Privacy Policy

This Privacy Policy explains what personal data the Lingible app (the "App") and the website lingible.app (the "Website") collect, why we collect it, who receives it, how long we keep it and what choices you have.

The App and the Website are operated by Lingible LLP, a limited liability partnership registered in the Republic of Kazakhstan ("Lingible", "we", "us"). Lingible LLP is the controller of your personal data. You can reach us at lingible.app@gmail.com.

1. Information We Collect

1.1 Account Data

You can use many features without an account. If you sign in with Google or Apple, we receive your name, your email address (or the private relay address if you use Apple's "Hide My Email"), a user ID and the sign-in method. Sign-in is handled by Firebase Authentication (Google).

1.2 Books and Content You Add

• Imported books. When you import a book, the file is sent to our server to be converted into a readable format. If you are not signed in, the converted file is deleted from our server after 30 minutes. If you are signed in, the book and its cover are saved to your cloud library until you delete them or your account.
• Saved words and flashcards. If you are signed in, your saved words and flashcards (including translations and review progress) are synced to our server so you can use them on other devices.
• Data stored only on your device: reading progress, reading statistics, notes, highlights, settings and books you do not upload to the cloud. This data never leaves your device and is removed when you uninstall the App.

1.3 AI Features

AI features (word explanations, grammar help, the AI chat and flashcard generation) work only after you give your consent in the App. When you use them, the text you selected from a book, your questions and your chat messages are sent through our server to OpenAI, which generates the answer. Please do not share sensitive personal information in the chat. Our server logs your user ID, the time of the request and the number of messages for security and troubleshooting, but does not store the content of your messages.

1.4 Translation and Read-Aloud

• Translation. Words and passages you translate are sent to translation services: Google Translate, Microsoft Translator or DeepL, either directly from your device or through our server (Google Cloud Translation, DeepL). These requests contain only the text to be translated and the language pair. Our server keeps a shared cache of translations that is not linked to you.
• Read-aloud. When you use an online voice, the text being read is sent to Microsoft's speech service to produce audio. System voices work on your device and send nothing to us.

1.5 Purchases and Subscriptions

Payments are processed by the Apple App Store or Google Play. We never receive your card details. Our subscription service provider, RevenueCat, receives your purchase receipts together with your user ID. We store your subscription status (plan, store, renewal and expiry dates) and a log of purchase events (product, price, currency, country) for accounting and to keep your subscription working.

1.6 Usage, Diagnostics and Device Data

• Firebase Analytics records how the App is used (for example, screens opened, features used, purchases started) together with device model, operating system, language, app version, an app instance ID and an approximate location derived from your IP address. If you are signed in, this data is linked to your user ID.
• Firebase Crashlytics collects crash reports and diagnostics (device state, stack traces, app version), linked to your user ID if you are signed in.
• Firebase Cloud Messaging stores a push notification token for your device. We save it on our server to send you notifications.
• Firebase Remote Config uses an app instance ID to deliver settings and feature configuration.

1.7 Advertising Measurement (Meta)

We advertise Lingible on Facebook and Instagram. To measure which ads bring people to the App, the App uses the Meta (Facebook) App Events SDK. It sends Meta information about app installs and launches, events in the App and purchases (product and price), together with device identifiers. The advertising identifier is sent on Android and, on iOS, only if you allow tracking. We do not show ads in the App. See Section 7 to opt out.

1.8 YouTube Videos

Learning videos are played in the embedded YouTube player, and our server uses YouTube API Services to get video details and subtitles. When you watch videos, Google may collect data under the Google Privacy Policy. By using the video features you agree to the YouTube Terms of Service.

1.9 Surveys and Support

If you answer an in-app survey, we store your answers with your user ID. If you email us, we keep your email and our correspondence to handle your request. We may occasionally email you short surveys about the App. You can stop them at any time by replying to the email.

1.10 Fonts

Optional reader fonts are downloaded from Google Fonts. When a font is downloaded, Google receives your IP address.

1.11 Website

The Website uses the Google Ads tag, which sets cookies to measure how many visitors from our ads download the App. Our hosting provider keeps standard server logs (IP address, browser, pages requested).

