Privacy Policy

1. Introduction

Zollang ("we," "us," or "our") is an AI-powered language learning platform. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, applications, and services. We are committed to protecting your privacy and handling your data with transparency.

2. Information We Collect

We collect the following types of information:

a) Account Information

When you create an account, we collect your email address, name, and authentication credentials. If you sign in through a third-party provider (such as Google), we receive basic profile information from that provider.

b) Learning Profile

We collect your language learning preferences, including your target language, knowledge level, learning style, weekly goals, and preferred study times.

c) Learning Activity Data

As you use Zollang, we track your vocabulary progress (including spaced repetition parameters such as ease factor, review intervals, and mastery levels), word forms encountered, review history, learning streaks, and daily goals completion.

d) User-Submitted Content

When you create lessons, you may submit text content such as song lyrics, articles, or book excerpts. This text is processed by our AI systems to generate your personalized lessons.

e) AI Tutor Session Data

When you use the AI tutor voice conversation feature, we record session metadata such as duration and vocabulary words you produced, and we store a text transcript of the conversation to support your learning progress. We do not store recordings of your voice — audio is processed in real time and never saved.

f) Usage Data

We collect product analytics about how you use the platform: screens visited, features used, device type, app version, and an approximate region derived from your IP address on our own servers (the IP address itself is never stored with analytics data). These events are stored on our own servers, linked to your account, and never include the content of your lessons. Whether they are collected depends on where you use the service:

• Mobile app: product analytics is on by default, on the basis of our legitimate interest in understanding how the app is used so that we can fix problems and improve it. You can switch it off at any time with the "Usage data" toggle in the app's Settings: the app then stops sending these events straight away and discards any it has not sent yet. Your choice is saved on that device, so switch it off on each device you use. The mobile app does not record session replays. Class accounts follow the classrooms section at the end of this page.
• Website: product analytics linked to your account, and session replay, run only with your consent (see Section 9). If you decline analytics consent — or make no choice — they are not collected or stored. We also collect anonymous statistics from every visitor, with or without consent: the same kind of events, but with no cookies and nothing stored on your device, a session identifier kept only in the open page's memory, no link to your account, a country and region derived from your IP address without storing it, and known bots filtered out (see Section 9).

Error and crash reports are collected separately to keep the service working (see Section 6).

g) Payment Information

Payments on the website are handled by our payment processor; subscriptions bought in the mobile app are paid through your phone's app store. Zollang does not directly store your credit card numbers or full payment details. We retain transaction records such as plan type, billing dates, and payment status.

h) Support Requests

When you contact support, we collect your name, email address, and the subject and text of your message, together with the IP address and browser user agent of the submission, which we retain to prevent abuse and to diagnose problems.

i) Advertising Data (with your consent)

If you allow advertising cookies on the website, we use advertising cookies and similar technologies to measure and personalise our advertising. Data such as device and cookie identifiers, the pages you view on our website and conversion events (for example, that an account was created or a purchase was completed) is shared with our advertising partners: advertising platforms such as social networks, search engines and other online advertising services. Without that consent, none of these technologies are loaded (see Section 9).

j) Sign-up Source

When you create an account on the website, we record where your visit came from: the campaign tags in the link you followed (such as utm_source or utm_campaign), whether an advertising click identifier was present (not the identifier itself), the website that referred you (its domain only), and the page you first landed on. We use this to understand which of our marketing channels bring new learners, on the basis of our legitimate interest in measuring our advertising. Nothing is stored on your device for this before you sign up, and it is not shared with our advertising partners. It is kept with your account and deleted when your account is deleted.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our language learning services
• Personalize your learning experience based on your profile and progress
• Generate AI-powered lessons, vocabulary analysis, and aligned translations from your submitted content
• Schedule and manage spaced repetition reviews for your vocabulary
• Generate text-to-speech audio for pronunciation practice
• Facilitate real-time AI tutor voice conversations
• Process payments and manage your subscription
• Send you email about your account. Receipts, security alerts, support replies and other service messages are part of providing the service. A welcome message, study reminders, lesson updates and product news are sent on the basis of our legitimate interest in helping you keep learning; each of them carries a one-click unsubscribe link and can be switched off under Settings → Email preferences. Offers and promotions are sent only if you opt in
• Analyze usage patterns to improve the platform
• With your consent, measure and personalise our advertising on the website (see Section 9)
• Enforce our Terms and Conditions and protect against misuse

