Introduction
Zolingo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how
we collect, use, disclose, and safeguard your information when you use our Zolingo language learning
mobile application (the "App").
Please read this privacy policy carefully. By using the App, you agree to the collection and use of
information in accordance with this policy. If you do not agree with the terms of this privacy policy,
please do not use the App.
Information We Collect
1. Account Information
When you create an account using Apple Sign In or Google Sign In, we collect:
| Information |
Description |
Purpose |
| Email Address |
Your email from Apple/Google |
Account identification, communication |
| Display Name |
Your name from Apple/Google (if provided) |
Personalization |
| Profile Picture |
Your avatar from Apple/Google (optional) |
Personalization |
| Provider Type |
Whether you used Apple or Google |
Authentication |
📘 Note
When using Apple Sign In, you have the option to hide your email address. Apple provides a private
relay email address that forwards to your real email.
2. Learning Progress Data
We collect data about your learning activity to track your progress:
- Lesson Completion: Which lessons you have completed
- Current Position: Your current lesson in the curriculum
- Daily Streaks: Consecutive days of learning activity
- Completed Dates: Dates when you completed lessons
- Streak Freezes: When streak protection was used
- First Lesson Today: Flag for daily celebration animation
3. Vocabulary Data
We store vocabulary data that you create or save:
- Vocabulary Lists: Custom lists you create
- Saved Words: Words you bookmark from lessons or Explore
- Word Strength: Learning progress for individual words (weak, medium, strong)
- Review History: When you last reviewed words
4. Subscription Information
When you subscribe to Zolingo Premium, RevenueCat (our payment processor) collects:
- Purchase History: Subscription type (monthly/yearly)
- Subscription Status: Active, trial, or expired
- Trial Period: Free trial dates and expiration
⚠️ Important
We do NOT have access to your payment method details (credit card, Apple Pay, etc.). All payment
processing is handled securely by Apple through the App Store.
5. Device Information (Crash Reports)
We use Firebase Crashlytics to collect crash reports to improve app stability:
- Device Model: e.g., "iPhone 15 Pro"
- Operating System: e.g., "iOS 17.0"
- App Version: e.g., "1.0.0"
- Crash Logs: Technical information about app crashes
- Anonymized User ID: A hashed (one-way encrypted) identifier
📘 Note
User IDs are anonymized using SHA256 hashing before being sent to Firebase. The original ID cannot be
recovered from the hash.
6. Notification Preferences
If you enable notifications, we store:
- Reminder Time: Your preferred daily reminder time
- Notification Status: Whether reminders are enabled
7. Content Feedback
When you report issues with content, we collect:
- Report Details: The content being reported and reason
- Device ID: Anonymous identifier for spam prevention
- App Version: For debugging purposes
We do NOT link content reports to your user account.
How We Use Your Information
We use the information we collect for the following purposes:
Core Functionality
- Provide and maintain the App
- Track your learning progress across sessions
- Sync your data between app launches
- Manage your subscription status
- Send daily practice reminders (if enabled)
Service Improvement
- Identify and fix bugs and crashes
- Improve app stability and performance
- Develop new features based on usage patterns
- Respond to content feedback and corrections
Communication
- Send subscription renewal reminders
- Notify you of important app updates
- Respond to support requests
Data Storage & Security
Where Your Data is Stored
| Data Type |
Storage Location |
Provider |
| Account & Progress |
Supabase |
Supabase Inc. |
| Subscription Data |
RevenueCat |
RevenueCat Inc. |
| Crash Reports |
Firebase |
Google LLC |
| Preferences |
On-Device |
Apple (iOS) |
Security Measures
We implement appropriate security measures to protect your data:
- Encrypted Connections: All data transmitted using HTTPS/TLS
- Row-Level Security: Database policies ensure you can only access your own data
- Secure Authentication: OAuth 2.0 via Apple and Google
- Token Encryption: Access tokens stored securely in iOS Keychain
- Anonymization: Crash report user IDs are SHA256 hashed
Third-Party Services
We use the following third-party services that may collect information:
Supabase
- Purpose: User authentication and data storage
