Privacy Policy
Effective date: July 30, 2026
Langu (“we”, “our”, or “us”) is a real-time language learning chat application. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices you have. By using Langu you agree to these practices.
1. Who we are
Langu is operated by Alexandre Marques Kaio, registered in Brazil under MEI/CNPJ. Our primary contact for privacy matters is admin@langu-app.com.
2. Information we collect
We collect the following categories of personal data:
Account and identity
- Phone number — required to create an account and verify your identity via one-time password (OTP).
- Display name — chosen by you during onboarding or in settings.
- Profile picture — optional image you upload; stored on Amazon Web Services (AWS) S3.
- About text — an optional short bio visible to your contacts.
Contacts
With your permission, Langu reads the phone numbers stored in your device's contacts list and sends them to our servers to identify which of your contacts also use Langu. Phone numbers that do not match a Langu account are used only for this matching process, are discarded immediately afterwards, and are never stored. We retain only the phone numbers of contacts who are Langu users so we can show them to you as suggested connections. You can decline contacts access and still use the app.
Safety and moderation data
If you block another user or report a user or content, we store your block list and the report you submit (including the reason you select and any message content you reference) so we can enforce our Terms of Service and keep the platform safe.
Messages and chat content
All messages you send and receive through Langu are stored on our servers to provide the chat service, enable message delivery to recipients who are temporarily offline, and support real-time translation. A message stays on our servers for as long as the chat it belongs to exists; it is deleted when its sender deletes it for everyone, which the app allows for 48 hours after sending, within 30 days of that request and including residual copies in our backups. A copy also remains on the devices it was delivered to, in the app's local storage (SQLite), until that person uninstalls the app or deletes the chat.
Voice messages
Langu lets you record and send voice messages. With your permission, the app uses your device's microphone to record audio while you hold the record button. You can decline microphone access and keep using the rest of the app — only recording is disabled. Here is exactly what happens to a recording:
- It is uploaded and stored. When you send a voice message, the audio file is uploaded to our media storage (Amazon S3) and kept there so the people in the chat can play it. Recordings are limited to 10 minutes and 10 MB. Playback uses a long, randomly generated link that is not listed or indexed anywhere — but anyone who obtains that link can play the recording.
- It is transcribed when a recipient unlocks it. A voice message is not transcribed automatically. If a recipient chooses to unlock the transcript, we send the audio file to OpenAI, which converts the speech to text. We store the resulting transcript on our servers and reuse it for anyone else in the same chat who unlocks the same recording, so the audio is sent for transcription only once.
- The transcript is translated. The transcript is then sent to Google Cloud Translationto be translated into the recipient's learning language for that chat. Transcripts and their translations are stored on our servers so the same text is not sent to the provider again.
- We record who unlocked what.We store which of your voice messages each user has unlocked and when, so a repeat unlock is free and does not consume the user's quota.
- Deletion.Deleting a voice message for everyone — which the app allows the sender to do for 48 hours after sending — deletes the audio file from our media storage, together with its stored transcript and translations. That removal completes within 30 days, including residual copies in our backups. A copy of the audio may remain in the app's local cache on devices it was already delivered to.
We do not use your recordings, transcripts, or messages to train AI or speech models, and we do not use them for advertising or profiling.
Language settings and fluency data
We store your chosen interface language, your fluent language, and fluency signal data (e.g. messages read and written per day) to provide the fluency tracking and progress features. This data is retained as long as your account exists.
Device and push notification token
We collect your device's Expo push notification token to send you message notifications. This token is associated with your account and updated each time you log in. When you are offline and a message arrives, the notification we send through the Expo Push Notification Service contains the sender's display name and the text of the message, so that it can be shown on your lock screen. You can disable notifications at any time in your device settings.
Billing and subscription data
If you purchase a Plus or Pro subscription or a boost pack, we record your subscription tier, purchase date, expiry date, and usage quotas. Payment processing is handled entirely by Stripe or the Apple App Store / Google Play — we do not store your card number, bank details, or any payment instrument data.