4. AI Data Processing

Zollang uses third-party AI services to power its language learning features. Here is how your data is processed by AI:

• Text analysis: When you submit text for a lesson, it is sent to our AI service providers for linguistic analysis, vocabulary extraction, and sentence alignment
• AI tutor: Voice conversations are sent in real time to our AI providers so the tutor can answer. On supported phones, what you say in a voice conversation may also be turned into text on your phone first; the recording still reaches our servers, and our speech recognition providers turn it into text when the phone can't. Voice data is not permanently stored by Zollang
• Text-to-speech: Text is sent to our text-to-speech providers to generate audio pronunciations. Generated audio is cached on our servers for performance
• Speaking in lessons: When you say a sentence out loud in a lesson, what you said is turned into text on your phone first (on supported phones), and on our servers by one of our speech recognition providers when the phone can't or a re-check is needed. The text is then graded on our servers. The section "Your voice in lessons" below explains when each happens

Section 6 explains how long these providers may keep data, and how to ask us for the current list of them.

5. Confidentiality of Your Data

We take the confidentiality of your data seriously:

• User content is private: Text you submit for lessons is treated as confidential. It is not shared with other users, not used for marketing purposes, and not sold to third parties
• Learning data is personal: Your vocabulary progress, review history, mastery levels, and learning streaks are private to your account and not visible to other users
• AI processing is service-only: Your data is sent to AI providers solely for the purpose of delivering Zollang's learning features. Zollang does not use your content to train AI models
• Access is restricted: Access to user data within our organization is limited to personnel who require it for service operation, and all such personnel are bound by confidentiality obligations
• Data is isolated: Each user's data is logically separated. There is no cross-user data access within the platform
• Breach notification: In the event of a data breach that affects your personal information, we will notify affected users promptly in accordance with applicable law

6. Service Providers

We use service providers to run Zollang. They handle your data on our behalf, only to provide their service to us:

• Hosting and database — Running our servers and storing your account, sign-in details and learning data
• Storage and content delivery — Storing and delivering media such as lesson audio, images and files you upload
• Payment processing — Payments on the website, and keeping track of subscriptions bought in the mobile app through your phone's app store. For app subscriptions only an account identifier and your purchase history are used, never your email address or your content
• AI language providers — Text analysis, the AI tutor, and content generation
• Speech recognition providers — Turning what you say into text, in speaking practice and in voice conversations with the AI tutor, when your phone does not do it first or a re-check is needed. They also check that the audio we generate says the right words
• Text-to-speech providers — Audio generation: the pronunciations, lesson audio and AI tutor voice you hear
• Video transcripts — When you import a lesson from a YouTube video, the video's public link is sent to a transcript service to fetch its transcript. No account information and nothing you wrote is included in that request
• Website analytics — Session replay on the website, only if you consent to analytics. Replays mask all text you see and type; they capture page structure and interactions, not your content. Anonymous page-view counts, with no cookies and no link to you, are collected for every visitor (see Section 9)
• Advertising partners — advertising platforms such as social networks, search engines and other online advertising services, only if you allow advertising cookies on the website (see Section 9)
• Error reporting — Error and crash reports, processed in the EU, so we can find and fix failures
• Email delivery — Support replies and the account emails described in Section 3. Our email provider keeps its own log of the messages it sends for us — the recipient address, the subject and body of each message and, for support notifications, the name, email address, and message text you submitted — under its own retention policy; deleting your account or support ticket removes our copy but not the provider's copy of emails already sent
• Push notifications — On the mobile app, only if you allow them: the push service holds the device token for your app installation and short-lived logs of the notifications we send through it — the title, the body and whether delivery succeeded — under its own retention policy. The token identifies an app installation rather than you; deleting your account removes our copy of it, and signing out asks us to remove it so notifications stop

We describe our service providers by what they do rather than by name. Some of them process data outside the EU, including in the United States, under Standard Contractual Clauses or the EU–US Data Privacy Framework. Our AI and speech providers use your data only to provide their service to us; most of them do not use it to train their models, and keep it only for a limited time (usually up to 30 to 55 days) to check for abuse and fix problems; content flagged for abuse may be kept longer. You can ask us for the current list of these service providers at privacy@zollang.com.

