Skip to content

In short

  • We keep what LingoBloom needs to work: your account, your learning settings, your progress and your practice history.
  • Your voice goes straight from your browser to Google's Gemini. It does not pass through or get stored on LingoBloom's servers.
  • There are no analytics or advertising. Bloom+ payments are processed by Stripe.
  • Deleting your account deletes the data saved to it.

Who we are

LingoBloom is an AI language tutor you speak with out loud. This policy explains what happens to your data when you use the LingoBloom website and app. "We" and "us" mean the operator of LingoBloom.

The name of the operator of LingoBloom will be published on this page.

What we collect

When you create an account and practice, we save the following to your account:

  • Account details. Your name, email address and password. We store your password only in hashed form, never as plain text. If you sign in with Google, GitHub, Facebook or Apple, we receive your name, email address and profile picture from that service, plus the sign-in tokens it issues, instead of a password.
  • Sign-in sessions. When you sign in, we record the session along with your IP address and the browser or device it came from, so you stay signed in and sessions can be ended.
  • Email preferences. Whether you opted in to product and subscription emails, when you changed that choice, and how many campaign emails were sent. Marketing email is off unless you choose it.
  • Profile and learning settings. The name you want to be called, an optional profile photo, your native language, the languages you are learning, your level and difficulty, your goals and how much time you want to commit, and your tutor's name and voice.
  • Progress. XP, levels, streaks, the date you were last active, and your progress through lessons, including scores.
  • Practice sessions. For each conversation, lesson or flashcard round: the language, difficulty, duration and score, a written transcript of what you and the tutor said, and an AI-written summary of your strengths, mistakes and what to work on next.
  • Flashcards and lessons. Your flashcard decks and how you did on each card, and the lesson content generated for you.

We do not ask for your address, phone number, date of birth or payment details.

Your voice and conversations

When you speak with the tutor, your browser asks for microphone access. The audio then streams directly from your browser to Google's Gemini over a secure connection, using a short-lived key that works for one conversation. The audio does not pass through LingoBloom's servers, and we do not store recordings of your voice.

Gemini turns the conversation into text as you go. That written transcript is saved with the session so you can look back at it and get feedback. To write that feedback, and for text features such as lesson content and flashcards, our servers send the relevant text to Google's Gemini and save the answer to your account.

Google processes what it receives to run the conversation and answer requests, under Google's own terms and privacy policy.

How we use your data

  • To create your account, sign you in and keep your account secure.
  • To run your conversations, lessons and flashcards, and to adapt them to your level and languages.
  • To show your progress, XP, streaks and session history.
  • To send you a password reset email when you ask for one.
  • To send up to three Bloom+ and product emails, at least five days apart, only if you opt in. You can turn these off in your Profile or unsubscribe from an email.
  • To keep the service working, and to find and fix problems.

Service providers

We use a small number of companies to run LingoBloom. They process data on our behalf, only to provide their service:

  • Google (Gemini). Live voice conversations, transcription, feedback and AI-made learning content.
  • Vercel. Hosts the website and the servers that answer the app, which also keep short-lived technical logs.
  • Neon. Hosts the database where your account and learning data are stored.
  • Resend. Delivers password reset emails and, only if you opt in, product and subscription emails. It receives your email address and the email content.
  • Stripe. Processes Bloom+ subscription payments and billing details when you choose a paid plan.
  • Google, GitHub, Facebook or Apple. Only if you choose to sign in with one of them. They handle that sign-in under their own privacy policies.

We do not sell your data, and we do not share it with anyone else unless the law requires us to.

Cookies and device storage

The website uses only the cookies needed to keep you signed in. There are no tracking or advertising cookies, so there is no cookie banner to click through.

The mobile app cannot use those cookies, so it keeps a sign-in token in your device's storage instead. Signing out removes it. The app may also keep a few practice preferences, such as your daily goal, in your browser or device storage.

Analytics, advertising and payments

LingoBloom has no analytics tools or advertising. Bloom+ is a paid subscription processed by Stripe. Stripe receives the information needed to process and manage your payment under its own terms and privacy policy.

Keeping and deleting your data

We keep your data for as long as you have an account, so your progress and history are there when you come back. Password reset links expire after one hour.

Deleting your account permanently deletes everything saved to it: your profile, settings, progress, practice sessions and transcripts, flashcards and lessons, and your sign-in sessions. Copies may remain for a short time in our database provider's backups and in technical logs until they are overwritten. See Contact to ask for your account to be deleted.

Your rights

Depending on where you live, you may have the right to:

  • see the data we hold about you and get a copy of it;
  • correct data that is wrong (you can change most profile and learning settings in the app yourself);
  • have your data deleted;
  • object to or limit how we use your data;
  • complain to your local data protection authority.

To use any of these rights, contact us as described in Contact. We will not treat you differently for asking.

Security

Data travels over encrypted connections. Passwords are stored hashed. The key that lets LingoBloom use Gemini stays on our servers; your browser only ever gets a short-lived key for one conversation. No system is perfectly secure, so please use a password you do not use anywhere else.

Children

LingoBloom is not meant for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this policy

When what we do with your data changes, we update this page and the "Last updated" date at the top. If a change is significant, we will also let you know before it takes effect.

Contact

A contact email address for privacy questions, copies of your data or account deletion will be published on this page soon.

Read our Terms of service for the rules of using LingoBloom.