YOUR INFORMATION
Privacy Policy
How LingoRove handles your information.
Last updated: 25 October 2026.
Who is responsible for your information
LingoRove is operated by Gordon Carter. This policy covers the LingoRove app and lingorove.org. For support or privacy requests, contact support@lingorove.org.
Collection, identity and tracking
Some information leaves your device when you use advertising, referrals, reporting or optional diagnostics. “Linked to you” in our App Store privacy information can mean linked to an app installation or subscription customer record, even when we do not know your name or email address.
Apple uses “tracking” to mean combining information about a person or device with other companies’ data for targeted advertising or advertising measurement, or sharing it with a data broker. Keeping reports together for troubleshooting or recording a LingoRove referral does not, by itself, mean this kind of tracking.
Our reporting and diagnostic services use installation identifiers for security and investigation. Our referral service links a customer record, referral and subscription activity to administer commissions. We do not use those records to build advertising profiles across other companies’ apps or websites. Google’s advertising SDK has its own data practices, described below.
Learning data
Your learning progress, favourites, profiles and custom content are stored on your devices. On Apple devices, synchronisation uses your private iCloud data. On Android, library backups are exported to a storage location you choose; LingoRove does not provide hosted learning-library synchronisation. They are not shared with advertisers.
When you choose an online action, such as submitting a language report or requesting missing content, the information needed for that action is sent to LingoRove’s services as described below. Downloading packs and stories also requires communication with Apple or LingoRove’s content services.
Advertising and your choices — current version 1.0.0
Google has temporarily disabled ad serving for LingoRove. Rewarded-ad unlocks are unavailable, but version 1.0.0 still includes the advertising SDKs described below. Disabled ad serving does not establish that all SDK data collection has stopped; these disclosures remain applicable.
Version 1.0.0 includes the Google Mobile Ads SDK for banner and optional rewarded advertising, currently unavailable during the suspension. Google’s consent flow determines whether ads may be requested and which ad-serving mode is available in your region.
Google’s advertising SDK may collect your IP address (which can indicate approximate location), app- or device-related identifiers, ad impressions and interactions, product interactions, crash information and performance measurements. Google uses this information for advertising, analytics and fraud prevention, subject to the applicable consent and ad-serving mode. LingoRove does not send your learning library to advertisers. Disabling LingoRove’s optional diagnostic sessions does not disable data processing by the advertising SDK.
Google’s SDK declares approximate location, device identifiers, advertising data and product interactions as linked data. Its privacy manifest also declares a device-identifier tracking capability. This describes the SDK’s supported uses; actual availability depends on permissions, consent and ad-serving configuration. On iOS, access to the advertising identifier (IDFA) requires App Tracking Transparency permission. Other app- or device-related identifiers may still be collected without access to the IDFA.
In Google’s SDK privacy manifest, approximate location, device identifiers, ad interactions, product interactions, performance information and other diagnostic information have advertising and analytics purposes. Crash data has an analytics purpose. This is why our App Store disclosures include advertising purposes for data that LingoRove itself uses only to investigate technical problems. Approximate location can be inferred from your IP address; it does not require access to your precise GPS location.
We do not send your language reports, support emails or referral customer records to Google for ad targeting. An installation identifier used by our reporting service is separate from Google’s advertising identifiers.
Where available, open Advertising Privacy Choices in the app to review your choice. Advertising consent does not enable diagnostics or grant other permissions.
Google’s privacy policy · Google advertising information
Speech Practice and screen feedback
Speech Practice prefers on-device recognition when it is supported. Separate controls under Privacy let you allow Apple online recognition on iOS, the Android speech-recognition provider on Android, or Cloudflare transcription. With Cloudflare transcription enabled, the recording and its language are sent to our speech service for transcription. The returned text is used to compare your attempt; it is not a professional pronunciation score. When supported, Apple translation on your device can also show an English meaning of the words recognized. You can turn these permissions off at any time. Anonymous activity analytics do not contain recordings, transcripts or phrases.
