Privacy Policy

Last updated: April 14, 2026

1. Introduction

LangPass ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered language learning platform (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, display name, and password (hashed) when you create an account.
  • Profile Data: Target exam, target language, UI language preference.
  • Learning Content: Your answers to practice questions, writing essays, speaking transcripts submitted for scoring.
  • Payment Information: Processed by PayPal. We do not store your credit card numbers or banking details.
  • Communications: Any messages you send to us via support channels.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, questions answered, scores, XP earned, streak data.
  • Device Information: Browser type, operating system, screen resolution, language setting.
  • Log Data: IP address, access times, referring URLs.
  • Cookies: Session cookies for authentication. See Section 7 for details.

2.3 Information from Third Parties

  • Google Sign-In: If you sign in with Google, we receive your name, email, and profile picture from Google. We do not access your Google contacts, calendar, or other data.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To generate personalized practice questions and learning recommendations.
  • To score your writing and speaking submissions using AI.
  • To track your learning progress, XP, and streaks.
  • To process payments and manage subscriptions.
  • To send essential service communications (account verification, billing, security).
  • To analyze usage patterns and improve our AI coaching system.
  • To comply with legal obligations.

We do NOT:

  • Sell your personal data to third parties.
  • Use your data for targeted advertising.
  • Share your learning content with other users.
  • Use your essays or speaking transcripts to train AI models.

4. AI Processing

Our Service uses artificial intelligence (via Anthropic Claude API and Google AI) to:

  • Generate practice questions and learning materials.
  • Score your writing and speaking responses.
  • Provide personalized coaching and feedback.

Your inputs (questions, essays, transcripts) are sent to AI service providers for processing. These providers process data according to their respective privacy policies but do not use your data to train their models when accessed through their API services.

AI-generated scores and feedback are estimates and should not be considered official test scores.

5. Data Sharing and Disclosure

We share your data only with:

  • AI Service Providers: Anthropic (Claude API) and Google (Imagen/Gemini) for AI features.
  • Payment Processors: PayPal for subscription billing.
  • Hosting Providers: Render (hosting), MongoDB Atlas (database).
  • Legal Requirements: When required by law, court order, or governmental authority.

All service providers are contractually bound to protect your data and use it only for providing their services to us.

6. Data Retention

  • Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
  • Learning Data: Chat history and progress retained while your account is active.
  • Payment Records: Retained for 7 years as required by tax regulations.
  • Log Data: Automatically deleted after 90 days.

7. Cookies

We use the following cookies:

  • Authentication Cookies: Essential for keeping you logged in (session cookies). These are strictly necessary and cannot be disabled.
  • Preference Cookies: Store your UI language and display settings.

We do NOT use advertising cookies, tracking cookies, or third-party analytics cookies.

8. Your Rights

Depending on your location, you may have the following rights:

For All Users

  • Access: Request a copy of your personal data.
  • Correction: Update or correct inaccurate data.
  • Deletion: Request deletion of your account and data.
  • Export: Download your learning data in a portable format.

For EU/EEA Users (GDPR)

  • Right to restriction of processing.
  • Right to object to processing.
  • Right to data portability.
  • Right to lodge a complaint with a supervisory authority.
  • Legal basis for processing: contract performance (providing the Service) and legitimate interests (improving the Service).

For California Users (CCPA/CPRA)

  • Right to know what personal information is collected.
  • Right to delete personal information.
  • Right to opt-out of sale of personal information. Note: We do NOT sell personal information.
  • Right to non-discrimination for exercising privacy rights.

For Korean Users (PIPA)

  • Right to access, correct, delete, and suspend processing of personal data.
  • Cross-border transfer notice: Your data may be transferred to servers in the United States for processing.

To exercise any of these rights, contact us at privacy@lang-pass.com.

9. Children's Privacy

Our Service is not intended for children under 13 years of age (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

10. Data Security

  • All data transmitted between your browser and our servers is encrypted using TLS/SSL.
  • Passwords are hashed using industry-standard algorithms.
  • Database access is restricted and monitored.
  • We conduct regular security reviews of our systems.

While we implement reasonable security measures, no system is 100% secure. We cannot guarantee absolute security of your data.

11. International Data Transfers

Your data may be processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@lang-pass.com