Legal

Privacy Policy

Last Updated: November 25, 2025

Effective Date: November 25, 2025

Developer Information

1. Introduction

Welcome to Readlang Mobile. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and website ("Website"). We are committed to protecting your privacy and ensuring transparency about our data practices.

By using Readlang Mobile, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account with Readlang Mobile, we collect:

a) Google OAuth Authentication:

  • Email address
  • Full name
  • Profile picture
  • Google account ID (unique identifier)

b) Email/OTP Authentication:

  • Email address
  • One-time password codes (stored temporarily for 10 minutes)

c) Profile Information:

  • Display name (which you can modify)
  • Profile picture (optional, uploaded by you)
  • Native language preference
  • Learning language preference

2.2 Learning Activity Data

To provide personalized learning experiences and track your progress, we collect:

a) Usage Statistics:

  • Total number of words translated
  • Total number of words reviewed
  • Time spent reading and learning (measured in seconds)
  • Daily learning activity records
  • Current learning streak (consecutive days of activity)
  • Longest learning streak achieved
  • Last active date

b) Daily Activity Records:

  • Date of activity (YYYY-MM-DD format)
  • Words translated per day
  • Words reviewed per day
  • New words added per day
  • Time spent per session
  • Streak snapshot for that day

2.3 Personal Vocabulary Data

We store your personal vocabulary lists, including:

  • Words you save
  • Translations of those words
  • Source language and target language for each word
  • Number of times you reviewed each word incorrectly (error count)
  • Number of times you reviewed each word correctly (success count)
  • Memorization status (whether you marked a word as memorized)
  • Date when you added each word
  • Date when you last modified each word

2.4 Bookmarked Content

When you bookmark websites for reading practice, we collect:

  • Website URLs
  • Website titles (display names)
  • Website logos (optional)
  • Custom categories you create for organizing bookmarks
  • Default categories: Medium, Reddit, Quora

2.5 Subscription Information

For subscription management, we collect:

  • Subscription type (free or premium)
  • Subscription period (monthly or yearly)
  • Subscription start date
  • Subscription end date
  • Auto-renewal preference (enabled or disabled)
  • Onboarding completion status

2.6 Files and Media

a) Profile Pictures:

  • Images you upload or select from your device gallery
  • Stored on our servers for display purposes

b) EPUB Books (Local Only):

  • Book file metadata (filename, size, last opened timestamp)
  • List of recently opened books stored locally on your device
  • Book content is NOT uploaded to our servers

2.7 Translation Data

When you use the translation feature, we process:

  • Text you select for translation
  • Source language (detected or specified)
  • Target language (your learning language)
  • This data is sent to Google Cloud Translation API for processing

2.8 Technical and Device Information

a) Automatically Collected:

  • Device type (iOS or Android)
  • Operating system version
  • App version
  • IP address (for API requests)
  • Session duration

b) Local Storage (on your device):

  • Authentication tokens (JWT)
  • App preferences and settings
  • Recent book list
  • Redux state (user preferences)

2.9 WebView Browsing Data

When you browse websites within the app using our WebView feature:

  • We do NOT collect your browsing history
  • Website content is displayed directly from the source
  • Only words you select for translation are processed
  • URLs of bookmarked pages are stored (if you choose to save them)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Account Management

  • Create and maintain your user account
  • Authenticate your identity (via Google OAuth or Email OTP)
  • Provide secure access to your data
  • Send one-time password codes for email authentication

3.2 Service Delivery

  • Provide real-time word translation via Google Cloud Translation API
  • Store and retrieve your personal vocabulary lists
  • Display your bookmarked reading materials
  • Enable EPUB book reading functionality
  • Organize content by categories and languages

3.3 Personalization

  • Customize the app experience based on your language preferences
  • Display content relevant to your native and learning languages
  • Provide curated learning resources (Explore feature)

3.4 Progress Tracking and Gamification

  • Calculate and display your current and longest learning streaks
  • Track daily learning activity
  • Provide statistics on words translated, words reviewed, and time spent
  • Motivate continued learning through progress visualization

3.5 Subscription Management

  • Manage your subscription status and access levels
  • Determine feature availability based on subscription tier
  • Process subscription upgrades and renewals
  • Notify you about subscription status changes

3.6 Service Improvement

  • Analyze usage patterns to improve app functionality
  • Identify and fix technical issues
  • Optimize user experience
  • Develop new features based on user needs

3.7 Communication

  • Send one-time password codes for authentication
  • Respond to your support inquiries
  • Send important service announcements (if necessary)
  • Notify you about policy changes

3.8 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests and prevent fraud
  • Enforce our Terms of Service
  • Protect our rights and the rights of other users

4. How We Share Your Information

4.1 Third-Party Service Providers

We share your information with the following third-party services:

a) Google Cloud Services:

  • Purpose: User authentication (Google OAuth) and text translation
  • Data Shared: Google ID token (contains email, name, picture), text to translate, language codes
  • Privacy Policy: https://policies.google.com/privacy

b) Resend Email Service:

c) MongoDB (Database Hosting):

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email or prominent notice in the app before your information is transferred.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal requests from government authorities
  • Court orders or subpoenas
  • Legal processes to protect our rights, property, or safety
  • Investigations of fraud or security issues

4.4 With Your Consent

We may share your information with other third parties when you explicitly consent to such sharing.