If you separately allow online text translation, the recognized text and its source and target languages are sent to LingoRove’s Cloudflare service when Apple translation is unavailable. Ask also requires your permission: it sends your question and the current expression’s learning context to Cloudflare to generate a spoken answer. Our speech service does not store recordings or Speech Practice transcripts. Ask questions and answers are retained only when you separately enable Help improve Ask answers, as described below. These features do not send that content to activity analytics.
During an optional diagnostic session, you can open screen feedback using the report button or your chosen shake or two-finger gesture. The screenshot is shown for your confirmation before submission. Motion used to detect the gesture is processed on the device and is not included in the report.
Help Gems — version 2.0.1 testing
Help Gems apply to online AI features in the 2.0.1 iOS test release. The device maintains your balance and purchase ledger, with private iCloud synchronization. LingoRove’s Cloudflare service calculates the cost of a completed operation and returns a usage receipt; it does not maintain a customer wallet. Monthly subscription allowances do not accumulate. Purchased gems, including purchase bonuses, do not expire.
For interrupted-request recovery and protection against duplicate charges, paid-operation responses and receipts are retained in private Cloudflare storage under a random operation ID. Responses can include recognized speech, translated text or generated answers. Original request text and audio are not stored by this recovery system. A request fingerprint detects mismatched retries; no account, device or advertising identifier is attached.
Recovery records are automatically scheduled for deletion after seven days; physical deletion can take additional processing time. This service-fulfillment storage is separate from the optional 30-day Ask quality-review collection below. It is not used for advertising, profiling or model training. The 2.0.0 retention description above continues to apply to clients that do not use Help Gems.
Optional Ask answer quality review
Help improve Ask answers is a separate Privacy setting, off by default. If you enable it, LingoRove retains your question and the generated answer returned to the app, including its language segments, in private Cloudflare storage for quality review and improving answers. Ask works without this permission. This setting persists until you turn it off; it is independent of Diagnostics and permission to use online answers.
We do not attach your account, device, installation, session, advertising or diagnostic identity, IP address or location to these exchanges. We do not retain audio, full lesson context or rejected model attempts in this collection. Questions can nevertheless contain personal information you choose to say: please avoid including personal details.
Exchanges expire from review access after 30 days and are automatically scheduled for storage deletion. Cloudflare’s physical deletion may take additional processing time. Turning the setting off stops collection for subsequent requests; previously submitted exchanges expire automatically. Because records are not indexed by person, we cannot retrieve your submission history by account or device. Contact support if you have a privacy concern.
Access is restricted to authorized quality review. This content is not linked to activity counts or used for advertising, attribution, profiling or model training. We retain generalized improvement findings rather than copying raw exchanges into permanent project notes.
Anonymous app activity — upcoming version 2.0.0
The 2.0.0 Apple app update removes Google Mobile Ads and its consent SDK and introduces optional prepaid learning passes. It is available for testing and is not yet the public App Store release. These changes do not alter the disclosures for installed copies of version 1.0.0.
To understand where and how LingoRove is used, anonymous activity reporting covers app opens, approximate first opens, learning and game starts, explicit uses of Explain, Ask and Report, game or broad feature type, aggregate active learning time, successful purchase categories, and online service use. Service events identify the service/API, invoking feature, language pair when relevant, success or failure, elapsed time and retry count. Events include the app version, platform, app surface (iPhone, iPad, CarPlay, Siri or Apple Watch) and approximate occurrence time. Explicitly opened campaign links can also contribute source, campaign and advertisement labels to aggregate acquisition counts, without sending the referral code, customer identifier, click identifier or full link.
Cloudflare infers country, region, city and timezone from the upload connection. This is approximate network geography, not GPS: carrier routing or a VPN can change it, and an offline event may upload from a different location. LingoRove does not request location permission or send GPS coordinates or postal codes for this reporting.
The analytics records contain no name, email address, user, installation or device identifier, retained IP address or IP-derived identifier, purchase receipt, product ID, lesson content, answers, scores or voice recordings. Cloudflare receives network information to handle requests, but raw IP addresses are not retained in the analytics dataset. Counts describe approximate activity, not unique people or an accounting ledger. First-open counts may count a reinstallation again.
