Privacy Policy

What we collect

• Account data: your email address, and a password stored only as a hash by our authentication provider.
• Questions and reports: the questions you ask and the reports generated from them, so you can find them again.
• Usage records: a count of reports generated, to enforce plan limits.
• Profile data: if you choose to add them, the languages you know or are learning, your hobbies/interests, and your language goals — used to personalize your reports and which resources we recommend.
• Accessibility notes (optional, strictly private):if you choose to tell us about a learning difference (e.g. ADHD, autism) or a preferred report format, it’s stored in a separate, owner-only record that not even our admins can read. By default we derive only a format preference (e.g. “concise”) from it — the condition labels themselves stay in that record. You can separately tick “use this when writing my reports” in your profile, which sends them to Anthropic’s API as part of the prompt for your own reports so the advice fits how you study. That box is off unless you switch it on, applies only from the moment you switch it on, and you can switch it back at any time. What was shared is recorded against each report in the same owner-only way — visible on the report to you, and to nobody else, including when the report itself is public.
• A cookie for signed-out visitors:if you use the service without an account, we set a random identifier in a cookie purely to count your free reports. It isn’t linked to any personal detail and isn’t used for advertising or tracking you across other sites.
• Billing data: if you subscribe, Stripe processes your payment. We store only a customer reference and your subscription status — never card numbers.

Who we share it with

We don’t sell your data. To run the service we send your question text to Anthropic’s API to generate a report, and to open academic search APIs (Semantic Scholar, CrossRef, PubMed, Unpaywall) to find sources. Payments go through Stripe. Data is stored with our hosting and database providers.

Public reports

Reports are private to you unless we approve one for the public gallery. Published reports show the question and the answer — never your email or any account detail. If you’d like a published report taken down, ask and we’ll remove it.

Instagram comment-to-DM delivery

On our Instagram account (@learnanylanguage_en), posts invite you to comment a keyword to receive the full report as a private reply. If you do, Instagram sends us: the comment’s ID and text, your Instagram user ID and username, and a timestamp. We use this for exactly one thing — sending you the single private reply you asked for (and a short public confirmation under your comment) — and we keep the record so the same comment can never trigger a second message. We never message anyone who hasn’t commented or messaged us first, and we don’t use this data for advertising, profiling, or anything beyond delivering the reply. It isn’t linked to any learnanylanguage.com account unless you create one yourself. Processing follows Meta’s Platform Terms.

Deleting your Instagram data:send us a DM on Instagram saying “delete my data” (or contact us any other way, naming your Instagram username) and we’ll delete the stored comment records for your account without unnecessary delay. Deleting your comment on Instagram removes it from Instagram; the delivery record on our side is removed on request as described.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. If you’re in the EU or UK, the GDPR gives you these rights explicitly, and you can complain to your national data protection authority. Contact us and we’ll act on requests without unnecessary delay.

Retention

We keep your account and reports until you delete your account. Usage records are kept long enough to enforce limits and understand demand.