Privacy Policy
Effective date: [Insert date you publish this]
This Privacy Policy explains what personal data LingoPeak ("we," "us") collects when you use our website and Service, why we collect it, how it's stored, and the choices you have. It is written in plain language and reflects the actual data our systems collect — not a generic template.
1. Data We Collect and Why
The table below summarizes exactly what we collect, why, and where it lives:
| What we collect | Why we collect it | Where it's stored |
|---|---|---|
| Name, email, password (encrypted) | To create and secure your account, and let you log in | Our PostgreSQL database (hosted on Railway) |
| Subscription and billing status | To know which plan you're on and manage your access | Our database; payment details themselves are handled by Razorpay, not stored by us |
| Languages you're learning and proficiency level | To personalize lessons and AI tutor conversations | Our database |
| Your messages to the AI tutor and its replies | To hold a conversation, give corrections, and improve your learning path | Our database; also processed by our AI provider (Anthropic) to generate each reply |
| Pronunciation practice transcripts and scores | To give you feedback on spoken phrases | Our database; the audio-to-text transcription happens in your browser and is not stored as audio by us |
| Usage data (minutes used, streaks, login times) | To enforce plan limits and show your progress | Our database |
2. How We Use Your Data
- To provide the Service: creating your account, running AI tutor conversations, scoring pronunciation, tracking your progress and streaks.
- To process payments: your subscription tier and billing status are linked to your account so we know what access to give you. Card and payment details are handled directly by Razorpay under its own privacy and security practices — we never see or store your full card number.
- To communicate with you: for example, account confirmations, billing receipts, or support replies if you contact us.
- To improve the Service: understanding which features are used helps us prioritize what to build next. We do not sell your personal data to advertisers.
3. Third Parties Who Process Your Data
We rely on a small number of trusted service providers to run LingoPeak. Each only receives the data necessary to perform its function:
- Anthropic (AI provider) — receives your conversation messages and pronunciation transcripts to generate the AI tutor's replies and feedback.
- Razorpay (payment processor) — receives your billing and payment information to process subscription charges; governed by Razorpay's own privacy policy.
- Railway (infrastructure host) — hosts our database and backend servers; does not access your data for any purpose other than providing hosting infrastructure.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records (such as billing history) for legal, tax, or accounting purposes under Indian law.
5. Your Rights
Depending on applicable law (including India's Digital Personal Data Protection Act), you generally have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated personal data.
- Withdraw consent for processing, where consent is the basis for that processing (note: withdrawing consent for core data like your account email may mean we can no longer provide the Service to you).
To exercise any of these rights, contact us using the details in Section 8 below.
6. Data Security
We take reasonable technical measures to protect your data, including:
- Encrypting your password using industry-standard hashing (we never store your actual password in readable form).
- Using secure, token-based authentication for account sessions.
- Restricting database access to authorized systems only.
No system is perfectly secure, and we cannot guarantee absolute security, but we are committed to promptly addressing any data security issue that arises and notifying affected users where required by law.
7. Children's Privacy
LingoPeak is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us so we can delete it.
8. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: [Insert your support email]
Business name: LingoPeak (operated by [Your Full Legal Name], sole proprietorship, India)
9. Changes to This Policy
We may update this Privacy Policy as our Service evolves or as required by law. We will update the effective date above when changes are made, and for material changes, we will make reasonable efforts to notify you directly.