Privacy Policy

Langsly provides language learning lessons, classroom tools, games, social learning features, and the Vocab Pass browser extension. You can contact us at [email protected].

The Langsly Android app uses a secure Capacitor WebView to provide the same learning platform available on the Langsly website. The app connects to Langsly services over encrypted HTTPS and WebSocket connections and stores authentication tokens and preferences on the device so you can remain signed in.

The Android app requests internet access. It asks for microphone access only when you start a pronunciation exercise, and it asks to show notifications only if you turn on reminders in Profile > Settings. It does not request device location, contacts, call logs, SMS, broad file access, or camera permissions. If you do not allow the microphone, you can skip pronunciation exercises and keep learning.

The Android app is for people aged 13 and older. When you create an account in the Android app, we ask for your birth month and year to confirm your age. The check happens on your device: your birth date is not sent to Langsly or stored, and Langsly receives only a confirmation that you are 13 or older. Students under 13 can use Langsly only on the web, through a class set up by their teacher or school.

If you turn on reminders, the app registers a Firebase Cloud Messaging token and a random installation identifier with Langsly so we can send reminders and class notices to that device. Turning reminders off unregisters the device.

We collect account information you provide, such as your name, email address, username, password credentials, profile settings, avatar choices, learning languages, interface language, teacher or student role, and onboarding preferences.

We collect learning and classroom activity, including lessons, stages, quiz answers, scores, XP, streaks, daily practice activity, game sessions, classroom memberships, assignments, discussions, reports, teacher feedback, goals, tournaments, friend requests, badges, and notifications.

If you upload or create content, we may process files, media, text submissions, classroom materials, discussions, assignment answers, audio, images, filenames, metadata, and related storage information.

We also collect technical information needed to run the service, such as authentication tokens, device/browser information, language preferences, local storage values, session storage values, server logs, IP address, request timestamps, and error or security logs.

When you earn XP, Langsly looks up an approximate country from your IP address to place you in tournament brackets. We store only the country code, not your precise location.

When you connect Vocab Pass using a code shown by the extension, Langsly processes short-lived device and user codes, the extension platform, locale, authorization status, polling activity, timestamps, the account that approves or denies the request, and a cryptographic hash of the requesting IP address. The codes and IP address are stored as cryptographic hashes on Langsly's servers. The connection codes normally expire after about ten minutes.

When you start a pronunciation exercise, audio from your microphone is streamed to Microsoft Azure AI Speech, which scores how you said the phrase and returns the result. The audio is processed only to produce that score: Langsly does not store your recordings, and we do not turn on audio logging with Azure.

Some writing exercises give automated feedback. When you submit an answer in one of these exercises, Langsly sends your answer, the exercise text, and the expected answers to AI models hosted through OpenRouter, which grade the answer and write short feedback. We do not send your name, email address, or username with the answer. Automated feedback can be wrong. Use “Report this feedback” on the feedback screen to tell us about feedback that is offensive, harmful, or incorrect.

The Vocab Pass browser extension reads page text in your browser so it can identify words and phrases from your Langsly vocabulary list and replace them with learning-language terms. The extension is designed to support the user-facing vocabulary learning feature described in the extension and on our site.

The extension stores some data locally in your browser, including login tokens, cached vocabulary words, sync status, theme settings, difficulty settings, disabled-site preferences, phrase or disambiguation cache entries, pending encounter events, and temporary connection-code information while a device authorization request is active.

On non-sensitive websites, Vocab Pass automatically processes the site domain and visible page text to find synchronized vocabulary. When needed to provide Vocab Pass, the extension may send Langsly the domain where a vocabulary word appeared, exposure events, trusted taps and feedback, matched phrases, or a bounded portion of the visible sentence needed for translation or disambiguation. It does not send complete pages, form values, hidden text, or full URLs. We do not use this data for personalized advertising, and we do not sell web browsing activity.

The extension uses automated safeguards intended to avoid sensitive pages. It blocks browser-internal pages, Langsly pages, pages containing password fields, supported government-domain patterns, and sites or paths whose address contains recognized authentication, banking, payment, health, or legal indicators. These baseline rules cannot be disabled, but automated address-based detection may not identify every sensitive site. You can disable Vocab Pass on any additional site from the extension controls.

Langsly receives extension synchronization and encounter requests. For phrase translation or disambiguation, Langsly may provide the limited matched phrase or bounded sentence context to OpenRouter and the selected model provider. Browser stores, including Mozilla Add-ons and the Chrome Web Store, receive listing and operational data under their own policies.

Langsly's use of information collected by Vocab Pass will adhere to applicable Mozilla Add-ons and Chrome Web Store policies, including Chrome's Limited Use requirements.

We use information to create and secure accounts, authenticate users, deliver lessons and games, operate classrooms, sync Vocab Pass vocabulary, show progress, personalize language settings and themes, provide teacher dashboards, support social learning features, prevent abuse, troubleshoot issues, and improve Langsly.

We may use aggregated or de-identified information to understand product performance, improve learning content, and maintain service reliability.

Langsly records lesson and game activity in its own service to save progress, show results, and understand which learning activities are used. These records can include lesson, stage, and game identifiers, completion and score information, and whether the session came from Android, mobile web, or desktop web. We do not send lesson answers, classroom content, individual game answers, or scores to Google Analytics.

On public Langsly pages, analytics is optional. Before you choose “Allow analytics,” Langsly does not create an analytics visitor identifier, store campaign attribution, or send marketing events. Global Privacy Control is treated as a choice to use only essential storage. Essential signup context—such as learner or teacher intent, target language, interface locale, and a safe Langsly return path—may be kept for up to seven days so sign-in, verification, and onboarding can continue correctly.