Events are saved locally and uploaded in batches. While online and running, the app normally sends after one minute without another event or when the oldest event reaches fifteen minutes, and may send earlier when entering the background. Offline use and system suspension can delay delivery. The local queue retains at most seven days or 10,000 events, discarding the oldest beyond those limits; accepted records are removed. Retried uploads may produce duplicate counts.
Cloudflare analytics records are retained for three months. They are not linked to support, referral or diagnostic records, combined with other companies’ data for advertising, or shared with data brokers. Simulator activity and sandbox purchases use a separate test dataset.
This reporting runs independently of startup and playback and is separate from optional diagnostic sessions. Turning diagnostics off does not turn off these anonymous activity events.
Full Access and purchases
Apple processes App Store subscriptions and payments. LingoRove uses Apple’s StoreKit to verify purchase entitlement and provide the access you purchased.
Opening the referral controls sends an Apple-signed app transaction to our referral service to retrieve or establish a customer record. If you enter a referrer’s name or code, it is sent for preview; confirming it saves the referral. With a referral selected, the app sends verified subscription transaction history to associate purchases with that referral for attribution and commission administration. This is the source of the Name, User ID, Purchases and referral-related marketing disclosures in our App Store privacy information. We do not receive your Apple account password, payment-card details or bank details.
You can remove your current referral in the app; this does not erase previously recorded subscription or commission history. Do not enter sensitive information in a referral code.
Referral invitations and acquisition — upcoming version 2.0.0
The app uses Apple’s native advertising-attribution APIs to register a first-open conversion signal. Apple determines whether an eligible advertisement receives credit and may send delayed, privacy-limited postbacks to participating advertising networks. These postbacks do not identify an individual customer and are not used to select your referrer. The upcoming iOS version also includes Meta, TikTok and Google Firebase Analytics app-event SDKs to measure advertisements that promote LingoRove. These do not display ads inside LingoRove. Vendor event reporting starts only after you grant Apple’s App Tracking Transparency permission; refusing permission does not limit learning or purchased access.
With tracking permission, Meta, TikTok and Google receive app activation/install events and newly completed production purchase events, including product, amount and currency. Their SDKs can associate those events with device and advertising identifiers and network information for advertising measurement. We do not provide your lesson text, voice recordings, support reports or chosen referrer to these SDKs. Restored and sandbox purchases are not reported as new advertising revenue. You can revoke permission in iOS Settings → Privacy & Security → Tracking. Google uses the Firebase Analytics variant without advertising-ID collection; automatic screen reporting, vendor-ID collection and ad personalization are disabled. Anonymous Cloudflare counts remain separate.
Meta’s privacy policy · TikTok’s privacy policy · Google’s privacy policy
Links you explicitly open or paste may include source, campaign and advertisement labels. We retain the first received labels with their observation time alongside your verified Apple app identity, separately from your chosen referrer, to understand acquisition and subsequent subscription activity. These labels are supplied by the link; they are not proof that a particular advertisement caused an installation. Opening such a link does not select or change your referrer. This customer-linked evidence is separate from anonymous activity counts and is retained under the referral-administration criteria below.
When you open the app, LingoRove sends an Apple-signed app transaction to check your referral Full Access. Our service uses the verified Apple app identity to recover your referral record and invitation after reinstallation. Invitation links contain a random public code or an optional alias you choose; they do not contain your Apple account credentials.
Opening a friend's invitation or explicitly pasting a copied link lets you review it. Your chosen referrer is saved only when you confirm. With an accepted referral, verified subscription history determines whether your subscription currently supports your friend. The service retains the invitation, current attribution, change history, verified purchase records and monthly access state for referral administration. Replacing or removing a referral changes future support; it does not erase historical records.
We do not fingerprint devices, silently read your clipboard, or link referral records to anonymous activity analytics. The app caches the last confirmed referral access expiry for offline use. Contact support@lingorove.org for questions or deletion requests; records are retained only while needed to administer referrals, resolve support requests or meet legal obligations.
