Privacy Policy — PolyGlawt
Langing LLC (“we,” “us,” or “our”) operates the PolyGlawt language-learning app (the “App” or “PolyGlawt”). This policy explains what information we collect, how we use it, how long we keep it, and how you can control or delete it.
1. Information We Collect
1.1 Account information
| Account type | What we store |
|---|---|
| Email address (stored in lowercase), bcrypt-hashed password, optional display name, and account creation timestamp | |
| Sign in with Apple | Apple-assigned user identifier, optional email shared by Apple, optional display name, and account creation timestamp |
| Guest | A randomly generated device install ID used for guest session continuity and abuse prevention. We do not collect a name, email address, or Apple ID for guest accounts. |
We never store plaintext passwords.
1.2 Voice and audio
When you speak during a practice session, your audio is streamed to our servers and sent to OpenAI for transcription. We do not store audio recordings. The audio stream is held in memory only for the duration of a single speech turn and is not written to disk.
The text transcript of what you said may be retained in server logs for service quality, debugging, and abuse prevention. We do not use your transcripts to advertise to you, and we do not sell your data.
1.3 Learning progress and usage
- Completed lessons and scenarios.
- Skill levels per language and difficulty-adaptation history.
- Daily usage counts used for quota enforcement.
- Session state, including active lesson progress, current goal index, and turn metrics.
1.4 Technical information
- Device install ID generated on first launch.
- Session IDs, request timing, and error logs generated during normal app operation.
2. How We Use Information
We use the information above to:
- Authenticate you and keep your account available across sessions.
- Deliver the App experience by tracking progress, adapting difficulty, and allowing AI characters to respond to what you say.
- Enforce usage limits such as daily scenario quotas and guest rate limits.
- Maintain and improve service quality through error monitoring, latency tracking, and moderation of voice input to prevent abuse.
We do not sell your data. We do not use your data for advertising or cross-app tracking.
3. Legal Bases for Processing
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we process your personal data on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account, saving your learning progress, and processing your speech so AI characters can respond during practice sessions | Performance of a contract — this processing is necessary to provide the App you have asked us for |
| Service-quality monitoring, debugging via server logs (including transcripts where logging is enabled), enforcing usage quotas and rate limits, and content moderation | Legitimate interests — keeping the App reliable, secure, and safe to use, in ways you would reasonably expect and that do not override your rights |
| Optional information you choose to provide, such as a display name or an in-app feedback report | Consent — you may withdraw it at any time (for example, by deleting your account or contacting us) |
We do not process your data for advertising or profiling, so no legal basis is relied on for those purposes.
4. Data Retention
| Data category | Retention period |
|---|---|
| Account record, progress, and skill levels | Until you delete your account |
| Active session state | Up to 7 days from last activity |
| Daily quota counters | Approximately 2 days |
| Server logs, including transcripts if logging is enabled | Rotated on a rolling basis, typically 30 days |
| Audio recordings | Not retained — discarded after transcription |
5. Third-Party Service Providers
We rely on the following service providers to operate PolyGlawt. Each may have its own privacy policy and data-processing terms.
| Provider | Role | Data they receive |
|---|---|---|
| OpenAI, Inc. (openai.com) | Speech transcription, AI character response generation, and content moderation | Your audio stream during each turn and the text of in-app conversations |
| MongoDB Atlas (mongodb.com) | Managed database hosting | Account information, learning progress, and session records |
| Fly.io, Inc. (fly.io) | Cloud compute and hosting | Data processed by our application servers |
| Apple Inc. (apple.com) | Sign in with Apple identity verification and token revocation on account deletion | Apple user identifier and authorization tokens handled through Apple’s systems |
We do not share your data with other third parties except where required by law.
6. International Data Transfers
Langing LLC is a United States company, and our servers and the service providers listed above process data in the United States. If you use PolyGlawt from the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with data-transfer rules, your personal data is transferred to and processed in the United States.
Where these transfers occur, we rely on appropriate safeguards: our service providers commit to data-processing agreements incorporating the European Commission’s Standard Contractual Clauses and/or are certified under the EU–U.S. Data Privacy Framework (including its UK and Swiss extensions), as applicable. You can contact us at support@polyglawt.com for more information about these safeguards.
7. Content Moderation
Voice input processed during practice sessions may be passed through automated safety checks to detect abusive, harmful, or inappropriate content. If content is flagged, it is not used to continue the normal lesson flow, and the App may respond with a safety message instead of a standard character reply. This processing is used only to maintain a safe learning environment.
8. Account Deletion
You can delete your account at any time from within the App:
Settings → Delete Account → Confirm
When you delete your account, we permanently remove:
- Your account record, including email, Apple identifier, or guest install ID
- Your learning progress, skill levels, and completion history
- Your active session state
- Your daily usage records
- Any stored authorization tokens
For Sign in with Apple accounts, we also revoke your Apple authorization token with Apple at the time of deletion.
If you cannot access the App, you can request manual account deletion by emailing support@polyglawt.com. We will complete verified deletion requests within 30 days.
Guest accounts do not store server-side progress. If you use PolyGlawt as a guest, uninstalling the App removes your local guest state.
9. Children’s Privacy
PolyGlawt is not directed to children under 13, or under 16 where applicable under local law. We do not knowingly collect personal information from children. If you believe a child has created an account without parental consent, please contact us at support@polyglawt.com and we will promptly delete the account.
10. Your Privacy Rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Delete your data, as described above.
- Receive a copy of your data in a machine-readable format.
- Withdraw consent or object to certain processing.
To exercise any of these rights, contact us at support@polyglawt.com. We respond to verifiable requests within 30 days.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority, although we would appreciate the chance to address your concerns first.
11. Security
We use reasonable and industry-standard measures to help protect your data:
- Passwords are hashed with bcrypt, so we cannot recover them.
- All communication between the App and our servers uses HTTPS/WSS with TLS.
- JWT access tokens expire after 15 minutes, and refresh tokens expire after 7 days.
- Private keys and API credentials are stored as encrypted secrets rather than in code.
No system is completely secure. If you discover a security issue, please contact us at security@polyglawt.com.
12. Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top will always show the latest version. For material changes, we will notify you in the App. Your continued use of PolyGlawt after a revised policy becomes effective means you accept the updated policy.
13. Contact
If you have questions about this policy or your data:
Langing LLC
Email: support@polyglawt.com
Website: https://polyglawt.com