Langmate Privacy Policy

This Privacy Policy explains, based on the information currently recorded in our internal questionnaire, how Langmate approaches privacy and user information at this stage of the service. It now includes more detail about the categories of data we collect and how we obtain that data. It will be further expanded and refined as additional sections of our questionnaire are completed (including purposes and legal bases, data retention, user rights, and international transfers) and our practices are formalized.

1. Who We Are

The Langmate service is currently operated by an individual, Nedal Abo Almaali, as an unregistered sole proprietor/independent developer. No separate legal entity has been formed yet. Once a company is incorporated, the legal entity name and details will be updated in our internal questionnaire and reflected in this Privacy Policy.

The service is presented to users under the brand name "Langmate" across the mobile app, website, app store listings, in‑app interfaces, and marketing materials.

The operator is based in:

• Mahallet Marhoum, Tanta, Al Gharbia Governorate, Egypt

2. What Langmate Does

Langmate is an AI‑powered language learning application available on mobile and web. It helps users learn and practice foreign languages through personalized lessons, interactive exercises, and realistic AI‑driven conversation practice. It is intended for a broad range of learners, including complete beginners, students, busy professionals, travelers, and anyone who wants to improve their language skills at their own pace.

Langmate uses artificial intelligence to adapt content to a user’s level, goals, and interests, offering features such as:

• Dynamic lesson creation
• Smart conversation practice with AI tutors
• Audio and pronunciation exercises
• Progress tracking across supported languages

3. Information We Collect

As described in our internal questionnaire, Langmate collects several categories of information in order to create and manage accounts, provide language learning features, operate subscriptions, and understand how the service is used.

3.1 Account and profile information

When a user creates and uses an account, Langmate collects and stores:

• Basic identifiers: an internal user ID, username, and timestamps such as when the account was registered and when it was created/updated.
• Contact details: email address.
• Profile information: display name, optional nickname, optional gender, and an optional profile image (including the image’s storage/URL metadata as managed by our image service).
• Authentication data: a refresh token associated with the user to manage sign‑in sessions.
• Language profile information (per language profile): a language profile ID linked to the user; profile name and optional description; mother/native language and target language (including language identifiers, locale codes, two‑letter codes, display names, and flag emoji); optional self‑reported and evaluated proficiency levels; arrays of learning goals, notes, preferred topics, and recorded learning mistakes (each with its own text, status/labels, and update timestamps); and aggregated activity statistics such as counts of conversations, lessons (including completed lessons), and exercises (including passed and failed), along with the last time the profile was active and draft timestamps.

3.2 Usage and analytics data

Langmate collects usage and analytics data on both the web and mobile apps using tools such as Google Analytics, Facebook Pixel, TikTok, Twitter/X, LinkedIn, Google Ads, LangSmith (LangChain/LangGraph), AWS CloudWatch, Sentry, and similar analytics, monitoring, and advertising tools that help us understand and improve how the service is used.

We track events such as screen and page views, navigation flows, feature clicks, time spent in different parts of the app, lessons and exercises started and completed, exercise results and outcomes, errors and crashes, and coarse location information such as device country/region, along with other similar interaction data that helps us monitor performance, improve product quality, and understand user engagement.

For most analytics and marketing tools, this usage data is collected in an aggregated or pseudonymous form (for example, using device identifiers, cookies, or advertising IDs rather than real names), but in some cases certain usage data may be associated with a user or account identifier (for example, logs and traces in LangSmith, Sentry, or backend monitoring tools that link events to an internal user ID) to debug issues, analyze performance, and personalize or evaluate features.

In addition, tools such as Google Ads, Facebook Pixel, TikTok, Twitter/X, and LinkedIn may be used both for attribution/analytics (measuring traffic and conversions) and for personalized advertising and retargeting based on user interactions with our website and app, in line with their capabilities and our configuration.

3.3 Device and technical data

When users access Langmate, we collect various device and technical information, including IP address, device type (e.g. phone, tablet, desktop), operating system and version, app version, browser and version (for web), interface language/locale, time zone, approximate location such as country/region, crash and error logs, and performance/diagnostic data (for example, information about network requests, response times, and similar telemetry).

We may also collect device and platform identifiers (such as mobile advertising IDs and similar identifiers, where available) and push notification tokens and related device information in order to send notifications and manage the list of devices associated with a user. IP addresses are logged and may appear in access logs, infrastructure logs (such as AWS CloudWatch), and security logs.

Some of this device and technical data is processed at the session or device level, while certain elements (for example, push notification tokens, device lists, and some diagnostic logs) may be linked to a user or account identifier to support security, troubleshooting, and delivery of features such as notifications.

