Privacy policy

Langsy is run by [your legal name or company name], [postal address] (“we”, “us”). We are the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).

You can reach us about anything in this policy at hello@langsy.co.

If your school gave you Langsy, your school decides how your data is used for your learning and is the controller for it; we process it on the school's behalf. Your school's own privacy notice applies too, and you can ask your school about your data as well as us.

• Your account: your email address, your password (stored only in scrambled, hashed form), and, if you give them, your name, the languages you speak and are learning, your level and your interests.
• What you practise: the messages you type, the text of what you say, the writing you submit, and what Langsy produces from them: corrections, explanations, worksheets, test answers and scores, the words you save, and your progress.
• Voice recordings: when you speak, the clip is sent to be turned into text. We don't keep recordings: each one is discarded as soon as it's transcribed. Only the text is saved, as part of your conversation.
• Photos of handwriting (Premium): the photo is read into text, which you check before sending. We don't keep the photo.
• Payments: handled entirely by Stripe. We never see or store your card details. We keep your Stripe customer reference, your plan, its status and its renewal date.
• Usage: how much of your plan you've used (responses, speaking minutes, worksheets and so on), so we can apply its limits.
• Feedback you send us: what you write, plus the session it's about, so we can see what went wrong.
• The beginners' email list: if you join it, your email address and when you asked.
• Schools: if you use Langsy through a school, which school and class you're in and the work your teachers set you.
• Security information: sign-in records and technical details such as your IP address and browser, used to keep accounts safe and stop abuse.
• Agreement records: which version of our terms and this policy you agreed to, and when.

Langsy's tutor, corrections, explanations, worksheets and speech are produced by an AI service from OpenAI. To do that, we send OpenAI:

• what you type, and the recent conversation so the reply makes sense;
• your voice recordings, to turn them into text;
• photos of your handwriting, if you use that feature;
• the text the tutor is about to say aloud, to turn it into speech;
• details from your profile that shape the lesson, such as your languages, level and interests.

OpenAI processes this for us under a data processing agreement. Under its terms for business customers, it does not use data sent through its API to train its models. It may keep what we send for up to 30 days to detect abuse, then deletes it.

AI can make mistakes. A correction or explanation may occasionally be wrong, so treat it as a strong suggestion rather than the final word.

Please don't share sensitive personal details (about your health, for example) in your conversations. Langsy doesn't need them.

• To provide Langsy to you (running conversations, giving feedback, building worksheets, keeping your progress, sending sign-in and account emails). Basis: our contract with you.
• To take payments and keep the records the law requires. Basis: contract and legal obligation.
• To keep Langsy safe (stopping bots, abuse and attacks, and applying plan limits). Basis: our legitimate interests in running a secure service.
• To fix and improve Langsy using the feedback you send us and overall usage figures. Basis: our legitimate interests.
• To email the beginners' list. Basis: your consent, which you can withdraw at any time.

We don't sell your data, we don't show ads, and we don't use your data to make decisions about you that have legal or similarly significant effects.

Only with the services that run Langsy for us, each bound by a contract to protect your data and use it only on our instructions:

• Supabase: our database, sign-in and server code, hosted in London.
• OpenAI: the AI, as described above.
• Stripe: payments and subscriptions.
• Vercel: hosts the website.
• hCaptcha: checks that sign-ups and sign-up forms are made by people, not bots.
• Resend: sends our emails, such as sign-up confirmations and password resets.

Your teachers: if you use Langsy through a school or a tutor, they can see your profile, your work and your progress, so they can teach you.

We'll also share data if the law requires it, or to protect someone's safety.

Our database is in the UK. Some of the services above, including OpenAI, are based in the United States, so your data may be processed there. When that happens it's protected by the safeguards UK law requires, such as the UK Extension to the EU–US Data Privacy Framework, or the UK's International Data Transfer Addendum.

• Your account and everything you've practised: until you delete your account. Deleting it removes your profile, conversations, writing, worksheets, saved words and progress straight away, and cancels any subscription.
• Backups: copies in our backups are overwritten within about 30 days.
• Payment records: Stripe and we keep what tax and accounting law requires, usually six years.
• Feedback you sent: kept, no longer linked to your account, until we've dealt with it.
• The beginners' list: until you ask to be removed.
• Security records: kept for a limited time, then deleted.
• Voice recordings and handwriting photos: not kept at all.

You have the right to:

• get a copy of your data;
• have it corrected (you can edit your profile yourself in the app);
• have it deleted (use Profile → Delete account, or email us);
• receive it in a portable format;
• object to, or ask us to limit, how we use it;
• withdraw consent where we rely on it, such as for the beginners' list.

Email hello@langsy.co to use any of these. We'll answer within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

You need to be at least 13 to create a Langsy account yourself. Younger learners can use Langsy only through their school or tutor, who is responsible for getting any permission needed. If you think a child under 13 has signed up on their own, email us and we'll delete the account.

Langsy stores a small amount of information in your browser to keep you signed in and remember things like unfinished work. That's needed for the app to work, so we don't ask first. We don't use advertising or tracking cookies. hCaptcha may set its own cookies when it checks you're not a bot.

Everything travels over encrypted connections. Each account can only see its own data, enforced by the database itself, and our admin access needs two-factor sign-in. No system is perfectly secure, but if something ever went wrong that put your data at risk, we'd tell you and the ICO as the law requires.

If we change this policy in a way that matters, we'll show you the new version the next time you open Langsy and ask you to agree before carrying on. The date at the top shows when it last changed. See also our Terms of service.