1. Who is responsible for your information
DoThisLingo is operated by WorkBeaver Limited, registered in England and Wales under company number 15911663. Our registered office is First Floor, 5 Fleet Place, London EC4M 7RD, United Kingdom. WorkBeaver Limited is the controller of personal information processed to operate DoThisLingo, except where another provider acts as an independent controller for its own services.
For privacy questions or requests, email [email protected] or write to our registered office. This notice covers our website and language-learning app. The service is intended for adults aged 18 or over.
2. Information we handle
- Account information: your email, account identifier, sign-in and verification information, and profile details supplied by a sign-in provider if you choose that method.
- Learning information: your selected languages, preferences, lesson progress, completed lessons, rewards, and saved learning activity.
- Text and conversations: text submitted for translation, translation results and history, teacher questions and replies, and the context needed to respond. Submitted teacher questions may be saved even if generating the reply fails.
- Purchase information: customer, transaction and subscription identifiers, purchase status, purchased allowances, balances, and renewal or expiry information. Paddle collects payment and billing details directly; we do not collect or store your full payment-card number or security code.
- Technical and support information: information you send when contacting us, request identifiers, error categories, timing and usage records, and information used by our hosting and security providers to deliver and protect their services. Those providers may receive your IP address and browser information.
3. Why we use it
We use account, learning, submitted-text, and purchase information to provide the service you request and administer your account and purchases. Our legal basis is performance of our contract with you, or steps you request before entering a contract.
We also process limited operational information to maintain reliability, prevent abuse, investigate failures, and answer support requests. We rely on our legitimate interests in running a secure, reliable service, balanced against your rights. Where required, we process transaction or other records to meet legal obligations and establish or defend legal claims. If a particular optional use requires consent, we will ask separately and explain how to withdraw it.
Information needed to sign in or fulfil a request is necessary for that feature; without it, we may be unable to provide that feature. We do not use learning activity to make decisions producing legal or similarly significant effects about you.
4. Providers and generated content
We share the information necessary for each provider to perform its role:
- Cloudflare: website hosting, content delivery, and security.
- Supabase: authentication, account storage, synchronisation, and server-side application functions.
- Google Cloud: processing submitted text and relevant context to generate lessons, translations, and teacher responses. Context can include your selected languages, the topic being studied, and recent exchanges needed to answer a question.
- Paddle: purchases, subscriptions, taxes, receipts, fraud prevention, and payment support. Paddle also processes transaction information for its own obligations under its Privacy Notice.
If you sign in with Google, Google also handles that sign-in under its own privacy terms. Service providers may use supporting subprocessors. We may disclose information where required by law, to protect legal rights or safety, or in connection with a business transfer subject to applicable data-protection requirements.
Complete generated lessons can be available to other learners. Your teacher conversations and translation history remain private to your account within the app; they are not published in the shared lesson library. Necessary provider processing and authorised support or security access still apply. Do not include sensitive personal details that are unnecessary for learning.
Provider handling and retention are subject to the applicable service terms. We do not promise that provider processing involves no retention or human access.
5. Storage on your device
The app uses local storage, IndexedDB, and browser caches to keep sign-in state, preferences, local learning progress, pending synchronisation, and downloaded lesson and app content. Guest activity can remain on your device; signing in can associate eligible local activity with your account. Account data is separated by account on the device.
Signing out clears account-scoped local private data as part of the sign-out process. Saved teacher conversations are stored with your account; an offline copy of the full conversation history is not provided. Browser settings can remove site data, but doing so can remove unsynchronised progress and downloaded content and does not delete server-side account data.
The app does not currently include advertising trackers or product-analytics tracking. Hosting, sign-in, and payment providers may use cookies or similar technologies for their own essential service and security functions.
6. Retention and deletion
We retain account and learning information while your account is active and as needed to provide the requested features. You can delete saved teacher conversations through their history controls or delete your account through Account → Account data. Account deletion removes associated learning documents and teacher conversations.
Limited billing identifiers and transaction-related records can remain after deletion to handle delayed payment events, prevent duplicate fulfilment, resolve disputes, and meet legal obligations. Paddle retains its own records under its policies. Public lesson material is shared service content and is not removed simply because the account that first requested it is deleted.
Operational records are retained according to their purpose, including security investigation, troubleshooting, and usage accounting. Restricted diagnostic logs can include short excerpts of submitted or generated text when needed to investigate validation failures; we do not routinely log complete conversations or translations. Retention depends on the applicable operational need, provider settings, legal requirements, and dispute periods. Residual copies may remain in backups until the provider’s normal backup lifecycle removes them.
7. Security and international processing
We use access controls, account-based permissions, and secure connections to protect personal information. No service or storage system can guarantee absolute security.
Our providers and their subprocessors may process information outside the United Kingdom, including in countries with different data-protection laws. The transfer arrangements depend on the provider and service. Provider data-processing terms describe applicable protections, which may include adequacy arrangements or standard contractual clauses with a UK addendum where required. Contact us for information about the arrangements applicable to your data. We do not promise UK-only storage or processing.
8. Your rights and choices
Depending on applicable law, you may request access to your personal information, correction, deletion, restriction, or a portable copy. You may also object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights have conditions and exceptions, including where we must retain information by law.
Email [email protected] with your request. We may need proportionate information to confirm your identity and will respond within the period required by applicable law. You do not need to delete your account to ask about your information.
You can complain to the UK Information Commissioner’s Office (ICO) or, where applicable, your local supervisory authority. You may contact us first, but this does not limit your right to complain directly.
9. Age limits and updates
DoThisLingo is not intended for anyone under 18. If you believe a person under 18 has provided personal information, contact [email protected] so we can investigate and take appropriate action.
We may update this notice as the service changes. The effective date appears above. We will give additional notice of material changes where required.