Android 2.0.0 — upcoming test update
The Android 2.0.0 update removes Google Mobile Ads and its advertising-consent SDK. It offers optional prepaid learning passes and streak rescues alongside subscriptions and free learning. Older installed copies of 1.0.0 remain covered by the version-specific advertising disclosures above.
Optional Google Play Games features use your Play Games profile for achievements, leaderboards and saved learning progress when connected. Without a connection, progress remains on your device. Play Games progress is separate from library exports and does not provide hosted synchronisation of your personal learning library.
Ask, online transcription and online generation of missing reading aids require separate choices. Missing reading aids send the displayed words and language to LingoRove's Cloudflare speech service; generated readings are cached on your device, marked as generated and can be incorrect. Authored pronunciation takes priority. Turning a choice off stops subsequent requests that depend on it.
Optional streak reminders and home-screen progress widgets use learning progress on your device. You control notification permission in Android settings.
Android accounts, purchases and storage
On Android, Google Play processes purchases and subscriptions where available. Optional Google sign-in is used to identify the account for purchase verification and restoration; free learning does not require sign-in. When you sign in, the app sends a Google-issued identity token to LingoRove’s account service. Purchase verification also sends the Google Play purchase token so our service can check the subscription with Google and associate access with the correct account.
These account and purchase identifiers are used for authentication, entitlement checks and fraud prevention. We do not receive your Google password or payment-card details, and we do not send your learning library as part of purchase verification. Signing out clears the app’s current sign-in session; it does not cancel a subscription or delete information already held by the service.
Manage or cancel an Android subscription through Google Play. Google controls the information it holds for billing and its other services. Account and purchase records held by LingoRove are retained while needed to provide access, resolve purchase issues, prevent fraud or meet legal obligations.
Android library exports are saved only to the destination you select. If you choose a cloud storage provider, that provider handles the exported file under its own terms and privacy policy. Android speech uses your selected text-to-speech engine; network use depends on the engine, installed voices and settings. File import gives the app access to the files you select.
Request deletion of your LingoRove account and associated data. You can start a request without reinstalling the app or first cancelling a subscription.
To request deletion of your LingoRove account and associated account data, email support@lingorove.org from the account’s email address. We may verify ownership. We will explain any purchase or security records that must be retained and why. This request does not itself cancel a Google Play subscription or delete copies of library backups in storage you control.
Support and language reports
When you email support, we receive your email address and the information you send. We use it to respond to your request.
Support correspondence is linked to its sender because we retain the reply address. We do not use that address for advertising tracking or add you to a marketing mailing list because you requested support.
When you submit a language report, the report can include the concept, language, current translation, romanization, suggested correction, comment, content references, app version and build. Requests for missing content include the expression and requested languages. These are sent to LingoRove’s reporting service for review and content improvement, with an installation identifier and report receipt used to authenticate, deduplicate and manage your submission.
Personal corrections and submitted reports are different: submitting a report shares its contents for review. Please avoid including personal or sensitive information in reports.
The reporting service retains a stable identifier derived from an app-created security key alongside each report. It can therefore associate reports from the same installation. This supports authentication, duplicate detection, rate limits and blocking abusive submissions. It is not your phone number, hardware serial number or advertising identifier, but the reports are not anonymous. Reporting does not require you to enable diagnostic sessions.
Diagnostics and screenshots
Diagnostics are optional and off by default. When you enable them in Settings, a session lasts at most 15 minutes and then turns off automatically. Changing detail level does not extend the session, and a cold start leaves diagnostics off. You can turn the session off sooner at any time.
On Android, a bounded rolling record keeps up to five minutes of recent diagnostic history on the device. It is uploaded only if you enable diagnostics, together with events from the enabled session. Screenshot reports can also include the description you choose to enter.
During an enabled session, LingoRove sends diagnostic information about app operation, timing and errors to its diagnostic service to investigate problems. This can include app/build and operating-system versions, device family, session and event identifiers, selected diagnostic systems, content identifiers and bounded playback or database state. Diagnostics do not include advertising identifiers. Expiry prevents new diagnostic and screenshot uploads; a request already transmitted cannot be recalled.
