This Privacy Notice explains how IntlMarketSix, LLC ("we", "us", "our") collects, uses, shares, and protects your personal data when you use Linguist (the "Service"). We act as the data controller for personal data processed through the Service.
1. Data we collect and how we collect it
We collect the following categories of personal data. Unless noted otherwise, we collect it directly from you when you create an account, use the Service, or contact us.
- Account information: name, email address, hashed password (or OAuth identifier if you sign in with a third-party provider such as Google or Apple), and profile preferences such as native language, learning language, and estimated proficiency (CEFR) level. Used to create and secure your account and personalize the Service.
- Translations and Service content: text you submit for translation, correction, or practice, together with the corrections, explanations, and alternative phrasings we generate for you. Used to deliver the feature you requested and to show your history.
- Conversations: messages you exchange with AI practice partners and Ask Linguist, including the AI responses. Used to power the conversation, save it to your history, and improve future personalized responses.
- Learning history and progress: recurring mistake patterns, vocabulary you've seen, spaced-repetition review history, streaks, language score, and CEFR sample data. Used to personalize coaching and track your progress.
- Subscription information: plan, status, renewal date, entitlement, and the identifier issued by the payment platform (Paddle customer ID on web; original App Store transaction ID / RevenueCat app user ID on iOS). Used to grant access to paid features and restore purchases across devices. We do not receive or store full payment card details.
- Diagnostic and usage information: pages visited, features used, monthly usage counters, error logs, device and browser information, IP address, and approximate location derived from IP. Collected automatically as you use the Service and used to operate the Service, enforce usage limits, prevent abuse, and diagnose problems.
- Support communications: messages you send us by email and any information you include in them. Used to respond to your inquiry.
2. How we use your data
- Provide the Service — create your account, run translations and practice sessions, save your history, track progress (legal basis: contract).
- Enforce limits and prevent abuse — usage counters, rate limits, fraud and security monitoring (legitimate interests).
- Improve the Service — diagnose errors, evaluate model quality, design new features (legitimate interests).
- Support — respond to inquiries you send us (contract / legitimate interests).
- Legal compliance — comply with tax, accounting, and other legal obligations (legal obligation).
3. AI processing
Linguist uses OpenAI and Google (Gemini) as its AI service providers to power AI-based features, including translations, corrections, explanations, conversation practice, Ask Linguist, personalized language coaching, daily reading, and any other AI-powered functionality in the Service.
Consent. Before any AI processing occurs, we present an in-app AI Processing consent dialog that explains what information is shared and asks for your permission. You must accept this dialog to use AI-powered features. If you decline, AI-powered features will not be available until you provide your consent.
To provide these features, Linguist securely sends the following information to our AI provider(s) for processing:
- Text you submit (for example, sentences to translate or chat messages);
- Conversation history from practice sessions and Ask Linguist;
- Previous translations;
- Relevant learning history;
- Recurring mistakes we've identified;
- Your estimated language level (CEFR);
- Other context necessary to personalize AI responses.
Why this information is shared. It is used to generate AI responses, personalize coaching, provide translations, explain your mistakes, and improve the quality and continuity of your learning experience.
Our AI providers act solely as service providers to Linguist and process this information only for the purpose of providing the requested functionality. Under our agreements, they do not use your content to train their models.
We share only the information necessary to provide the requested AI-powered functionality and carefully select service providers that maintain appropriate security and privacy protections.
We do not sell your personal information.
We do not use your submitted content to train our own AI models.
4. Payment processing
Payments are handled differently depending on the platform you subscribe on:
- Web subscriptions are processed by Paddle, which acts as the Merchant of Record and handles checkout, billing, taxes, invoicing, refunds, and subscription management. Paddle collects your payment details directly and processes them under its own privacy policy.
- iOS subscriptions are processed through Apple's In-App Purchase system. Apple handles the transaction and receives your payment details under its own privacy policy.
- RevenueCat is used only to validate App Store purchases, manage subscription status, restore purchases, and synchronize entitlements across your devices. RevenueCat receives the identifier necessary to associate App Store purchases with your Linguist account, together with App Store purchase information required to validate purchases, restore subscriptions, and manage subscription entitlements. RevenueCat does not receive or store your payment card details.
Neither Linguist nor RevenueCat stores or receives your full payment card details.
5. Third-party service providers
We share personal data with the following production service providers, and each receives only the minimum information necessary to perform its service:
- OpenAI and Google (Gemini) — AI-powered translations, explanations, conversations, coaching, and personalization (see "AI processing" above).
- Paddle — web subscription payment processing (Merchant of Record: checkout, billing, taxes, invoicing, refunds).
- Apple — App Store subscription processing on iOS.
- RevenueCat — App Store subscription validation, entitlement management, and cross-device restore.
- Supabase (via Lovable Cloud) — authentication, secure account storage, database hosting for your account and learning data, and serverless functions that run the Service.
- Sentry — error monitoring and diagnostics (crash and error reports, limited device/browser context).
- Resend — transactional email delivery (for example, sign-in and account emails).
- Professional advisers and authorities — legal, accounting, and tax advisers under confidentiality, and government authorities where required by law, court order, or to protect our rights, users, or the public.
We do not sell your personal data.
6. International transfers
Our service providers may process data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or equivalent UK transfer mechanisms) to protect your data.
7. Data retention
We keep personal data only as long as needed for the purposes described in this Notice. Retention is determined by the type of data and the reason we hold it:
- Account, translations, conversations, and learning history are retained while your account is active so you can access your history and so we can personalize your experience.
- Subscription and billing records are retained for as long as required by tax, accounting, and consumer-protection laws (typically up to 7 years), even after account deletion.
- Diagnostic logs and telemetry are retained for a shorter period (typically up to 90 days) and then deleted or aggregated.
When you delete your account from Settings, we permanently delete your account credentials, profile, translations, conversations, learning history, and progress data from our systems, except for records we are legally required to retain (such as billing records described above). Deletion is irreversible and applies to backups within a reasonable rolling window.
8. Your rights
You can exercise the following rights at any time. Where the law in your jurisdiction gives you additional rights, those apply too.
- Access the personal data we hold about you — most of it is visible in the app (profile, history, progress, subscription). For a full export, email us.
- Correct inaccurate or incomplete data — update your profile in Settings, or email us for anything you can't edit yourself.
- Delete your account and associated personal data at any time from Settings → Delete account in the app. This permanently removes your account and content as described in "Data retention" above.
- Restrict or object to certain processing;
- Receive a portable copy of data you've provided;
- Withdraw consent (including AI-processing consent) where we rely on consent;
- Lodge a complaint with your local data protection authority.
For privacy questions or to exercise any of these rights, email intlmarketsix@gmail.com. We respond within one month.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest for our databases, hashed passwords, scoped authentication tokens, role-based access controls with row-level security on user data, audit logging, and least-privilege access to production systems. Our third-party service providers are contractually required to maintain equivalent protections. No system is perfectly secure, but we work continuously to reduce risk.
10. Cookies
We use a small number of strictly necessary cookies and similar technologies (for example, session and authentication tokens) to operate the Service. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and, where required, ask for your consent.
11. Children
The Service is not directed to children under 13 (or under 16 in the EU/EEA / UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "last updated" date at the top reflects the most recent revision.
13. Contact
Controller: IntlMarketSix, LLC. For privacy questions or to exercise your rights, contact intlmarketsix@gmail.com.