- Data Collected: Account information, learning progress
- Privacy Policy: Supabase Privacy Policy
- Data Processing: GDPR-compliant with EU data protection
Firebase Crashlytics (Google)
- Purpose: Crash reporting and app stability monitoring
- Data Collected: Device info, crash logs, anonymized user ID
- Privacy Policy: Firebase Privacy Policy
- Data Processing: Standard Contractual Clauses for EU data transfers
RevenueCat
- Purpose: Subscription management
- Data Collected: Purchase history, subscription status
- Privacy Policy: RevenueCat Privacy Policy
- Data Processing: GDPR-compliant
Apple Sign In / Google Sign In
- Purpose: Secure authentication
- Data Collected: Email, name, profile picture (based on your settings)
- Privacy Policies: Apple | Google
Data Retention
| Data Type |
Retention Period |
| Account Data |
Until account deletion |
| Learning Progress |
Until account deletion |
| Vocabulary Lists |
Until account deletion |
| Crash Reports |
90 days (automatic) |
| Content Reports |
Until resolved (admin review) |
Your Rights & Choices
Access Your Data
You can view your learning progress, streak history, and vocabulary data within the App at any time.
Delete Your Account
You can permanently delete your account and all associated data:
- Open the App
- Go to Settings → Account
- Tap Delete Account
- Confirm deletion
🔴 Caution
Account deletion is permanent and cannot be undone. All your learning progress, streaks, and
vocabulary lists will be permanently erased.
Manage Notifications
You can enable, disable, or change notification timing:
- Go to Settings → Notifications
- Toggle reminders on/off or change the time
Manage Subscription
To manage or cancel your subscription:
- Open Settings on your iPhone
- Tap your name at the top
- Tap Subscriptions
- Tap Zolingo to manage
Data Export
Currently, we do not offer a data export feature. This may be added in a future update.
Opt-Out of Crash Reporting
A crash reporting opt-out feature is planned for a future release.
Children's Privacy
Zolingo is not intended for children under the age of 13. We do not knowingly collect personal
information from children under 13. If you are a parent or guardian and believe your child has provided
us with personal information, please contact us at support@zolingo.app, and we will delete that information.
Regional Compliance
GDPR (European Union)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Delete your account and data
- Right to Restriction: Limit how we process your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to certain processing activities
Legal Basis for Processing:
- Consent: When you sign up and agree to this policy
- Contract: To provide the service you subscribed to
- Legitimate Interest: To improve our service and fix bugs
Data Transfers: Your data may be transferred to servers in the United States. We use
Standard Contractual Clauses (SCCs) to ensure adequate protection.
CCPA (California)
If you are a California resident, you have additional rights:
- Right to Know: What personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale: We do NOT sell your personal information
Categories of Personal Information Collected:
- Identifiers (email, name, user ID)
- Internet activity (learning progress, app usage)
- Commercial information (subscription history)
We do NOT sell personal information. We do not share your personal information with
third parties for their direct marketing purposes.
Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act)
We provide similar protections and rights to users in these jurisdictions as described in the GDPR
section above.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the App
- Updating the "Last Updated" date at the top
Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy
Policy.
Contact Us
If you have any questions about this Privacy Policy, our data practices, or to submit data requests
(GDPR/CCPA), please contact us:
Email: support@zolingo.app
Summary
| What We Collect |
Why |
Shared With |
| Email, Name, Avatar |
Account creation |
Supabase (storage) |
| Learning Progress |
Track your progress |
Supabase (storage) |
| Subscription Status |
Manage subscription |
RevenueCat, Apple |
| Crash Data |
Fix bugs |
Firebase (Google) |
| Notification Time |
Daily reminders |
Stored locally only |
| Content Reports |
Improve content |
Supabase (anonymous) |
Key Points
- We do NOT sell your data
- We do NOT use your data for advertising
- You can delete your account at any time
- Crash data is anonymized
- Payment details are handled by Apple (we never see them)