4.5 Aggregated or Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you, for analytics or marketing purposes.

5. Data Retention

5.1 Account Data

  • Stored indefinitely until you delete your account
  • Includes: profile information, language preferences, subscription data

5.2 Learning Activity Data

  • Stored indefinitely to maintain your progress history
  • Includes: vocabulary lists, statistics, daily activity records, streak information

5.3 OTP Codes

  • Stored temporarily for 10 minutes
  • Automatically deleted after expiration or successful verification
  • Maximum 3 verification attempts allowed

5.4 Profile Pictures

Stored on our servers until you delete them or delete your account

5.5 Bookmarked Content

Stored until you manually delete bookmarks or delete your account

5.6 Session Data

  • Authentication tokens (JWT) expire after 7 days (Google OAuth) or 30 days (Email OTP)
  • Can be invalidated immediately by logging out

5.7 Deleted Accounts

When you delete your account, we permanently delete:

  • User profile and authentication data
  • All vocabulary words
  • All bookmarked pages and categories
  • All daily activity records
  • All profile pictures

Deletion is immediate and irreversible. Backup copies may be retained for up to 30 days for technical reasons.

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Encryption

  • All data transmitted between your device and our servers uses HTTPS/TLS encryption
  • Authentication tokens are stored securely using JWT (JSON Web Tokens)
  • Admin panel uses HTTP-only secure cookies in production

6.2 Access Control

  • Password-protected admin dashboard (AdminJS)
  • JWT-based authentication for API requests
  • Role-based access control for administrative functions

6.3 Authentication Security

  • OTP rate limiting: 1 OTP per email per minute
  • Maximum 3 failed OTP attempts before deletion
  • Secure password hashing (for admin accounts)
  • OAuth token verification with Google

6.4 Infrastructure Security

  • Environment variables for sensitive credentials
  • Secure MongoDB database configuration
  • Regular security updates and patches

6.5 Limitations

Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Your Rights and Choices

7.1 Access Your Data

  • You can view your profile information at any time in the app
  • Navigate to: Profile screen → View personal information
  • API endpoint: GET /api/users/profile

7.2 Correct Your Data

  • Update your name and picture: Profile → Edit Profile
  • Update your language preferences: Profile → Update Languages
  • Modify vocabulary words, bookmarks, and categories in their respective sections

7.3 Delete Your Data

  • Delete specific vocabulary words: Vocabulary → Swipe to delete
  • Delete bookmarks: Bookmarks → Delete
  • Delete your entire account: Profile → Account Settings → Delete Account
  • Account deletion is permanent and deletes ALL associated data

7.4 Export Your Data (GDPR Right to Portability)

  • Currently, data export must be requested manually
  • Email [email protected] or use the in-app account settings to request a copy of your data
  • We will provide your data in a structured, machine-readable format within 30 days

7.5 Withdraw Consent

  • You can stop using the app at any time
  • Log out to revoke access tokens
  • Delete your account to withdraw all consent

7.6 Opt-Out of Communications

  • We only send transactional emails (OTP codes)
  • You can stop receiving these by using Google OAuth instead of email authentication

8. Children's Privacy (COPPA Compliance)

Readlang Mobile is intended for users aged 16 and older. The app is rated 16+ on the App Store and is not directed to children.

We do not knowingly collect personal information from anyone under 16 (or under 13 where COPPA applies). If we discover that we have inadvertently collected information from a minor, we will delete that information immediately.

If you are a parent or guardian and believe a minor has provided us with personal information, please use the in-app account deletion tools to remove the account or email us at [email protected].

9. International Data Transfers

Our services are operated from Uzbekistan. If you are located in the European Union, European Economic Area, or other regions with data protection laws, please note:

  • Your information may be transferred to and processed in countries outside your jurisdiction
  • These countries may have different data protection laws
  • By using Readlang Mobile, you consent to the transfer of your information to Uzbekistan and other countries where we operate

For EU users, we rely on:

  • Your explicit consent
  • Performance of contract (to provide our services)
  • Legitimate interests (with appropriate safeguards)

10. Cookies and Tracking Technologies

10.1 Mobile App

The mobile app does NOT use cookies. Instead, we use:

  • AsyncStorage: Local storage on your device for authentication tokens and app preferences
  • Redux Persist: Local state management for offline functionality
  • No third-party tracking SDKs (no analytics, no ad networks)

10.2 Website (readlang-mobile.com)

Our landing website currently does NOT use:

  • Cookies
  • Google Analytics
  • Third-party tracking scripts
  • Advertising networks

If we add analytics in the future, we will update this policy and provide an opt-out mechanism.