Screenshot attachment is a separate choice. Attached screenshots can reveal visible app content; review your screenshot-sharing settings and avoid sharing sensitive information. Advertising consent does not enable diagnostics.
Diagnostic records and attached screenshots can be associated with an app installation and session so we can investigate a sequence of events. This is why we disclose linked diagnostics, product interaction and photos or videos. Screenshot sharing does not give us access to your entire photo library. Our own diagnostic collection is for troubleshooting, not advertising targeting.
Device permissions and other services
Features such as speech input, Siri on Apple devices, music, notifications and file import use the relevant operating-system services and device permissions. You control permissions through the app and your device settings. Files are imported when you choose them.
Apple’s and Google’s privacy policies govern their respective services. Following an external link takes you to a service with its own privacy practices.
Service providers and protection
Apple provides App Store payments, device features, content delivery and private iCloud storage. Google provides advertising and consent services and, on Android, Google sign-in and Play billing; support email is delivered to a Google-hosted mailbox. Cloudflare provides website delivery, security, support-email routing and the anonymous app activity reporting described above. LingoRove’s own services handle content downloads, language reports, optional diagnostics and referral administration.
Service providers receiving personal information on our behalf must protect it consistently with this policy and provide protection equal to that required by Apple’s App Review Guidelines. We share information for the purposes described here and limit access to those who need it to provide or support these services. Apple and Google also process information under their own published policies.
Android early-adopter signup
If you sign up for testing, we use your Google Play email address, optional name, consent and confirmation records to provide testing instructions and administer access. Resend processes our confirmation and invitation emails. Support receives a copy of your invitation; your confirmation link is not copied to support. We do not add you to a marketing list.
Google manages Google Group membership and Play testing enrollment under its own policies. Joining our website list does not itself enroll you in Google Play testing. Contact support@lingorove.org to withdraw or request deletion of your signup record. Leaving a Play test or Google Group is a separate action through Google.
We retain signup records while needed to administer your testing request and resolve delivery problems. Delivery providers, support correspondence and infrastructure backups have separate retention cycles.
This website
This website does not include advertising, analytics scripts or a login. Its hosting and delivery services receive the network information needed to serve pages, such as your IP address and requested URL, and may keep operational or security logs.
How long information is kept
Learning data stays on your devices and in your private iCloud storage until you remove it using the applicable app or Apple controls. Removing the app from one device does not necessarily remove its iCloud data or backups.
The diagnostic service is configured to retain submitted events, crash reports and screenshots for 30 days, with expired records removed by scheduled cleanup. Submitted language reports and their review history expire after 90 days. Language corrections incorporated into the shared learning content may remain after the original report expires.
These report-content retention periods do not mean the corresponding authentication or abuse-prevention record is deleted at the same time. Installation security records, including revocations used to block abusive submissions, may remain after report content expires.
Support emails are retained only while needed to resolve your request and related follow-up, or to meet legal obligations. Referral and related subscription records are retained only while needed to administer referrals and commissions, resolve related issues, or meet legal obligations.
Apple and Google control retention for information they hold in their own services, as described in their linked policies. Infrastructure logs and backups can have separate retention cycles; deleting an active record does not necessarily remove every backup copy immediately.
Managing your information
You can withdraw optional diagnostic and screenshot sharing through the app’s diagnostic settings, review advertising choices through Advertising Privacy Choices where available, and revoke microphone, speech, music and notification permissions in your device settings. Turning a feature off stops future activity that depends on that choice; it does not automatically erase information already sent.
You can manage your learning content in the app and your iCloud storage through Apple’s settings. Deleting local app data does not itself withdraw a report already submitted or delete a support email.
To request access, correction or deletion of information held by LingoRove, email support@lingorove.org. Include the report receipt, approximate date or other relevant context so we can locate the information. We may ask for reasonable verification before acting, but never send passwords or payment-card details.
We will review your request and delete information that is no longer needed. If a legal obligation requires us to retain part of it, we will explain what must be kept and why. Requests about data held independently by Apple or Google must also be directed to those services. You do not need to enable diagnostics to make a privacy request.
Changes to this policy will be published on this page with an updated date.