Privacy Policy

Who we are

ADL is operated by the organisation named below. For anything about your data, write to the contact address.

Operator

[COMPANY / OPERATOR NAME — owner to fill in]

Contact email

[CONTACT EMAIL — owner to fill in]

Signing in and your profile

Depending on how you sign in, we store:

• Email and password: your email address and your password — the password only as an argon2id hash, which cannot be turned back into the password.
• Google: your Google account's unique id, and its email address if Google has verified it. If you sign up this way, we also take your first and last name from Google.
• Telegram: your Telegram user id and username, your first and last name, and the phone number you share with our Telegram bot to confirm it is you.
• Your first and last name, and your role (student, teacher or administrator).
• Your profile photo, if you add one. We remove its metadata, including location, and store it on our server. Anyone who has its link can open it.
• When you last signed in.

Security records

To keep accounts safe, we record:

• Your sign-in sessions: the IP address, the device or browser (user agent) and timestamps.
• An activity log of what you do on the platform — signing in and out, password changes, lessons and practice completed, words saved — with the IP address and device.
• A security audit log of sign-ins and account changes. Its sign-in entries include the email, phone number or Telegram username used, the IP address and the device. It is append-only: entries cannot be changed.

Learning records

While you study, we store:

• Your answers and scores in lessons, quizzes and the reading, listening, writing and speaking practice.
• Your vocabulary progress and the words you save.
• Your XP, level and daily streak, and the time zone you chose, so that your day ends at your own midnight.
• The texts you write in Writing practice, and the feedback on them.
• The transcripts of what you say in Speaking practice, and the feedback on them — not the recordings.
• Your mistakes, collected so that you can practise them again.

AI checks of your writing and speaking

Writing and Speaking practice use AI services. We send them only the material to check — never your name, email address or phone number:

• Your Writing text and your Speaking transcript go to Anthropic (Claude) to be checked, or to Groq when Anthropic is unavailable.
• Your Speaking recording goes to Groq, which turns it into text. ADL does not store the recording: it is kept in memory only while it is processed, then discarded.
• Practice reading texts are written by AI from lesson topics and words, not from anything about you.
• For each AI request we keep a record of which service answered, whether it worked and how long it took — not what was sent — for 30 days.

Who can see what

• Other students see your name, profile photo, XP, streak and level on the leaderboard.
• Teachers of your groups see your name, email address, progress and activity, and your Writing texts and Speaking transcripts with their feedback.
• Platform administrators can see account data, to run the service and to help you.

Notifications

If you allow notifications, we store a token for your device (in a browser, a web-push subscription), its platform and language, and when it was last seen. Notifications to the Android app are delivered through Expo's push service and Google Firebase Cloud Messaging; in a browser, through the browser's push service. You can turn them off in the app's settings or your device's settings.

Pro and payments

Pro is bought on the students website, not in the Android app. When you top up your balance:

• You pay on the page of our payment provider, Rahmat, and enter your card details there. ADL never receives or stores your full card number.
• We send Rahmat the amount, our own payment reference and the receipt line — not your name, email address or phone number.
• We store the payment's amount, status, plan and date, the masked card number and card type Rahmat returns (for example 860030******5959, Uzcard), and the link to the fiscal receipt.
• We keep your wallet: its balance and every change to it.

On your device

The mobile app keeps your sign-in token in the device's secure storage, and your language, theme and vibration settings and an unsent Writing draft on the device. The website keeps your sign-in in the browser's storage and a sign-in cookie. None of this is used for tracking.

What we do not do

• We do not show advertising.
• We do not sell or rent your data.
• We do not use third-party analytics, advertising or tracking tools — not in the apps, and not on this website.

Why we use it

• To provide the service and run your account.
• To track your progress, XP and streaks.
• To check your writing and speaking and give you feedback.
• To send the notifications you allow: reminders and messages about your account.
• To process Pro payments and keep payment records.
• To keep the platform secure: preventing abuse, limiting repeated requests, and keeping a log of security-relevant actions.

Who processes it for us

We share data only with the providers that run the service for us, and only what each of them needs:

• Amazon Web Services — our servers and database, in Stockholm, Sweden.
• Vercel — serves the web apps and this website, and passes the web apps' requests on to our servers.
• Anthropic (United States) — AI checks of Writing texts and Speaking transcripts.
• Groq (United States) — turns Speaking recordings into text, and checks writing and speaking when Anthropic is unavailable.
• Anthropic, Groq, Cloudflare and OpenRouter — write practice reading texts; they receive no personal data.
• Expo and Google Firebase Cloud Messaging — deliver notifications to the Android app.
• Rahmat — processes Pro payments on the website.
• Google and Telegram — if you choose to sign in with them, they confirm who you are under their own privacy policies.

Where your data is

Our servers and database are in Sweden, in the European Union. Some of the providers above are in the United States, so the data they receive is processed there.

How long we keep it

• Account and learning data: for as long as your account exists.
• Sign-in sessions last up to 30 days; their records are deleted automatically about a week after they expire.
• The activity log: 12 months.
• The security audit log: up to two years.
• Records of AI requests, without their content: 30 days.
• Speaking recordings: not stored at all.
• Payment records: kept, also after an account is deleted.
• Server logs, which include IP addresses, are rotated automatically and kept only briefly.
• Database backups: 14 days.

Your rights

You can:

• Ask what data we hold about you, and for a copy of it.
• Correct it — you can edit your name and profile photo in your profile; for anything else, ask us.
• Delete your account, in the app or on the website.
• Turn notifications off at any time.
• Ask us any question about how your data is handled, or complain to a data protection authority.

To use these rights, write to the contact address below. A parent or guardian can do this for a child.

How to delete your account

Children and teenagers

Many of our students are teenagers. We collect from them only what this policy describes, we show no advertising, and their writing and speaking go only to the AI services named above, without their name or contact details. If you are under 18, ask a parent or guardian before you sign up. If a minor uses ADL through a school or a teacher, that school is responsible for any consent needed from a parent or guardian. If you believe a child has given us data without the consent that was needed, write to us and we will delete the account.

Changes to this policy

If we change this policy, we will update this page and the date at the top.

Contact

For questions about this policy or your data:

Contact email

[CONTACT EMAIL — owner to fill in]