Privacy Policy

Linguaio is an online language-learning platform that combines self-study and one-on-one lessons with teachers under a single methodology (the "Platform"). This Privacy Policy describes what personal data the Platform operator ("we") processes, for what purposes, to whom it may be disclosed, and what rights you — a student or a teacher ("you") — have.

By using the Platform, you confirm that you have read this Policy. If you do not agree with its terms, please do not use the Platform.

Account data. Email, name, password (stored only as a cryptographic hash), interface language, avatar, time zone. When you sign in through third-party services (for example, Google, VK ID, or Mail.ru), we receive your name, email, and profile photo from the sign-in provider, within the permissions you grant.

Learning data. Selected languages and courses, current level (CEFR) and goals; progress across lessons, topics, and modules; your personal dictionary, flashcards, and review schedule; results of exercises and assessments; lesson streak and achievements; lesson schedule and history; homework, including written and audio answers, and its grades; issued certificates.

Teacher data. Public profile (name, photo, description, languages, courses, and specialization), education documents and certificates uploaded to verify qualifications; schedule and availability; statistics of completed lessons and accruals; payout details (banking, PayPal, PIX, or other — depending on the chosen method).

Payment data. History of purchases of lessons, packages, and subscriptions; invoices, payment, refund, and dispute statuses; country, region, and settlement currency; balance of paid lessons. Full bank card details are processed by payment providers on their side; we do not store the full number of your payment card.

Communications. Messages in chats with your teacher and support, support requests, notifications and their settings by event type.

Technical data. IP address, device, browser, and operating system type, log of active sessions (device, time of last activity), cookies and similar technologies (see the Cookie Policy for details), error logs and security event logs.

• directly from you — during registration, profile completion, onboarding, and learning;
• automatically — when you use the Platform (progress, technical data, session logs);
• from sign-in providers (for example, Google, VK ID, or Mail.ru) — when you authorize through them;
• from payment providers — payment and refund statuses (without full card details);
• from teachers and administration — homework grades, lesson records, document verification results.

Performance of the contract with you: creating and maintaining your account; building a personal plan and tracking progress; selecting reviews and materials; booking, conducting, rescheduling, and cancelling lessons; homework; issuing certificates; processing payments and payouts; support.

Legitimate interest: security of accounts and the Platform (session log, protection against fraud and abuse), improving the product based on anonymized analytics, protecting our rights.

Consent: marketing communications (only if you have enabled them in your settings; you may withdraw at any time), certain types of cookies, if required by your jurisdiction.

Legal obligation: retention of payment and accounting records, responding to lawful requests from government authorities.

A key feature of the Platform is that the teacher continues your learning journey. Therefore, the teacher you study with has access to: your name, current level and course, learning progress and topics that need attention, the history of your shared lessons, homework, and your correspondence with them. The teacher does not have access to your payment details, password, or correspondence with other teachers.

Students, in turn, can see the teacher's public data: profile, specialization, and — if the teacher has enabled their visibility — verified certificates.

We use strictly necessary cookies (authentication, session, security), functional cookies (interface language and display settings), and anonymized analytics. A detailed description and management options are available in the Cookie Policy at /cookies.

We do not sell personal data and do not share it with advertising networks. Only the following may have access to data:

• the teacher you study with — to the extent described in Section 5;
• infrastructure providers: hosting and databases, file storage, video calling for lessons, email services for sending letters, generation of audio for learning materials;
• payment providers — to process payments, refunds, and payouts;
• professional advisors (lawyers, auditors) — where necessary and under confidentiality obligations;
• government authorities — only where there is a lawful basis.

With all providers that process personal data on our behalf, data processing agreements are concluded.

The Platform is international: students, teachers, and the servers of infrastructure providers may be located in different countries. When transferring data outside your jurisdiction, we apply recognized protection mechanisms — contractual data-protection clauses and the selection of providers with an adequate level of security.

• encryption of connections (TLS) and storage of passwords only as hashes;
• access control at the level of roles and data access policies (including row-level database policies);
• a private file storage for teachers' documents and students' work: access only via temporary signed links;
• a log of active sessions with the ability to terminate any of them in settings; a password change is confirmed by a code sent to email and terminates the other sessions;
• two-factor authentication and action logging for staff with administrative access;
• regular backups.

No system can guarantee absolute security, but we apply measures consistent with industry practice and continually improve them.

• account data and learning progress — for as long as the account is active;
• chat correspondence — for as long as the account is active, unless you requested deletion earlier;
• payment and accounting records — for the periods established by tax and accounting legislation (as a rule, up to 10 years);
• session logs and technical logs — for a limited period necessary for security;
• teachers' documents — for the duration of the cooperation and the period established by law after its end.

After the periods expire, data is deleted or irreversibly anonymized.

Depending on your jurisdiction (including the GDPR for the European Economic Area and the LGPD for Brazil), you have the right to:

• obtain confirmation of processing and a copy of your data;
• correct inaccurate data — most of it is editable in settings;
• delete your account and associated data ("right to be forgotten");
• restrict processing or object to it;
• receive your data in a portable format;
• withdraw consent (for example, to marketing emails) — in settings or upon request;
• lodge a complaint with the data protection supervisory authority of your country.

To exercise your rights, write to us via the "Contacts" section or at legal@linguaio.com. We will respond within a reasonable time and may ask you to confirm ownership of the account.

Service notifications (lesson reminders, schedule changes, reviewed homework, confirmation codes) are part of how the Platform works and are always sent. Marketing emails are sent only when the "Marketing emails" setting is enabled; you can disable them in settings with a single click.

The Platform is not intended for independent registration by children under the age of 16. Lessons for minors are possible only with the consent and under the supervision of a parent or legal guardian, who creates the account and accepts the Platform's terms. If you believe that a child has provided us with data without such consent, contact us — we will delete it.

We may update this Policy as the Platform evolves. A version history is kept; the effective date of the current version is indicated at the beginning of the document. We will additionally notify you of material changes in the interface or by email.

Questions about personal data and the exercise of rights: legal@linguaio.com. General inquiries: hello@linguaio.com or the "Contacts" section. Inquiries from students and teachers are also accepted via the support chat within the Platform.