Usage and technical data
Our servers automatically log standard technical information when you use the app, including IP address, device platform (iOS or Android), and timestamps of API requests. This data is used for security, fraud prevention, and debugging.
3. How we use your information
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide and deliver the chat service | Phone number, messages, contacts, device token | Contract performance |
| Verify your phone number when you sign in | Phone number and one-time code (sent to Twilio) | Contract performance |
| Translate messages in real time | Message text (sent to Google Cloud Translation) | Contract performance |
| Transcribe a voice message when a recipient unlocks it | Voice recording audio file (sent to OpenAI) | Contract performance |
| Translate a voice message transcript | Transcript text (sent to Google Cloud Translation) | Contract performance |
| Generate grammar explanations | Message text (sent to OpenAI) | Contract performance |
| Generate conversation suggestions (Plus/Pro) | Recent message context — up to 20 messages (sent to OpenAI) | Contract performance |
| Send push notifications | Device push token, sender name, and the message text shown in the notification (sent to Expo) | Contract performance |
| Process payments and manage subscriptions | Subscription tier, purchase records | Contract performance |
| Provide fluency tracking and progress reports | Fluency signals (read/write activity) | Contract performance |
| Prevent fraud, abuse, and enforce limits | Phone number, IP address, device info | Legitimate interest |
| Moderate reported content and enforce safety rules | Block lists, user reports, reported message content | Legitimate interest |
| Improve the service and debug issues | Technical logs, error data | Legitimate interest |
| Comply with legal obligations | Any data required by applicable law | Legal obligation |
4. Third-party services that process your data
Langu uses the following third-party services. By using Langu, you acknowledge that relevant portions of your data are processed by these providers under their own privacy policies.
5. International data transfers
Our primary servers are located in Brazil (AWS São Paulo). When you use translation or AI features, your message content is transferred to Google (USA) and OpenAI (USA) to process your request. When a voice message is unlocked, the audio recording itself is transferred to OpenAI (USA) for transcription and the resulting transcript to Google (USA) for translation. Your phone number is transferred to Twilio (USA) to send and check the verification code. Push notifications — including the sender name and message text they display — are routed through Expo's servers in the USA. These transfers are necessary to provide the core functionality of the service. Where required by applicable law, we rely on standard contractual clauses or equivalent mechanisms to protect your data during international transfers.
6. Data retention
| Data category | Retention period |
|---|---|
| Chat messages (server copy) | While the chat exists; the content is deleted when the sender deletes the message for everyone, which is possible for 48 hours after sending |
| Chat messages (device copy) | Until you uninstall the app or delete the chat |
| Voice message recordings (audio files) | Stored with the message; deleted from our media storage when the sender deletes the message for everyone |
| Voice message transcripts and their translations | Stored with the message; deleted together with the message, and deleted when the sender requests account deletion |
| Voice message unlock records (who unlocked what, and when) | Until you request account deletion |
| AI writing corrections and translation revisions | Stored with the message; deleted together with the message, and deleted when you request account deletion. A suggestion you preview but never apply expires about ten minutes after you ask for it and is then deleted automatically |
| Account data (phone number, profile) | Until you request account deletion |
| Contacts matched in Langu | Until you request deletion or remove them |
| Fluency and language data | Until you request account deletion |
| Billing and subscription records | Until you request deletion (may be retained longer for legal/tax obligations) |
| Push notification token | Until you log out or request deletion |
| AI processing cost records | Retained after account deletion with your identifiers removed |
| Account deletion audit record (hashed phone number, timestamps) | Retained as legal proof that the deletion was carried out |
| Server access logs | Up to 90 days |
Where this table says data is deleted, that deletion completes within 30 days of the event that triggers it, including residual copies held in our backups. Removal from our storage runs as a background job that is retried until it succeeds, so it is not always instantaneous.