2. How We Use Information and Legal Bases

• To provide the App and your account: converting and storing books, syncing, translation, read-aloud, AI features you request, subscriptions and support. Legal basis: performance of our contract with you.
• To run AI features: your consent, which you can withdraw at any time.
• To understand usage, fix crashes and improve the App: our legitimate interest in a reliable and useful product.
• To measure our advertising: our legitimate interest in knowing which ads work. On iOS the advertising identifier is used only with your permission.
• To prevent fraud and abuse and to secure our services: our legitimate interests.
• To keep accounting and tax records and respond to lawful requests: compliance with legal obligations.

We do not sell your personal data and we do not use it to show you ads inside the App.

3. Who Receives Your Data

We share personal data only with the service providers we need to run Lingible, under their terms and privacy policies:

• Google (USA): Firebase Authentication, Analytics, Crashlytics, Cloud Messaging and Remote Config; Google Translate and Google Cloud Translation; Google Fonts; YouTube.
• Apple (USA): Sign in with Apple, App Store payments.
• RevenueCat, Inc. (USA): subscription management.
• OpenAI (USA): AI features. OpenAI does not use data sent through its API to train its models by default and may keep it for up to 30 days for abuse monitoring.
• Microsoft (USA): translation and online read-aloud voices.
• DeepL SE (Germany): translation.
• Meta Platforms (USA / Ireland): advertising measurement, as described in Section 1.7.
• Hetzner Online GmbH: hosting of our servers in data centers in the European Union.

We may also disclose data if required by law, a court order or a public authority, to protect our rights and users' safety, or to a successor in the event of a merger or sale of our business, in which case this Policy will continue to apply.

4. International Transfers

We are based in Kazakhstan, our servers are in the European Union and several of our service providers are in the United States. Your data may therefore be processed outside your country. Where the law requires it, transfers are protected by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework to which the provider is certified.

5. How Long We Keep Data

• Account data, cloud library, synced words and flashcards, subscription status, push token and survey answers: until you delete them or your account.
• Books converted without an account: 30 minutes.
• Purchase event records: for as long as required by tax and accounting laws.
• Analytics data: up to 14 months. Crash reports: up to 90 days.
• Support emails: as long as needed to handle your request.
• Data on your device: until you delete it or uninstall the App.

6. Deleting Your Account

You can request deletion of your account and associated data in the App (Settings → your profile → Delete account) or by email. We delete your data within 30 days. Step-by-step instructions and the list of what is deleted and retained are on the Delete Your Account page.

7. Your Rights and Choices

Depending on where you live, you have the right to:

• Access your personal data and receive a copy of it
• Correct inaccurate data
• Have your data deleted
• Restrict or object to processing, including processing based on our legitimate interests
• Receive your data in a portable format
• Withdraw consent at any time, without affecting processing before the withdrawal
• Lodge a complaint with a data protection authority in your country

To exercise your rights, email lingible.app@gmail.com. We reply within 30 days.

You can also control data collection yourself:

• Tracking on iOS: Settings → Privacy & Security → Tracking.
• Advertising ID on Android: Settings → Google → Ads → Delete advertising ID.
• Push notifications: turn them off in your device settings.
• AI features: you can decline consent and keep using the rest of the App.

California residents: we do not sell personal information. Sending device identifiers and app events to Meta for advertising measurement may be considered "sharing" under California law. You can opt out using the device settings above or by emailing us.

8. Users in Kazakhstan

We process personal data in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection". By signing in to the App, you consent to the collection and processing of your personal data for the purposes described in this Policy, including cross-border transfer to the countries listed in Sections 3 and 4. You can withdraw your consent by deleting your account or contacting us.

9. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from them. Users under the age of digital consent in their country (up to 16 in some EU countries) need permission from a parent or guardian. If you believe a child has given us personal data without such permission, contact us and we will delete it.

10. Security

Data is encrypted in transit (HTTPS). Access to your cloud data requires your authenticated account, and access to our servers is restricted. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

11. Changes to This Policy

We may update this Privacy Policy. We will change the "Last Updated" date above and, for material changes, notify you in the App before they take effect.

12. Contact Us

Lingible LLP, Republic of Kazakhstan

Email: lingible.app@gmail.com