Privacy Policy

Last updated: September 19, 2026

At Gen AI Lingo, we believe learning should be empowering, transparent, and private. This Privacy Policy explains what information we collect across our website (genailingo.com) and learning application (app.genailingo.com), why we collect it, how it is safeguarded, and how you can exercise your privacy rights.

1. Data Controller & Contact

Gen AI Lingo provides interactive AI literacy courses and practice tools. If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your data protection rights, please contact our team:

2. Information We Collect

We practice data minimization and only collect data necessary to provide and improve our educational services:

• Account Information: When you register an account, we store your email address, securely hashed password credentials, display profile details, daily learning goals, time zone, and account session tokens.
• Learning Progress & Practice: We record the chapters, lessons, and interactive activities you complete, your learning streak, review schedules, and submitted exercises so your progress syncs seamlessly across devices.
• Local Device Data: Active lesson drafts, prompt scratchpads, and UI preferences (such as haptic feedback or motion preferences) are kept locally on your device. On mobile devices, sensitive authentication tokens are stored in the secure operating system keychain. On the web app, session tokens and active lesson state are stored in secure browser storage.
• Payment & Subscription Information: When you purchase Gen AI Lingo Premium (weekly subscription or lifetime access), transactions are processed directly by our third-party payment providers (Stripe on web, or Apple App Store / Google Play on mobile devices). Gen AI Lingo never receives, processes, or stores your credit or debit card numbers. We only store non-sensitive provider transaction identifiers, subscription status, and expiration timestamps to verify your Premium access.
• Optional AI Coaching Data: When you voluntarily request AI feedback on your practice prompts, the specific prompt text is transmitted to our AI processing provider (Cloudflare AI) to generate feedback. Local prompt evaluation checklists run entirely on your device without sending prompt text to any remote server.
• Technical & Log Data: When you access our service, servers automatically record technical diagnostics such as obfuscated IP addresses, browser/device type, operating system, and request timestamps to monitor system health and mitigate abusive traffic.

3. How We Use Information & Legal Bases

We process your personal information under the following legal bases pursuant to applicable data protection legislation (including the EU/UK General Data Protection Regulation and the California Consumer Privacy Act):

• Performance of a Contract: To create and maintain your account, deliver interactive lessons, sync learning progress across your devices, process payments, and provide customer support.
• Legitimate Interests: To secure our systems against unauthorized access and abuse, fix software defects, monitor infrastructure performance, and improve the clarity of our educational curriculum.
• Consent: Where required by applicable law, we seek your consent before setting non-essential cookies or enabling advertising measurement. You can withdraw your consent at any time.
• Legal Obligations: To comply with mandatory legal, financial, accounting, and tax requirements.

4. Analytics & Advertising Measurement

We use Google Analytics to understand aggregate trends—such as visitor volume, page views, course discovery, and account sign-ups across genailingo.com and app.genailingo.com.

• Google Analytics uses first-party cookies to recognize browser sessions.
• We never send your email address, display name, lesson answers, prompt text, or account recovery keys to analytics or advertising providers.
• Advertising measurement is enabled by default outside strictly consent-prior jurisdictions to evaluate marketing campaign effectiveness. You may disable advertising measurement at any time with zero impact on your learning experience. Analytics reporting continues in anonymized form.

You can manage your choice right here:

Turn advertising measurement on or off

5. AI Coaching & Prompts

When you ask for AI feedback during interactive exercises, your prompt is sent to Cloudflare AI to provide instant constructive commentary. Please observe the following best practices:

• Do not include sensitive personal details, confidential company data, passwords, or protected health information in practice prompts.
• Your prompts submitted for coaching are processed in real time and are not used to train foundational public AI models.

6. Third-Party Service Providers

We partner with trusted service providers who adhere to strict data security and confidentiality standards:

• Hosting & Edge Infrastructure: Cloudflare (hosting, DNS, edge worker processing, and AI inference).
• Payment Processing: Stripe (web payments), Apple App Store (iOS), and Google Play (Android).
• Product Analytics: Google Analytics (aggregate usage metrics without personal identifiers).

7. Security & Data Retention

We implement comprehensive security controls to protect your data, including TLS 1.3 encryption for all data in transit, encrypted storage, strict access control, and API rate limiting. Passwords, session tokens, and recovery keys are never written to plaintext log files.

We retain your account and learning records for as long as your account remains active. Webhook event logs are retained for up to 90 days to handle payment retries safely. Upon account deletion, personal profile and progress records are permanently deleted from our primary databases.

8. Your Rights & Controls

Depending on your location (including the European Economic Area, United Kingdom, and California), you have significant rights regarding your personal information:

• Access & Portability: You may request a copy of the personal data we hold about you in a structured, machine-readable format.
• Correction: You can update your profile, goals, and account credentials directly in the app settings at any time.
• Deletion (Erasure): You can permanently delete your account and all associated learning history at any time through the app (navigate to Settings → Device & account data → Delete account) or by emailing us.
• Object or Restrict Processing: You have the right to object to or request restrictions on certain types of processing, including marketing and non-essential measurement.
• Non-Discrimination: We will never discriminate against you, deny services, or charge different prices for exercising your statutory privacy rights.

To exercise any of these rights, email us at hi@genailingo.com. We will verify and process your request within statutory timeframes without undue delay.

9. Children’s Privacy

Gen AI Lingo is designed for general audiences, professionals, and students seeking to build AI skills. It is not directed to children under 13 years of age (or under 16 in certain jurisdictions), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at hi@genailingo.com so we can promptly delete it.

10. International Transfers

Our edge infrastructure and service providers operate globally. Whenever your information is transferred across international borders, appropriate legal safeguards—such as Standard Contractual Clauses (SCCs) approved by the European Commission—are applied to guarantee your data receives equivalent protection.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements in our product or changes in applicable legal standards. When updates occur, we will revise the "Last updated" date at the top of this page. For significant updates, we will provide noticeable notice in the app or via email.

12. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact our team directly: