Privacy Policy

1Information We Collect

1.1 Information You Provide

Account Information:

• Email address
• Display name
• Password (stored securely as a hash)
• Native language
• Target ICAO level
• Scheduled test date (optional)

Profile Information:

• Profile photo (optional)
• Test location (optional)

Learning Data:

• Vocabulary review responses
• Listening exercise answers
• Speaking practice audio recordings
• Practice session times and durations

Communications:

• Support requests and correspondence
• Feedback and suggestions

1.2 Information Collected Automatically

Usage Data:

• Features accessed and actions taken
• Time spent on exercises
• Learning progress and statistics
• App version and settings

Device Information:

• Device type and model
• Operating system and version
• Unique device identifiers
• IP address
• Browser type (for web access)

Audio Data:

• Voice recordings submitted for speaking practice
• Transcriptions generated from recordings

1.3 Information from Third Parties

Payment Information:

We do not directly collect or store payment information. All payments are processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy may share with us:

• Transaction confirmation
• Subscription status
• Country of purchase (for tax purposes)

For Lemon Squeezy's privacy practices, see: https://www.lemonsqueezy.com/privacy

2How We Use Your Information

We use your information to:

2.1 Provide the Service

• Create and manage your account
• Deliver personalized learning content
• Process and track your learning progress
• Implement spaced repetition algorithms
• Generate AI-powered feedback on speaking exercises
• Calculate your predicted ICAO level

2.2 Improve the Service

• Analyze usage patterns to improve features
• Develop new learning content and exercises
• Train and improve our AI models (using anonymized/aggregated data)
• Fix bugs and technical issues

2.3 Communicate With You

• Send transactional emails (account verification, password reset)
• Deliver learning reminders (if enabled)
• Notify you of important updates or changes
• Respond to support requests

2.4 Ensure Security

• Detect and prevent fraud
• Protect against unauthorized access
• Enforce our Terms of Service

3How We Share Your Information

We do not sell your personal information. We may share your information with:

3.1 Service Providers

We use third-party services to help operate the Service:

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government requests
• Protection of our rights or safety
• Investigation of potential violations

3.3 Business Transfers

If AviLingo is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4Data Retention

4.1 Active Accounts

We retain your data for as long as your account is active or as needed to provide the Service.

4.2 Deleted Accounts

When you delete your account:

• Account information is deleted within 30 days
• Learning progress data is anonymized or deleted
• Audio recordings are deleted within 30 days
• Some data may be retained for legal or legitimate business purposes

4.3 Backup Retention

Backup copies may be retained for up to 90 days for disaster recovery purposes.

5Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored on secure cloud infrastructure
• Password Security: Passwords are hashed using industry-standard algorithms
• Regular Audits: Periodic security reviews and updates

6Your Rights and Choices

6.1 Access and Portability

You can access your personal data through your account settings. You may request a copy of your data by contacting us.

6.2 Correction

You can update your account information at any time through the app settings.

6.3 Deletion

You can delete your account through settings or by contacting us. This will remove your personal data as described in Section 4.

6.4 Communication Preferences

You can:

• Disable push notifications in your device settings
• Disable email reminders in your account settings
• Unsubscribe from marketing emails using the link provided

6.5 Audio Recordings

You can delete individual speaking practice recordings through the app, or request deletion of all recordings by contacting us.

7International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws.

When we transfer data internationally, we use appropriate safeguards such as:

• Standard contractual clauses
• Data processing agreements
• Compliance with applicable transfer mechanisms

8Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If you believe we have collected information from a child under 18, please contact us immediately, and we will delete such information.

9European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

9.1 Legal Basis for Processing

We process your data based on:

• Contract: To provide the Service you requested
• Legitimate Interests: To improve and secure the Service
• Consent: For optional features like marketing communications

9.2 Additional Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

9.3 Exercising Your Rights

To exercise these rights, contact us at privacy@avilingo.net. We will respond within 30 days.

9.4 Data Protection Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

10California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You can request information about:

• Categories of personal information collected
• Sources of personal information
• Purpose for collecting information
• Categories of third parties with whom we share information
• Specific pieces of personal information collected

10.2 Right to Delete

You can request deletion of your personal information, subject to certain exceptions.

10.3 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

10.4 Do Not Sell

We do not sell personal information as defined by the CCPA.

10.5 Exercising Your Rights

To exercise your CCPA rights, contact us at privacy@avilingo.net.

11Cookies and Tracking

11.1 Cookies We Use

Our website uses cookies for:

• Essential Cookies: Required for the website to function
• Authentication: Keeping you logged in
• Preferences: Remembering your settings
• Analytics: Understanding how you use our website

11.2 Managing Cookies

You can manage cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

11.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals.

12Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

13Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

14Contact Us

For questions or concerns about this Privacy Policy or your personal data: