Privacy
Privacy at a glance
LenguaLearn is built so it doesn't need to know who students are. This page summarizes how. A full privacy policy, with a retention schedule, will be published before accounts open.
Class students are anonymous
- Students join with a code from their teacher and get a random handle. They never give a name, an email address, or any other personal information.
- Class students are never offered Google sign-in, because a school Google account would send us their real name and school email.
- Only the teacher knows which handle belongs to which student. Names a teacher types next to seats stay in that teacher's browser and are never sent to us.
What we store
These are the rules the app is built around. The scheduled clean-ups that enforce the time limits start when accounts open.
| Data | Kept | Why |
|---|---|---|
| Handle and password (stored as a secure hash) | Until the account is deleted | Sign-in |
| Teacher and independent learner email, if given | Until the account is deleted | Sign-in, confirming the address, password reset |
| Class membership and seat number | Until the class is deleted | The teacher's dashboard |
| Answers and practice time | Learners: until the account is deleted. Classes: until 30 days after the class is deleted | Scheduling reviews, dashboards |
| Typed answers (at most 40 characters) | 90 days, then only whether each was right is kept | Checking that answers are graded fairly |
| A random device ID in a cookie | 90 days | Counting failed sign-ins per device |
| Your IP address | Never stored | Used in memory only, to slow down abuse |
What we never do
- No ads, no third-party analytics, no trackers. Fonts are served from our own site.
- No selling or sharing of data, and no marketing use of class data.
- Student data is never sent to an AI or text-to-speech provider.
- No chat and no leaderboards: students never see each other.
Class data is used only to run the app and, with identities removed, to improve it, for example to tune the review schedule or find questions that don't work.
Your data, your choice
- Any learner or student can download their data and delete their account from Settings.
- A teacher can delete a class. Students with no other class are deleted 30 days later.
- A school district can ask for one student, one class, or all its data to be deleted.
Where it runs
The app and its database run in one data center in the eastern United States. Independent learners must be 13 or older.