Privacy Policy

This Privacy Policy explains how Xylingo ("Xylingo", "we", "us", "our") collects, uses, stores, and protects information about you when you use our website, mobile application, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here.

1. WHO WE ARE

Xylingo is an AI-powered language learning platform. We are committed to protecting your privacy and handling your data responsibly. If you have any questions about this Policy, you can reach us at support@xylingo.com.

2. WHAT WE COLLECT

We collect information in three ways: information you give us, information generated by your use of the Service, and information collected automatically.

Information You Provide

• Email address — collected at registration for authentication, account management, and service communications.
• Display name and profile information — optional, collected during setup for personalization.
• Authentication credentials — collected at sign-in via email or third-party provider for secure account access.
• Payment information — collected when purchasing a subscription and processed by our payment provider. We do not store raw payment card data.

Learning and Usage Data

• Vocabulary lists — words and phrases you add, save, or mark for study.
• Chat messages — messages you send to and receive from AI characters in the app.
• Native language input — text you write in your native language when using translation or calque features.
• Exercise responses — your answers to tasks, quizzes, and phrasing challenges.
• Progress and activity — streaks, session duration, words reviewed, and performance metrics.
• User-imported content — words or phrases you add from external websites, videos, or books via our import tools.

Automatically Collected Data

• Device type, operating system, and browser version.
• IP address and approximate geographic region (country and city level).
• Pages visited, features used, and interaction patterns within the app.
• Session timestamps and duration.
• Error logs and crash reports.

3. HOW WE USE YOUR DATA

We use your data only to provide, improve, and protect the Service. Specifically:

• Deliver the Service — power AI-generated content, adaptive news feeds, contextual chats, and personalized exercises based on your vocabulary and progress.
• Personalization — tailor the learning experience to your level, goals, and learning patterns.
• Account management — authenticate you, manage your subscription, and send transactional communications such as receipts and password resets.
• Service improvement — analyze usage patterns in aggregate to identify bugs, improve features, and enhance AI model performance.
• Safety and integrity — detect abuse, fraud, and violations of our Terms of Service.
• Legal compliance — meet our obligations under applicable laws and respond to lawful requests from authorities.
• Communications — send service updates and, if you have opted in, product news or educational content (see Section 11).

We do not use your personal data or learning content to train AI models for sale, licensing, or use outside of the Xylingo service.

4. HOW WE STORE YOUR DATA

Your data is stored on secure cloud infrastructure provided by reputable, industry-standard third-party platforms. All data is encrypted in transit (TLS) and at rest. We apply access controls so that only authorized personnel can access personal data, and only when necessary for operational or support purposes.

Our infrastructure is hosted primarily in the United States and/or the European Union, depending on the provider's configuration. Where data is transferred across borders, we ensure appropriate safeguards are in place (see Section 13).

5. THIRD-PARTY SERVICE PROVIDERS

To operate the Service, we rely on a limited set of trusted third-party providers. These providers act as data processors on our behalf — they may only use your data to perform services for Xylingo and are bound by confidentiality and data protection obligations.

• Authentication provider — secure user sign-in and account management.
• Cloud database and storage — storing user accounts, vocabulary, chat history, and learning progress.
• Hosting and CDN platform — delivering the web application and API endpoints globally.
• Payment processor — processing subscription payments. We never store raw payment card data.
• AI inference provider — generating personalized learning content, chat responses, and phrasing suggestions.
• Analytics providers — understanding usage patterns to improve the Service (see Section 6).
• Email and transactional messaging — sending account-related emails such as confirmations and password resets.

We do not authorize any third-party provider to use your personal data for their own marketing, advertising, or unrelated purposes.

6. ANALYTICS

We use analytics tools to understand how users interact with Xylingo — which features are used, where users encounter friction, and how the app performs across devices and regions. This helps us build a better product.

Analytics data is collected in aggregate and pseudonymized where possible. It is used exclusively for product development and operational monitoring. We do not use analytics data for behavioral advertising or sell it to data brokers.

Our analytics providers may set cookies or use similar tracking technologies in your browser. You can disable these through your browser settings or device preferences, though this may affect some functionality.

7. DATA SHARING — WHAT WE DO NOT DO

We do not sell your personal data. Ever. We do not share your personal data with advertisers, data brokers, or marketing networks.

We may disclose your data only in the following limited circumstances:

• Service providers — as described in Section 5, solely to operate the Service.
• Legal requirements — if required by law, court order, or a lawful request from a competent government authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you and provide choices where required by law.
• Protection of rights — to protect the rights, property, or safety of Xylingo, our users, or the public, where permitted by law.

8. DATA RETENTION

We retain your personal data for as long as your account is active or as needed to provide the Service. This includes your learning history, vocabulary, and chat data — retaining this information is essential to delivering the personalized, context-aware experience that Xylingo is built on.

If you wish to have your data deleted, please contact us at support@xylingo.com. We will process deletion requests within 30 days, subject to any legal obligations to retain certain records (for example, transaction records required by tax or accounting law).

Note: In-app self-service account and data deletion is not yet available. Until this feature is implemented, deletion requests are handled manually via email.

When we delete data, we take reasonable steps to ensure it is removed or anonymized from our systems and instruct our service providers to do the same.

9. YOUR RIGHTS

Depending on your jurisdiction, you may have rights regarding your personal data. We respect these rights regardless of where you are located:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Deletion — request that we delete your personal data, subject to legal retention requirements.
• Portability — request your data in a structured, machine-readable format where technically feasible.
• Objection and Restriction — object to or request restriction of certain processing activities.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at support@xylingo.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the EEA, UK, or another jurisdiction with a data protection authority, you also have the right to lodge a complaint with the relevant supervisory authority. We encourage you to contact us first so we can try to resolve any concern directly.

10. CHILDREN'S PRIVACY

The Service is not directed specifically at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at support@xylingo.com and we will promptly delete the relevant data.

Users between 13 and 18 are welcome to use the Service. We recommend that parents or guardians review this Policy with them. Please be aware that Xylingo provides access to authentic language content, including vocabulary that some may consider mature, as described in our Terms of Service.

11. COMMUNICATIONS

We send transactional messages as part of operating the Service — for example, account confirmations, password resets, subscription receipts, and important service notices. These are necessary for the Service and cannot be opted out of while you have an active account.

We may in the future also send marketing or product update emails, such as new feature announcements or learning tips. If and when we do, we will obtain your consent first, and every such communication will include a clear and easy way to unsubscribe. We will never send marketing communications without your prior opt-in.

12. SECURITY

We take data security seriously. We implement technical and organizational measures to protect your information against unauthorized access, loss, alteration, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. You are also responsible for keeping your account credentials confidential.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and, where required, relevant authorities in accordance with applicable law.

13. INTERNATIONAL DATA TRANSFERS

Xylingo operates globally and your data may be processed in countries outside your own — including the United States — where data protection laws may differ from those in your country.

Where we transfer personal data from the EEA, UK, or other regions with data transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

By using the Service, you acknowledge and agree that your information may be transferred to and processed in countries outside your jurisdiction.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service itself. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an in-app notification or email.

We encourage you to review this Policy periodically. Your continued use of the Service after any update constitutes your acceptance of the revised Policy.

15. CONTACT US

We genuinely care about your privacy and are happy to answer any questions. If you have concerns, requests, or feedback about this Policy or how we handle your data, please contact us:

Email: support@xylingo.com
Website: https://xylingo.com