Your approximate location (country and region) is worked out from your IP address on our own servers; your IP address is not sent to anyone for this. Each provider above processes data only for the purposes described and in line with applicable data protection law.

7. Data Sharing

We do not sell your personal information. We may share information with:

• The service providers described above, solely for delivering our services
• Law enforcement or government authorities when required by law or to protect our legal rights
• A successor entity in the event of a merger, acquisition, or sale of assets

We may share aggregated or anonymized data that cannot reasonably identify you for analytics, research, or business purposes.

8. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Vocabulary and learning progress: Retained as long as your account exists to maintain your learning history
• Product analytics events: Automatically deleted after 180 days
• Text-to-speech audio: Cached on our servers for performance optimization
• AI tutor session metadata and transcripts: Retained to support your learning progress tracking
• Email delivery records: A record of each account email we send you (which message, when, and whether it was delivered) is kept while your account exists and is deleted with the account, together with your email preferences
• Unsubscribe and bounce list: Addresses we must not mail again — after an unsubscribe, a bounce or a spam report — are kept as a one-way hash of the address, never the address itself, and that hash is kept after your account is deleted, because honouring the unsubscribe is itself our obligation
• Deleted accounts: When you delete your account, it enters a 30-day grace period during which you can sign back in and cancel the deletion. After the grace period your personal data is permanently deleted from our systems, including your analytics events, support tickets, and stored content

9. Cookies and Similar Technologies

On the website, we use cookies and similar technologies in three categories, alongside anonymous statistics that use neither:

• Essential (always active): sign-in cookies that keep you signed in, your language preference, your cookie-consent choice itself, and local storage for preferences such as theme settings
• Anonymous statistics (always active, no cookies): our own statistics and anonymous page-view counts from our website host run for every visitor. They set no cookies and store nothing on your device. Our session identifier exists only in the open page's memory and ends when the page is closed or reloaded; the events are not linked to your account; your country and region are derived from your IP address without storing it; known bots are filtered out; and the events are deleted after 180 days. No anonymous statistics are collected on the pages students use to join a class or work in it
• Analytics (only with your consent): if you choose "Consent" in the cookie banner, or switch on "Session replay & analytics" in the cookie settings, we link product analytics to your account and to a per-tab session identifier kept in your browser's session storage, and turn on session replay and its cookies. If you choose "Essential only" — or make no choice — none of these are set, and only the anonymous statistics above are collected
• Advertising (only with your consent): if you choose "Consent" in the cookie banner, or switch on "Advertising" in the cookie settings, we load advertising tags from our advertising partners — advertising platforms such as social networks, search engines and other online advertising services. They use cookies and similar identifiers to measure how our ads perform (for example, whether a visit from an ad led to a sign-up or a purchase) and to personalise our advertising. Data such as device and cookie identifiers, the pages you view on our website and these conversion events is shared with those partners. They may act as independent controllers, or as joint controllers with us for this collection, and may process the data outside the EEA, including in the United States, under appropriate safeguards (the EU–US Data Privacy Framework or standard contractual clauses). If you choose "Essential only" — or make no choice — none of these tags are loaded

We use advertising cookies only with your consent. You can change your choice at any time via "Cookie settings" in the website's footer or on the website's Settings page; withdrawing consent stops the consent-based analytics and advertising tags and removes the analytics cookies.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS)
• Security headers on our website
• Access controls and authentication on our systems
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

You can exercise the access and portability rights directly: Settings → "Download my data" on the website downloads everything we hold about you as a JSON file, and account deletion is available in the same Settings area. On the website you can give or withdraw analytics consent at any time via "Cookie settings"; in the mobile app you can switch product analytics off, or back on, with the "Usage data" toggle in Settings (see Section 2f). You can choose which account emails you receive under Settings → Email preferences on the website and in the app, and every non-essential email carries a one-click unsubscribe link that works without signing in. Receipts, security alerts and other account-service emails cannot be switched off while you have an account. For anything else, contact us at privacy@zollang.com.

12. International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate (see Section 6). By using Zollang, you consent to the transfer of your data to these locations. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

13. Children's Privacy

Zollang is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at privacy@zollang.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We may also send a notification to the email address associated with your account for significant changes. Continued use of the service after changes have been posted constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@zollang.com.