10.3 WebView Browsing

When you browse websites within the app's WebView:

  • Websites may set their own cookies (governed by their privacy policies)
  • We do not access or control these cookies
  • Cookies are managed by the website you visit, not by Readlang Mobile

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights:

11.1 Right to Know

  • You can request disclosure of the categories and specific pieces of personal information we collect
  • You can request the categories of sources from which we collect information
  • You can request the business or commercial purposes for collecting information
  • You can request the categories of third parties with whom we share information

11.2 Right to Delete

  • You can request deletion of your personal information
  • Use the in-app account deletion feature or contact us

11.3 Right to Opt-Out of Sale

  • We DO NOT sell your personal information
  • We DO NOT share your information for cross-context behavioral advertising

11.4 Right to Non-Discrimination

  • We will not discriminate against you for exercising your CCPA rights
  • You will not be denied service, charged different prices, or receive a different level of service

11.5 Exercising Your Rights

  • Email: [email protected]
  • In-app: Use the account deletion or data access features
  • Response time: Within 45 days of receiving your in-app request

12. European Union Privacy Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights:

12.1 Legal Basis for Processing

We process your personal data based on:

  • Consent: You consent by creating an account and using our services
  • Performance of Contract: Processing necessary to provide our services
  • Legitimate Interests: Improving our services, security, fraud prevention

12.2 Your Rights Under GDPR

  • a) Right to Access: Request a copy of your personal data
  • b) Right to Rectification: Correct inaccurate or incomplete data
  • c) Right to Erasure ("Right to be Forgotten"): Request deletion of your data
  • d) Right to Restrict Processing: Limit how we use your data
  • e) Right to Data Portability: Receive your data in a portable format
  • f) Right to Object: Object to certain types of processing
  • g) Right to Withdraw Consent: Withdraw consent at any time
  • h) Right to Lodge a Complaint: File a complaint with your supervisory authority

12.3 Data Protection Officer

For GDPR-related inquiries, please use the in-app privacy request tools or email [email protected].

12.4 Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

13.1 Notification of Changes

  • We will notify you of material changes via email (to the address on file)
  • We will also post a prominent notice in the app
  • We will update the "Last Updated" date at the top of this policy

13.2 Your Acceptance

  • Continued use of Readlang Mobile after changes constitutes acceptance of the updated policy
  • If you do not agree with changes, you should stop using the service and delete your account

13.3 Reviewing Changes

14. Third-Party Links and Services

14.1 External Websites

Readlang Mobile may contain links to third-party websites (via WebView, Explore feature, or bookmarks):

  • We are not responsible for the privacy practices of these websites
  • Each website has its own privacy policy
  • We encourage you to review the privacy policies of websites you visit

14.2 Third-Party Content

The Explore feature displays curated links to external learning resources:

  • These are publicly available websites
  • We do not share your personal information with these websites
  • Your interaction with these websites is governed by their privacy policies

14.3 Social Media

Our website links to social media platforms (X/Twitter, Telegram, Instagram):

  • Clicking these links takes you to external platforms
  • Your interactions on social media are governed by their privacy policies

15. Data Breach Notification

In the event of a data breach that affects your personal information:

  • We will notify affected users within 72 hours of discovery
  • Notification will be sent via email to the address on file
  • We will also post a notice in the app
  • We will notify relevant regulatory authorities as required by law

The notification will include:

  • Description of the breach
  • Types of information affected
  • Steps we are taking to address the breach
  • Steps you can take to protect yourself
  • Contact information for questions

16. Do Not Track Signals

Our mobile app and website do not respond to "Do Not Track" (DNT) browser signals, as we do not track users across third-party websites or use tracking technologies for advertising purposes.

17. Business Contact Information

For privacy-related inquiries, data access requests, or to exercise your rights:

Developer Information:

  • Name: Alisher Fayzullaev
  • Country: Uzbekistan
  • Service Name: Readlang Mobile – Translate & Learn

Response Time: We will respond to privacy requests within 30 days (45 days for CCPA requests).

18. Consent

By using Readlang Mobile, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

If you do not agree with this Privacy Policy, please do not use our services.

For users in jurisdictions requiring explicit consent:

  • By clicking "Continue" or "Sign In" on the authentication screen, you consent to this Privacy Policy
  • By completing the onboarding process, you consent to data collection as described herein

19. Language

This Privacy Policy is written in English. In the event of conflicts between translated versions and the English version, the English version shall prevail.

20. Severability

If any provision of this Privacy Policy is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.

END OF PRIVACY POLICY

This document was last updated on November 25, 2025.

For the most current version, visit: https://readlang-mobile.com/privacy

© 2025 Readlang Mobile – Translate & Learn. All rights reserved.