (including under the EU General Data Protection Regulation and UK Data Protection Act), you have the right to:

• Access your personal data.
• Export your data in a portable format (JSON).
• Correct inaccurate data via your account settings.
• Delete your account and all associated data.
• Withdraw consent for optional data processing at any time.
• Object to processing of your data for analytics purposes.

To exercise any of these rights, contact us at privacy@linguabite.com or use the data management options in the App's settings.

We will respond to your request within 30 days.

7. Children's Privacy

LinguaBite is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. International Data Transfers

If you are located outside the European Union, your data may be transferred to and processed in the EU where our cloud infrastructure is hosted. We ensure appropriate safeguards are in place for any international transfers of personal data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Displaying a notice in the App.
• Updating the "Last Updated" date at the top of this policy.

Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

LinguaBite Ltd
Email: privacy@linguabite.com
Website: https://linguabite.com

11. Legal Basis for Processing (EU/UK Users)

Under GDPR, our legal basis for processing your personal data is:

You may withdraw consent for optional processing at any time without affecting the lawfulness of processing carried out before withdrawal.