7. Account deletion — what is removed and what is kept
You can delete your account at any time from Settings → Delete Account in the app, confirming with a one-time code sent to your phone. Deletion starts immediately and completes within 30 days, including residual copies in our backups. Full step-by-step instructions, including what to do if you no longer have the app installed, are at langu-app.com/delete-account.
Deleted
- Your account record: phone number, display name, profile picture, and about text.
- The media you uploaded — your profile picture file, and the photos and voice recordings attached to messages you sent, including messages that stay in an archived chat — together with the transcripts and translations we had stored for those recordings.
- Your saved contact matches — the Langu users we had linked to your account.
- Your language settings, fluency signals, and progress data, including the grammar explanations and conversation suggestions generated for you.
- Your push notification token, so no further notifications can be sent to you.
- Your record of which voice messages you had unlocked.
- The AI writing corrections and translation revisions saved alongside your messages — both the ones you applied yourself and the ones someone else applied to a message you wrote — together with any suggestions that were previewed but never applied, whoever asked for them.
- Your billing and subscription records held by Langu. Any active Stripe subscription is cancelled as part of the deletion.
Kept
- Your one-to-one chats are archived and your messages stay in them, no longer linked to your account. The people you talked to keep the conversation they took part in, exactly as they would if you had simply left the chat. This is a deliberate choice, and it draws a line between your words and your files: the messages you sent may stay visible to the other people in those archived chats, but the media you uploaded — photos, voice recordings, and your profile picture — is deleted from our servers. If you owned a group chat, ownership passes to the longest-standing remaining member.
- Copies on other people's devices.Messages and voice recordings already delivered to other participants remain in their app's local storage on their devices, and we cannot remove them.
- A deletion audit record. We keep the deletion timestamps and a one-way cryptographic hash of your phone number — not the number itself — as proof that the deletion was carried out.
- AI processing cost records. The internal records of what the translation and AI features cost us are kept for accounting, with your user and chat identifiers removed so they no longer identify you.
- Payment records held by payment providers. Stripe, the Apple App Store, and Google Play keep their own transaction records under their own policies and legal obligations. We cannot delete those on your behalf.
8. Your rights
Depending on where you live, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate data. You can update your display name, about text, and profile picture directly in the app.
- Deletion — delete your account and associated personal data at any time directly in the app: go to Settings → Delete Account and confirm with the one-time code sent to your phone. Deletion starts immediately and completes within 30 days, including residual copies in our backups. If you no longer have access to the app, follow the instructions at langu-app.com/delete-account or email admin@langu-app.com with subject “Delete my account” and we will process your request within 30 days. Section 7 above sets out exactly what deletion removes and what is kept.
- Data portability — request an export of the personal data you provided to us.
- Objection / restriction — object to or ask us to restrict certain processing activities.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at admin@langu-app.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.
If you are located in Brazil, you have additional rights under the Lei Geral de Proteção de Dados (LGPD), including the right to lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
9. Children's privacy
Langu is intended for users who are 13 years of age or older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child under 13 has created a Langu account, please contact us at admin@langu-app.com and we will delete the account promptly.
For users between 13 and 18 in Brazil, we rely on LGPD Article 14 guidance and require that a parent or guardian review this policy. School and institutional plans that involve users under 18 must be established by the responsible institution, which accepts liability for appropriate consent on behalf of their users.
10. Security
We use industry-standard security measures including HTTPS/TLS for all data in transit, encrypted storage for authentication tokens on your device (via secure enclave storage), and access controls on our servers. No system is completely secure — if you discover a security vulnerability, please report it to admin@langu-app.com.
11. Cookies and tracking
The Langu mobile app does not use advertising trackers, behavioral analytics SDKs, or third-party cookies. Our website (langu-app.com) does not currently use analytics cookies.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where required by law, by sending you a notification through the app or by email. Continued use of Langu after changes are posted constitutes your acceptance of the updated policy.
13. Contact us
For any privacy-related questions, requests, or complaints, contact us at:
Langu — PrivacyAlexandre Marques Kaio
Brazil
admin@langu-app.com