Privacy Policy

1. Introduction

NomadLingo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our language learning platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide to Us

We collect the following information that you provide directly:

• Account Information: Email address and name (collected through Google OAuth authentication)
• Profile Information: Native language, country/location, and language proficiency level
• Communication Data: When you contact us for support or inquiries

2.2 Automatically Collected Information

When you access our Service, we automatically collect:

• Usage Data: Information about how you interact with our Service, including pages visited, features used, and time spent
• Device Information: Browser type, operating system, IP address, and device identifiers
• Cookies and Similar Technologies: See section 8 for detailed information

2.3 Information from Third Parties

• Google OAuth: Basic profile information (name, email, profile picture) when you sign in with Google
• Payment Processors: Payment and billing information processed through Stripe (we do not store your full credit card details)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our language learning platform
• Personalization: To curate and deliver news content adapted to your language level and preferences
• Communication: To send you service updates, daily news digests, and respond to your inquiries
• Account Management: To manage your account, process payments, and provide customer support
• Analytics: To understand how users interact with our Service and improve user experience
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with applicable laws and regulations

4. Email Communications

By creating an account, you consent to receive emails from us, including:

• Transactional Emails: Account confirmations, password resets, billing notifications (you cannot opt out of these)
• Service Emails: Daily or periodic news content based on your language learning preferences
• Marketing Emails: Product updates, new features, and promotional offers (you can opt out at any time)

You can manage your email preferences in your account settings or by clicking "unsubscribe" in any marketing email.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database and authentication services
• Google: Authentication (OAuth) and AI services (Gemini API)
• Stripe: Payment processing
• Email Service Provider: Gmail SMTP for sending emails
• Hosting Provider: Render.com for application hosting
• Redis/BullMQ: Background job processing

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you wish to delete your account, please contact us at [email protected].

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/SSL
• Secure authentication via Google OAuth
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for authentication and basic functionality (Supabase session cookies)
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Opt out of marketing communications
• Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy.

12. Third-Party Links

Our Service may contain links to third-party websites or services (such as news sources). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We will also send you an email notification for significant changes. Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]