3.4 Content and user‑generated data

Langmate stores and processes a variety of user‑generated content, including AI chat messages and full conversation history, voice recordings, lesson answers, exercise submissions, personal learning notes, learning goals, in‑app feedback, ratings, and reviews, as well as similar content created in the course of using the service. This content may be in text and audio form and includes associated metadata such as timestamps and which lesson or exercise it relates to.

By default, this user‑generated content is kept for as long as the user’s account remains active or until the user chooses to delete specific items or their account, subject to technical and legal retention requirements. This content is used to personalize the user’s experience, provide history and progress tracking, and improve features within the Langmate service for that user, and is not used to train underlying third‑party foundation models; where necessary, it may be processed by AI providers only to deliver the requested functionality (such as generating responses) and to support personalization and quality within the Langmate product.

3.5 Payment and subscription data

Langmate uses Apple App Store and Google Play Billing for in‑app purchases on mobile, and integrates with RevenueCat and Stripe for subscription management and payment processing (including via web and provider webhooks). We do not store full payment card numbers, CVV codes, or bank account numbers on our own servers; those sensitive payment details are handled directly by Apple, Google, Stripe, and/or RevenueCat on our behalf and are subject to their security and compliance controls.

In our own systems, we store non‑sensitive subscription and billing metadata, including a subscription ID and user ID, the user’s subscription tier/plan, billing cycle (e.g. monthly or annual), subscription status (such as active, trialing, cancelled, or expired), current billing period information (start/end dates, whether it will renew, and any cancellation date), and aggregated usage and quota counters (for example, counts of conversations, lessons, and exercises, and token credits used and their associated cost in USD).

Through providers such as RevenueCat and Stripe, we also store transaction and entitlement identifiers and webhook records, including provider names, provider event IDs, entitlement IDs/appUser IDs, raw webhook payloads, and related timestamps and status fields, which may include information about purchased products, plans, prices, currencies, and high‑level billing outcomes (e.g. renewal, cancellation, or refund) but not full card or bank details. This information is used to operate and audit subscriptions, enforce usage limits, handle billing events, and respond to support or compliance requests.

3.6 Marketing and communications data

For marketing and communications, Langmate may use channels such as email, in‑app messages, push notifications, SMS or messaging apps, and similar communication tools, as we roll them out. For these purposes we may track email addresses and messaging identifiers, subscription/opt‑in status for marketing communications, user communication preferences (for example, whether they want to receive newsletters, product updates, promotions, or tips), and campaign and engagement data such as which campaign or link led to a signup (e.g. UTM parameters), and whether emails or messages were opened or clicked.

Users can opt out of marketing emails and messages at any time, and each marketing communication clearly explains how to stop receiving similar messages (for example, via an unsubscribe link in emails or instructions in the message). Even if a user opts out of marketing communications, we may still send essential service messages such as account, security, or billing‑related notifications that are necessary to operate the service.

3.7 Sensitive information

Langmate does not intentionally collect or require special categories of personal data such as health information, biometric identifiers, government ID numbers, precise GPS location, political opinions, religious beliefs, sexual orientation, union membership, or similar sensitive data. The service is designed for language learning, and the only "profile‑like" information we actively collect relates to the user’s language preferences, learning topics, goals, and notes that help personalize their learning journey.

However, because users can freely type or speak content in chats, conversations, and notes, they may voluntarily share sensitive information (for example, statements about their health, religion, politics, or personal circumstances) even though we do not ask for it. In such cases, this information is treated as part of the user’s language‑learning content and is used only to provide and personalize the service (for example, to continue the conversation or reflect it in the user’s history), and users can delete specific messages/notes or their account if they no longer want this content to be stored. We encourage users not to share highly sensitive personal information in the app unless it is strictly necessary for their learning goals.

4. How We Collect Information

We obtain information about users from three main sources, as described in our questionnaire.

4.1 Information provided directly by users

Langmate directly collects data that users actively provide through forms, fields, uploads, and spoken or typed input in the app. This includes:

• Account and profile information such as email address, display name, optional nickname, optional gender, and optional profile image, along with any credentials or consents needed for social sign‑in.
• Language profile information such as mother/native language, target language, self‑reported proficiency, learning goals, personal learning notes, topic preferences, and descriptions of learning mistakes.
• Content created during use of the service, including AI chat messages, conversation text, voice recordings, lesson answers, exercise submissions, feedback, and reviews.
• Where available in the interface, marketing and communication preferences, such as opting in or out of newsletters, product updates, promotions, or notifications.

