Privacy Policy

Effective date: September 23, 2026

LangLeap ("we", "us", or "our") operates the LangLeap mobile app, the website at langleap.app, and the LangLeap browser extensions. This Privacy Policy explains what information we collect, how we use it, who helps us process it, and the choices you have.

1. Information We Collect

Account information. When you create an account we collect your name, email address, and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address, and profile photo from Google.

Learning data. Your course and lesson progress, vocabulary and review history, streaks, study statistics, placement results, and your settings. We sync this between your devices.

Content you create or submit. Lessons you create or import (including text, EPUB books, and images you choose from your photo library), answers you type in writing exercises, topics you request for AI-generated lessons, and reports you send us about lesson content.

Purchases. Subscriptions bought in the app are processed by Apple. We receive your subscription status and purchase history through RevenueCat, but never your payment card details. Purchases on our website are processed by Stripe; we do not receive or store your full card number.

Device information. Basic device information needed to run the app (such as device type and operating system version) and, if you allow notifications, a push notification token.

Microphone and speech. If you use speaking exercises, the app records your voice so you can play it back and compare it with the model audio. These recordings stay on your device; we do not upload them. Pronunciation checks use Apple's speech recognition, which Apple processes under its own privacy policy.

Server logs. Like most online services, our servers record technical information about requests to our API, such as IP address, time, and the request made. We use these logs to operate, secure, and troubleshoot the service.

Browser extension. When you use the extension, we collect only the content you choose to import (such as video subtitles or article text and their titles), and only when you click "Import." See section 7.

2. How We Use Your Information

• To provide the LangLeap service, including lessons, audio, reviews, and syncing across devices
• To generate AI features you ask for, such as feedback on your writing and custom lessons
• To track your progress and schedule spaced-repetition reviews
• To manage your subscription and unlock paid features
• To send notifications you have turned on, such as study reminders
• To authenticate your account, keep it secure, and prevent abuse
• To respond to your support requests and content reports
• To understand which features are used so we can improve LangLeap

3. Service Providers

We share information with the following providers only as needed to run LangLeap. They process it on our behalf and may not use it for their own purposes.

• Google — Google Sign-In; Firebase Cloud Messaging (push notifications); the Gemini API (AI writing feedback, AI-generated lessons, and lesson audio, which receive the text you submit for those features); Cloud Text-to-Speech; and reCAPTCHA on our website.
• RevenueCat — in-app subscription management. Receives an app user ID and your App Store purchase history.
• Apple — App Store payments and speech recognition.
• Stripe — payments made on our website.
• Microsoft Azure — database hosting, file storage for images and audio, and Azure Translator (receives the words and text you look up).
• Vultr — hosting for our API servers.
• OpenAI and ElevenLabs — text-to-speech for lesson audio. They receive lesson text only.
• Podcast Index and Taddy — podcast search. They receive your search terms.
• PostHog — product analytics: which screens and features are used and how long, so we can improve the app. It receives your numeric account ID and usage events (such as screens viewed and lessons completed) — never your name, email, or anything you type. On this website, PostHog also records page views, which site or link sent you here (for example, a link from Instagram), and whether the signup form was submitted, using an identifier stored in your browser. It never receives what you type into the form.

These providers may process data in the United States and other countries.

4. What We Don't Do

• We do not sell your personal information.
• We do not use your data for advertising, and we do not show ads.
• We do not track you across other companies' apps or websites.
• We do not collect your location.
• We do not track your browsing history or monitor web activity outside explicit extension imports.

5. Data Retention and Deletion

We keep your account and learning data for as long as your account exists. You can delete your account at any time in the app under Settings → Delete Account, or by emailing us. Deleting your account permanently removes your account and learning data from our active systems. Server logs are kept only as long as needed to operate and secure the service. Deleting your account does not cancel an App Store subscription — cancel it in your Apple ID settings.

6. Data Security

All data is sent over HTTPS. Passwords are stored only as secure hashes. Sign-in tokens are stored on your device using secure storage (Keychain on iOS, Keystore on Android, and browser storage for the extension). No method of transmission or storage is completely secure, but we work to protect your information.

7. Browser Extension

The LangLeap browser extension:

• Only accesses page content when you click "Import"
• Stores your sign-in token and preferences locally in browser storage
• Sends imported content to the LangLeap API over HTTPS
• Does not run in the background or monitor your browsing
• Does not inject ads or modify web pages

8. Your Rights and Choices

• Access or correct your personal information by contacting us
• Delete your account and data in the app or by contacting us
• Turn notifications on or off in the app or in your device settings
• Withdraw microphone, speech recognition, or photo access in your device settings at any time
• Sign out of or uninstall the extension to remove its locally stored data

Depending on where you live, you may have additional rights under local law. Contact us to exercise them.

9. Children's Privacy

LangLeap is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version here with an updated effective date and, for significant changes, notify you in the app or by email.

11. Contact Us

Questions about this Privacy Policy or your data? Contact us at support@langleap.app.