Legal

Privacy policy

Effective date: 28 October 2026 · Last updated: 28 October 2026

Langimo is a language-practice service: you talk with an AI companion in Spanish, English or German, get your mistakes explained, and practise the words you met. This policy explains what we collect, why, who helps us run the service, how long we keep it, and how you can see or delete it. We wrote it in plain words; if anything is unclear, write to support@lumollo.ai.

Who is responsible

Langimo is operated by [owner’s legal name or company, registered address] (“Langimo”, “we”). We are the controller of your personal data for the purposes described here. Contact: support@lumollo.ai.

What we collect

• Your email address — to create your account and sign you in with a one-time code (no passwords). We store it as you typed it and in a normalised form. We also keep a one-way digest of the normalised address (a hash, not the address) so that each address gets one free trial.
• What you practise — your conversations with the companion (your messages and the replies), the corrections and explanations, the words and phrases you look up or save, your mistakes, your level, your ratings and help signals (for example that you translated a sentence or asked for a hint), your streak, daily goal and reminder settings, your learning languages and the name and form of address you chose. This is what lets you continue on any device.
• Voice — when you tap the microphone, the recording is sent to our speech-to-text provider to be turned into text. We do not store the recording; only the resulting text becomes part of your conversation. When a reply is read aloud with the natural voice, the text is sent to the text-to-speech provider; the audio may be cached by its text (not by who you are) so that the same sentence plays faster next time.
• Subscription status — when you subscribe in the iPhone app, Apple sends us signed records of the purchase: the product, the transaction identifiers, the period and renewal status, and an anonymous purchase token that links the purchase to your Langimo account. We never see your payment card or Apple ID.
• Usage counts — how many replies, look-ups, voice characters and seconds were used per day, and what they cost us, so that fair-use limits and the free trial’s allowance work. These records never contain the content of your messages.
• Sign-in sessions — a random session token (we store only its hash), the kind of device (web or iPhone) and the day it was last used. We do not store your IP address with your account. Short-lived rate-limit counters (to stop abuse of the sign-in and sign-up forms) use a hash of your address or IP address and expire within a day.
• Reminders — if you turn them on: your reminder time, days and time zone, and, for browser notifications, the push subscription your browser gives us. For email reminders we use your sign-in address.
• Launch list — if you ask to be told when the iPhone app launches, your email address, where you signed up (website or app) and when.
• Support — what you write to us, if you email support.

We do not use advertising, analytics or tracking tools, and we don’t load fonts or scripts from third parties on our pages.

Why we use it (and our legal basis)

• To provide the service you signed up for — conversations, corrections, word cards, progress on every device, sign-in, subscriptions (performance of our contract with you).
• To keep it fair, safe and affordable — fair-use limits, one trial per address, preventing abuse, fixing problems (our legitimate interests).
• To send the reminders and the launch email you asked for (your consent; you can turn them off at any time).
• To comply with the law, for example tax records for purchases handled by Apple (legal obligation).

We never sell your data, never share it for advertising, and never use your conversations to train AI models ourselves.

Who processes data for us

We use a small number of providers who process data on our behalf under contracts that limit them to providing their service:

• Anthropic (Claude models, United States) — generates the companion’s replies, the corrections, word explanations, hints, recaps and grading. Receives the parts of your conversation and words needed for each request.
• OpenAI (United States) — turns your voice recordings into text and reads replies aloud. Receives the recording or the sentence to be spoken. Audio is processed for the request and not stored by Langimo.
• Cloudflare (United States, global network) — hosts the website, the app and our databases, and stores your learning data and account records. Like any web host it processes your IP address to deliver and protect the service; our own server logs contain only technical metadata (which kind of request, the result, how long it took), never message content.
• Resend (United States) — sends sign-in codes, reminder emails and the launch email. Receives your email address and the message.
• Apple — handles App Store purchases, billing, renewals and refunds as an independent controller under Apple’s own terms and privacy policy.
• Your browser’s push service (for example Google, Mozilla or Apple) — delivers browser reminders. We send an empty push; the reminder text is fetched from Langimo by your browser.

Under their API terms, Anthropic and OpenAI do not use the data we send them to train their models; they may keep it for a limited time to detect abuse. [Owner: confirm the current terms and retention periods of each provider before launch.]

International transfers

Our providers are based in the United States and process data there and in other countries. Where the law requires it (for example for users in the EU, EEA, UK or Switzerland), transfers rely on the European Commission’s standard contractual clauses or an equivalent safeguard offered by the provider.

How long we keep it

• Your account and learning data: until you delete your account (or a conversation, word or mistake yourself).
• Sign-ups that never entered the code we sent: deleted after 7 days.
• Usage counts: per-call records for 90 days; daily totals without any content are kept for accounting.
• Sign-in sessions: until they expire (42 days without use) or you sign out.
• Subscription records: as long as needed for the subscription and for legal accounting obligations.
• The one-way digest of your address and the free trial’s used allowance: kept after deletion, so that deleting and re-creating an account doesn’t give a second free trial. It cannot be turned back into your address.
• The launch list: until the launch email has been sent, or earlier if you ask us to remove you. If you joined from your account, the entry is deleted with your account.

Your choices and rights

• Delete your account at any time in Settings → Account → Delete account (website or iPhone app). This immediately deletes your conversations, words, mistakes, progress, reminders and sessions. An App Store subscription is not cancelled automatically — cancel it in your iPhone’s Settings → your name → Subscriptions.
• Export your conversations (Markdown or JSON, from History) and your words (CSV or JSON, from Learn words → My words).
• Turn off reminders in Settings, or use the unsubscribe link in any reminder email.
• Depending on where you live, you may also have the right to access, correct, restrict or object to the processing of your data, to data portability, and to withdraw consent. Write to support@lumollo.ai; we answer within 30 days. You can also complain to your local data-protection authority.

Cookies and storage on your device

We use only what the service needs: a sign-in cookie (__Host-langimo_session, HttpOnly, 42 days), a small “signed in” hint cookie so the website can show “Open Langimo”, and your browser’s local storage for app preferences, a copy of your current conversation for a fast start, unsent messages and recently looked-up words. There are no advertising or analytics cookies.

Children

Langimo is not directed at children under 16, and we don’t knowingly collect their data. If you believe a child has created an account, write to us and we’ll delete it.

Security

All traffic is encrypted (HTTPS). Sign-in codes and session tokens are stored only as hashes, each account’s learning data is kept in its own isolated store, and access to production systems is limited to the owner.

Changes

If we change this policy in a way that matters, we’ll update the date above and tell you in the app or by email before the change takes effect.

Contact

[Owner’s legal name or company, registered address] · support@lumollo.ai