1. What Data We Collect
Account Information
- Email address (required for login and communications)
- Name (optional, used for certificates)
- Password (securely hashed, never stored in plain text)
Learning Data
- Course progress (lessons completed, modules finished)
- Assessment scores and completion dates
- Certificates earned
- Learning streaks and time spent
Technical Data
- IP address and approximate location (country/city)
- Device type and browser information
- Session data (login times, pages visited)
Payment Information
Payment details (card numbers, billing addresses) are processed directly by Stripe. We do not store your full card number on our servers. We only receive a transaction confirmation and the last 4 digits of your card for reference.
2. How We Use Your Data
- Provide the Service: Grant access to courses, track progress, issue certificates
- Improve the Platform: Analyse usage patterns to enhance content and features
- Communicate: Send service emails (password resets, purchase confirmations, important updates)
- Prevent Fraud: Detect and prevent cheating, account sharing, or abuse
- Legal Compliance: Comply with applicable laws and respond to legal requests
3. Data Sharing
We share your data only with the following service providers who help us run LinguaPath:
- Supabase: Database and authentication services
- Stripe: Payment processing
- Vercel: Website hosting and delivery
We never sell your personal data to third parties for marketing or advertising purposes.
4. Cookies
We use only essential cookies required to:
- Keep you logged in (session cookies)
- Remember your preferences
- Prevent fraud and abuse
We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser, but this may affect your ability to use LinguaPath.
5. Your Rights (GDPR & CCPA)
Depending on your location, you have the right to:
- Access: Request a copy of all data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and personal data
- Portability: Receive your data in a machine-readable format
- Objection: Object to certain processing activities
To exercise these rights, email us at support@linguapath.co.uk. We will respond within 30 days.
6. Data Retention
- Account Data: Retained while your account is active, deleted within 30 days of account deletion request
- Learning Progress: Retained for 3 years after your last login, then anonymised
- Certificates: Retained indefinitely for verification purposes (unless you request deletion)
- Payment Records: Retained for 7 years as required by financial regulations
7. Data Security
We protect your data using:
- HTTPS encryption for all data in transit
- Encrypted database storage
- Secure password hashing (bcrypt)
- Regular security audits
- Access controls and logging
8. Children's Privacy
LinguaPath is intended for users aged 13 and above. If you are under 13 (or the applicable age in your country), you must have parental consent to create an account. Parents can request deletion of their child's data by emailing support@linguapath.co.uk.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of LinguaPath after changes constitutes acceptance of the updated policy.