Legal

Privacy Policy

> Template — standard draft provided for convenience. Have legal counsel review and finalise before public launch.

Who we are

Lingva is a language-learning subscription service operated by Demystify Systems ("we", "us"), based in India. This policy explains what personal data we collect when you use the Lingva website and app, why we collect it, where it is stored, and the rights you have over it.

Data we collect

We collect only what we need to run the service:

Account details — your email address and the name you choose to display, collected when you sign up or sign in.
Learning progress — the lessons you open, quizzes you attempt, scores, XP, streaks and level completion, so the app can resume where you left off and show your progress.
Analytics events — product events such as lesson opened, quiz completed or plan viewed, used in aggregate to understand which features help learners.
Support messages — anything you send us through the in-app support inbox, so we can reply and keep a record of the conversation.
Billing records — your subscription plan, payment status and invoices. Card details are processed by our payment provider and never touch our servers.

We do not collect precise location, contacts, or anything from your device beyond what is listed above.

Why we use your data

To provide the service: signing you in, saving progress, syncing across devices.
To bill your subscription and send payment receipts.
To answer support requests.
To improve the product using aggregated, de-identified usage analytics.
To keep the service secure and prevent abuse.

We do not sell your personal data, and we do not use it for third-party advertising.

Where your data is stored

Your data is stored in our Supabase cloud database and storage, protected by row-level security so each learner can only access their own records. Access inside our team is limited to staff who need it to operate the service. Data is encrypted in transit and at rest by our hosting providers.

Sharing

We share personal data only with the service providers required to run Lingva — cloud hosting (Supabase), payment processing, and email delivery — each bound to process data only on our instructions. We may also disclose data where Indian law requires it. There is no other sharing.

Your rights

In line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), you can:

Access — ask for a summary of the personal data we hold about you.
Correction — ask us to correct inaccurate or incomplete data; your name and email can be edited directly in Settings.
Erasure — ask us to delete your account and associated personal data, subject to records we must keep by law (for example tax records of payments).
Grievance redressal — raise a complaint about how your data is handled; we will acknowledge and respond within the timelines set by the DPDP Act.
Nominate — nominate another person to exercise these rights on your behalf as the DPDP Act provides.

To exercise any of these rights, contact us through the in-app support inbox (Account → Support) or the contact details published on our website.

For visitors in the EU / EEA / UK (GDPR)

If you use Lingva from the European Union, EEA or United Kingdom, the GDPR / UK GDPR also applies and Demystify Systems acts as the data controller for your personal data.

Lawful bases. We process your data to *perform our contract* with you (providing the service and billing your subscription), on the basis of our *legitimate interests* (securing the service and improving it with aggregated analytics), to meet *legal obligations* (e.g. tax records), and on your *consent* where you have given it (which you may withdraw at any time).
Your additional rights. Beyond access, correction and erasure, you may request portability of the data you provided (in a machine-readable form), object to processing based on legitimate interests, and ask us to restrict processing while a request is reviewed.
International transfers. Our processors may store or process data outside your country, including in India. Where required, such transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Complaints. You have the right to lodge a complaint with your local data-protection supervisory authority.

Cookies and local storage

We use a small number of strictly necessary cookies and browser storage entries: your sign-in session, your language and course preferences, and offline lesson data that makes the app work as a PWA without a connection. We do not use third-party advertising cookies.

Retention

We keep your data while your account is active. If you delete your account, personal data is removed or de-identified within a reasonable period, except billing records retained to meet legal obligations.

Children

Lingva is intended for users aged 18 and over, or younger learners with verifiable parental consent as required by the DPDP Act.

Changes to this policy

We may update this policy as the product or the law changes. Material changes will be announced in the app, and the date below always reflects the latest revision.

Contact

Questions about privacy? Reach us through the in-app support inbox (Account → Support) or the grievance contact published on our website. We aim to respond promptly to every request.

Last updated July 11, 2026

Data we collect

We collect only what we need to run the service:

Account details — your email address and the name you choose to display, collected when you sign up or sign in.

Learning progress — the lessons you open, quizzes you attempt, scores, XP, streaks and level completion, so the app can resume where you left off and show your progress.

Analytics events — product events such as lesson opened, quiz completed or plan viewed, used in aggregate to understand which features help learners.

Support messages — anything you send us through the in-app support inbox, so we can reply and keep a record of the conversation.

Billing records — your subscription plan, payment status and invoices. Card details are processed by our payment provider and never touch our servers.

We do not collect precise location, contacts, or anything from your device beyond what is listed above.

Why we use your data

To provide the service: signing you in, saving progress, syncing across devices.

To bill your subscription and send payment receipts.

To answer support requests.

To improve the product using aggregated, de-identified usage analytics.

To keep the service secure and prevent abuse.

We do not sell your personal data, and we do not use it for third-party advertising.

Your rights

In line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), you can:

Access — ask for a summary of the personal data we hold about you.

Correction — ask us to correct inaccurate or incomplete data; your name and email can be edited directly in Settings.

Erasure — ask us to delete your account and associated personal data, subject to records we must keep by law (for example tax records of payments).

Grievance redressal — raise a complaint about how your data is handled; we will acknowledge and respond within the timelines set by the DPDP Act.

Nominate — nominate another person to exercise these rights on your behalf as the DPDP Act provides.

To exercise any of these rights, contact us through the in-app support inbox (Account → Support) or the contact details published on our website.

For visitors in the EU / EEA / UK (GDPR)

If you use Lingva from the European Union, EEA or United Kingdom, the GDPR / UK GDPR also applies and Demystify Systems acts as the data controller for your personal data.

Lawful bases. We process your data to *perform our contract* with you (providing the service and billing your subscription), on the basis of our *legitimate interests* (securing the service and improving it with aggregated analytics), to meet *legal obligations* (e.g. tax records), and on your *consent* where you have given it (which you may withdraw at any time).

Your additional rights. Beyond access, correction and erasure, you may request portability of the data you provided (in a machine-readable form), object to processing based on legitimate interests, and ask us to restrict processing while a request is reviewed.

International transfers. Our processors may store or process data outside your country, including in India. Where required, such transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Complaints. You have the right to lodge a complaint with your local data-protection supervisory authority.