Privacy Policy

Papalingo is a personal language-learning app built by a single developer in Brazil. This page explains exactly what data is collected, why, who it is shared with, and how to remove it.

What we collect

Only data needed to run the service:

• Email address — used to sign you in via one-time code and to send transactional messages.
• Display name — optional, only used to greet you in the app.
• Practice activity — exercises you answer, concept retention scores, streaks. This is what the app learns from.
• Subscription state — plan, status, renewal date. We never see or store your card details; the payment processor handles that.
• Session cookies — a hashed token so we know it's still you across requests. No tracking pixels, no third-party analytics.

Why we collect it

To deliver spaced-repetition practice, keep you signed in, and run the paid Pro plan. We do not sell, rent, or share personal data with advertisers. We do not use your data to train AI models.

Who we share with

Only the processors required to operate the service:

• Paddle — payment processor for web subscriptions. Receives your email + billing details you enter at checkout.
• Google Play Billing — payment processor for Android subscriptions. Subject to Google's privacy terms.
• Postmark — sends the OTP sign-in emails. Receives the email address and code, nothing else.

How long we keep it

Practice and account data stay until you delete the account. OTPs expire within minutes. Webhook events and audit logs are kept for up to 90 days for fraud and debugging.

Your rights

You can request a copy of your data, correct it, or delete it. Deletion removes your account and personal data from the active system.

Full deletion instructions: /en/account-deletion.

Children

Papalingo is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Contact

Questions or requests: [email protected].