4.2 Information collected automatically

Langmate automatically collects certain data through the app, website, SDKs, and backend infrastructure. This includes:

• Device and technical information such as IP address, device type, operating system and version, app version, browser and version, interface language/locale, time zone, approximate location like country/region, crash and error logs, performance and diagnostic telemetry, mobile advertising IDs where available, and push notification tokens.
• Usage and analytics events such as screen and page views, navigation flows, feature clicks, time spent, lessons and exercises started and completed, exercise outcomes, errors, and campaign/attribution data including UTM parameters and advertising or campaign identifiers from tools like Google, Facebook, TikTok, Twitter/X, and LinkedIn.
• Infrastructure logs and monitoring data in backend systems (for example, logs in AWS CloudWatch, error and performance traces in Sentry and LangSmith).
• Webhook payloads from providers such as RevenueCat and Stripe, which arrive server‑to‑server without the user manually entering them.

This automatically collected data is used to operate, secure, monitor, and improve the service, and in some cases may be associated with user or account identifiers as described above.

4.3 Information from third‑party providers

Langmate obtains some user‑related data from third‑party providers that the user interacts with, primarily for authentication and billing:

• For authentication, we use Google and Apple as social sign‑in providers. When a user signs in with one of these providers, we receive information such as their email address, name, profile picture URL, and provider‑specific identifiers, which we use to create and maintain their Langmate account and profile (including storing profile images via an external image storage provider such as Cloudinary).
• For subscriptions and payments, we receive subscription and billing metadata from providers such as RevenueCat, Stripe, Apple App Store, and Google Play Billing (for example, product and entitlement identifiers, subscription tier/plan, status, billing periods, prices, currencies, transaction or event IDs, and related webhook payloads) to manage access, entitlements, and billing events; we do not receive full card or bank details from these providers.

Apart from these authentication and billing/subscription providers, Langmate does not currently obtain user data from other third‑party or partner sources such as data brokers, schools, or employers.

5. Where Langmate Is Available

Langmate is available worldwide. The service is accessible to users in all countries, including the EU/EEA, the United Kingdom, and the United States (including California). At this time, there are no specific countries or regions that are intentionally excluded from using the service.

Because Langmate is available in jurisdictions with different privacy and consumer‑protection laws (such as GDPR and CCPA/CPRA), we are in the process of completing our internal questionnaire so that this Privacy Policy can be further updated to clearly describe:

• How and why we use each category of data we collect
• The legal bases we rely on for processing (where applicable)
• Data retention practices for each data category
• User rights and how to exercise them
• Third‑party services and international data transfers (including any safeguards used)

Until those sections are complete in the questionnaire, we aim to collect and use only the data reasonably necessary to operate and improve the core Langmate service.

6. Who Can Use Langmate (Age Requirements)

The minimum age to use Langmate is 13 years old.

• Langmate is intended for users aged 13 and older, including teenagers and adults.
• Users under 18 may use the service, but they should do so in accordance with any rules that apply in their country (for example, involving a parent or guardian where required).
• Langmate does not intentionally offer the service to or target it at users under 13 years of age.

7. Children’s Privacy

Langmate does not have any features that specifically target or are designed for children under 13, and the service is not intended for this age group.

• We rely on our age restrictions and terms, which state that users must be at least 13 years old.
• We do not knowingly collect personal data from children under 13.
• If we become aware that we have collected personal data from a child under 13, we will delete the account and associated personal data as soon as we become aware.

As our internal questionnaire is completed, this section will be expanded (if necessary) to describe any additional safeguards that apply to minors where the law requires them.

8. Contacting Us

For general support, users can contact:

• Email (general support): nedal.eldeen@gmail.com

For privacy, data protection, or terms‑related questions, users can currently use the same address:

• Email (privacy and terms): nedal.eldeen@gmail.com

Users can also reach us through:

• The "Contact us" section on our website at https://langmate.ai/

If dedicated privacy or legal contact channels (such as privacy@langmate.com) are introduced in the future, those details will be added to the questionnaire first and then reflected here.

9. Status of This Privacy Policy and Future Updates

Our internal questionnaire is designed to be the single source of truth for Langmate’s data practices. As of the "Last updated" date above:

• Sections 1, 2, and 3 of the questionnaire (company and product information, service scope and user base, and data collection categories and sources) are completed.
• Later sections, including detailed purposes and legal bases for processing, data retention and deletion, user rights procedures, security measures, AI/ML processing details, international transfers, and additional third‑party relationships, are still being completed.

This means that this Privacy Policy is not yet a complete description of all future data practices of Langmate and will be updated once:

1. All relevant questionnaire sections are fully answered, and
2. The responses are reviewed for legal and compliance implications.

When this Privacy Policy is updated:

• We will change the "Last updated" date above.
• We will describe in more detail how we use each category of data, on what legal bases, how long we retain it, and what rights you have.
• Where required by law, we will provide additional notice of material changes (for example, via in‑app messaging, email, or a notice on our website).

If you have questions about how your data is handled in the meantime, or you want to exercise privacy rights such as access or deletion, please contact nedal.eldeen@gmail.com.