Home / Legal
Privacy Notice
Last updated: July 14, 2026
1. Who we are
Master Lingo ("Master Lingo", "we", "us") is the data controller for personal data collected through the Master Lingo language-learning service. You can reach us at Master Lingo, Maharajganj, Uttar Pradesh 273303, India, or via the Contact page.
2. Personal data we collect
- Account data — name, email, hashed password (or Google OAuth identifier), profile picture.
- Learning data — target language, level, goals, lesson progress, XP, streaks, vocabulary, quiz answers.
- AI interactions — messages you send to the AI tutor, speaking-practice transcripts, feedback ratings.
- Support & feedback — messages you submit via contact and feedback forms.
- Usage & device data — pages viewed, features used, device type, browser, IP address, approximate location.
- Cookies — see the Cookies section below.
3. Why we use your data (purposes & legal basis)
- Provide the service — create your account, deliver lessons, run the AI tutor. Legal basis: performance of a contract.
- Personalize your learning — adapt lessons to your level and goals. Legal basis: legitimate interests / consent.
- Support & feedback — respond to your messages. Legal basis: legitimate interests.
- Security & fraud prevention — detect abuse, protect accounts. Legal basis: legitimate interests / legal obligation.
- Product improvement — analytics on aggregate usage. Legal basis: legitimate interests.
- Legal compliance — tax, accounting, regulatory requests. Legal basis: legal obligation.
- Marketing — only where you have consented; you can unsubscribe at any time.
4. Who we share your data with
- Merchant of Record — Paddle.com Market Limited: processes payments, subscriptions, tax, invoicing, and refunds on our behalf.
- Hosting & infrastructure: Lovable (application hosting), Supabase (database, authentication, storage).
- AI providers: Google (Gemini) to power the AI tutor, speaking analysis, and content generation.
- Analytics & advertising: Google (AdSense/Analytics) for aggregate analytics and advertising on the free plan.
- Professional advisers: legal, tax, and accounting advisers where necessary.
- Authorities: where required by law or to protect rights and safety.
5. International transfers
Your data may be transferred to and processed in countries outside your own, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
We keep your account and learning data for as long as your account is active. If you delete your account, we delete or anonymize your data within 90 days, except where retention is required by law (e.g. tax records held for up to 7 years) or for the establishment or defense of legal claims. Support and feedback messages are kept for up to 24 months.
7. Your rights
Depending on where you live, you have the right to access, rectify, erase, restrict, or port your personal data; to object to processing; and to withdraw consent at any time. You can exercise these rights from your profile page or by contacting us. EU/UK users also have the right to complain to a supervisory authority.
8. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest, role-based access controls, row-level security in our database, and regular security reviews.
9. Cookies
We use essential cookies to keep you signed in and remember your preferences. With your consent we also use analytics and advertising cookies (Google AdSense/Analytics) on the free plan. You can change your choice at any time via the cookie banner. Master Lingo Pro subscribers see no advertising cookies.
10. Children
Master Lingo is not directed at children under 13 (or under the minimum age of digital consent in your country). We do not knowingly collect personal data from children without parental consent.
11. Changes to this Notice
We may update this Notice from time to time. Material changes will be notified by email or in-app.