If you allow analytics on public website pages, we also load Google Analytics 4. We send page views and controlled CTA clicks using the page path without query parameters and the referring site origin. Google may receive technical information such as browser, device, and approximate location derived from the connection. We do not set a Langsly account ID in Google Analytics, and we do not use Google Analytics for advertising personalization. Google Analytics storage follows the settings of our Google Analytics property and Google's policies.

If you allow analytics, Langsly creates a random visitor identifier for up to 90 days and a session identifier in session storage. We may record controlled events such as public page views, CTA clicks, signup views, and signup submissions, along with page path without query parameters, locale, device class, page version, CTA identifier, learning intent, target language, the five standard UTM fields, and referring hostname. The server stores visitor and session identifiers as keyed cryptographic hashes. Our first-party marketing event payloads do not include your IP address, full referrer URL, user agent, email, form answers, learner content, or free-form metadata; ordinary server connection logs may still contain IP addresses as described above.

When a genuinely new account is created, Langsly may associate the preceding 90 days of consented, unclaimed touches with that account to measure account creation, verification, onboarding, and first-lesson activation. Ordinary login does not relink browser history. Raw marketing touches are retained for no more than 180 days and account-linked records are deleted with the account. You can reopen “Privacy choices” in the public-site footer at any time.

In the Android app, Google Analytics for Firebase is off by default. A signed-in user may enable it in Profile > Settings to measure app opens and general app engagement on that device, and may disable it there later. We disable advertising ID collection and advertising personalization for this app stream. The Android choice is separate from the public website choice.

If you request the teacher starter pack, Langsly processes your email address, selected role, class-size band, primary goal, locale, consent time, and controlled attribution fields. You must confirm the request using an explicit confirmation button before any starter-pack messages are sent. The sequence contains three practical messages over one week and does not use open-tracking pixels.

You can unsubscribe at any time. Unsubscribe, suppression, teacher-account conversion, or terminal delivery failure cancels remaining messages. Unconfirmed requests are deleted after 14 days. Confirmed lead context is retained for no more than 24 months after the sequence. After unsubscribe, contextual lead data is deleted after 30 days; Langsly retains only a keyed suppression value and timestamp to honor the request.

Langsly may use Firebase Authentication and Google sign-in to authenticate users. If you choose to connect Google Classroom, Google Drive, or other Google services, we use the Google data you authorize only to provide the requested classroom, sign-in, or media workflow.

Langsly's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

We may share information with service providers that help us host, secure, authenticate, store, analyze, and operate Langsly. These providers may process information only as needed to provide services to us or as required by law.

Our service providers include Google Firebase (sign-in, push notifications, and optional Android analytics), Microsoft Azure AI Speech (pronunciation scoring), OpenRouter and the AI model providers it routes to (automated feedback and Vocab Pass phrase help), Stripe (Vocab Pass payments), DiceBear (generated avatars), and our hosting and email providers.

Some profile pictures are drawn by DiceBear, an avatar service. To show these avatars, your device requests the image from DiceBear with an avatar seed, which can be your username, so DiceBear receives that seed and your device’s IP address.

Vocab Pass is a $5 per month subscription that you buy on the Langsly website. Payments are processed by Stripe, which collects and handles your card details under its own privacy policy. Langsly does not receive or store your full card number. We keep the subscription details needed to provide Vocab Pass, such as its status and renewal dates. The Android app does not sell anything.

We share information with teachers, students, classmates, or administrators only where the product feature calls for it, such as classroom rosters, assignments, submissions, discussion posts, progress reports, leaderboards, friend features, and shared goals.

We may disclose information to comply with law, enforce our Terms of Use, protect Langsly and users, investigate security or abuse issues, or as part of a merger, acquisition, financing, or sale of assets.

We do not sell personal information or use Vocab Pass browsing data to serve personalized, retargeted, or interest-based advertising.

Langsly may be used in educational settings. The Langsly Android app is for users aged 13 and older and is not directed to children under 13. Students under 13 may use Langsly only on the web, through a class set up by their teacher or school. Teachers, schools, or parents are responsible for determining whether student use requires parent or guardian consent; the school or teacher should obtain any required consent and may contact us for privacy requests.

Parents, guardians, teachers, and schools can contact us at [email protected] to request access, correction, deletion, or restrictions for student information.

We keep information for as long as needed to provide Langsly, maintain accounts, comply with legal obligations, resolve disputes, prevent abuse, and operate backups. Vocab Pass phrase and disambiguation cache entries normally expire from extension storage after seven days. Temporary connection-code information expires after the authorization window, and pending encounter events remain locally until they can be sent or are cleared. Other extension data may remain in your browser until you log out, clear it, uninstall the extension, or its applicable cache expires.

Server-side Vocab Pass encounter records and device-authorization audit metadata may remain associated with your account under our general service-retention practices. Account deletion removes account-linked records from active systems where technically and legally applicable, subject to limited backup, security, fraud-prevention, and legal-retention needs.

We use administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security, but we work to protect information from unauthorized access, loss, misuse, or alteration.

You can update some account settings in Langsly, control extension sync and site preferences in Vocab Pass, disable the extension on selected sites, log out, uninstall the extension, or request account help.

To request access, correction, export, deletion, or other privacy help, contact [email protected]. We may need to verify your identity or authority before completing a request.

You can permanently delete your account from Profile > Settings > Delete account. If you cannot sign in, use our account deletion page to request deletion without the Android app.

We may update this Privacy Policy as Langsly changes. If changes are material, we will provide notice through the website, extension, account email, or another reasonable method. The latest version will be posted on this page.