Privacy Policy

Last updated: 9 November 2026

This policy explains what personal data 2Lingua ("we", "us") collects when you use 2lingua.com and the 2Lingua app, why we collect it, who we share it with and the choices you have.

1. Who is responsible

2Lingua, operating the website 2lingua.com, is the controller of the personal data described here. You can reach us at any time through our contact page.

2. Data we collect

When you create an account

• Account details: your email address, a display name and your password, which we store only as a salted one-way hash.
• Learning settings: the language you're learning, your native language, level, daily goal and time zone.
• Learning activity: lessons, stories, podcasts and reviews you complete, XP, streaks, league results, achievements, your vocabulary cards, and the transcripts and report cards of your conversations with Lina.
• Social features: friends you add with a friend code, friend quests, friend streaks and nudges. Your display name and weekly XP are visible to members of your league unless you turn the leaderboard off in your profile.
• Subscription data: your plan, subscription status and renewal date, and the customer and subscription IDs Paddle gives us. We never receive or store your card details.
• Usage data: how many minutes of voice conversation you use each day and how many AI tokens your conversations use, so we can apply the plan limits and keep costs under control.
• Security data: session records with your browser's user-agent, and short-lived records of IP addresses used to limit repeated log-in attempts.

When you visit the website

• Server logs: our hosting provider keeps standard web server logs (IP address, date, page requested, browser) for security and troubleshooting.
• Advertising data: if you consent, Google and its partners may use cookies and similar identifiers on our article pages, as described in section 5.
• Contact form: your name, email address and message, which we receive by email and use only to reply.

3. Why we use your data (legal bases)

• To provide the service you signed up for: your account, progress, conversations, leagues and friends (performance of a contract).
• To keep 2Lingua secure and prevent abuse such as password guessing or spam (legitimate interests).
• To send service emails such as password-reset links, welcome emails and payment or cancellation notices (performance of a contract).
• To send reminders and tips such as the daily practice reminder for subscribers. You can turn these off with the link in every email or on your account page.
• To process payments for subscriptions, through Paddle (performance of a contract).
• To show advertising on public article pages: personalised ads only with your consent; non-personalised ads on the basis of our legitimate interest in funding the free parts of the service.

4. Cookies

The app also stores some preferences, such as sound settings, in your browser's local storage. These never leave your device.

5. Advertising by Google

We use Google AdSense to show ads on our public pages. Google and its partners use cookies to serve ads based on your previous visits to this and other websites. Visitors in the European Economic Area, the UK and Switzerland are asked for consent through a Google-certified consent management platform before any personalised advertising cookies are used, and can change that choice at any time: Privacy settings.

You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and opt out of personalised advertising in Google Ad Settings or, for many other vendors, at youronlinechoices.eu.

We don't show ads inside lessons, conversations or other signed-in app screens.

6. Who we share data with

• Hosting: the website, database and email server run on servers provided by Namecheap, Inc., our hosting provider.
• AI conversations: to generate Lina's replies and your report cards, the conversation text and the relevant learning context (language, level and a few remembered facts) are sent to Anthropic, PBC, which provides the AI model. Anthropic processes this data on our behalf and doesn't use it to train its models.
• Payments: Paddle.com Market Limited, our reseller and merchant of record, processes subscription payments, tax and invoices. Paddle receives your email address and payment details directly and acts as an independent controller for that data; see Paddle's privacy notice.
• Advertising: Google, as described above.
• Other members: only what you choose to share through leagues and friends.
• Authorities: if we're legally required to.

We don't sell your personal data. Some of these providers are based in the United States; where data leaves the EEA we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep data

We keep your account data while your account exists. When you delete your account, your profile, progress, conversations and vocabulary are deleted immediately, and remaining copies in backups are overwritten within 30 days. Password-reset links expire after one hour. Contact-form emails are kept for up to two years.

8. Your rights

Under the GDPR and similar laws you have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can delete your account yourself in the app (Profile, then Delete account). For anything else, contact us. You also have the right to complain to your local data protection authority.

9. Children

2Lingua is not directed at children under 16, and we don't knowingly collect their personal data. If you believe a child has created an account, please contact us and we'll delete it.

10. Security

We use HTTPS everywhere, hash passwords with scrypt, store only hashed session tokens and limit repeated log-in attempts. No system is perfectly secure, so please use a unique password.

11. Changes

If we change this policy we'll update the date at the top, and for important changes we'll tell signed-in users in the app.