Privacy Policy

01 About This Privacy Policy

This Privacy Policy applies to SayLingo.ai websites, account services, learning interfaces, and related features operated by Cloudvale LLC, including:

• The main website at www.saylingo.ai.
• The AI language learning platform at talk.saylingo.ai.
• Account registration, sign-in, profile management, and subscription services.
• AI tutor conversations and speaking practice.
• Pronunciation, translation, grammar, and learning feedback features.
• Language courses, exercises, and exam preparation.
• Learning assessments, certificates, and progress records.
• Business, school, and organizational learning features.
• Customer support and related communications.

In this Policy, "SayLingo," "we," "us," and "our" refer to Cloudvale LLC in connection with its operation of SayLingo.ai.

"Services" refers to the SayLingo features, websites, and related activities covered by this Policy.

"Personal information" or "personal data" means information that identifies, relates to, describes, or can reasonably be linked to an individual, as defined by applicable law.

This Policy should be read together with our Terms of Service and Refund Policy.

Where mandatory data protection laws provide additional rights or protections, those laws take precedence over any inconsistent provision in this Policy.

02 Our Approach to Protecting Your Privacy

We follow several important privacy principles.

Purpose-Based Processing

We collect and use personal information for identified and legitimate purposes, including providing language learning services, managing accounts, processing payments, protecting users, and maintaining platform reliability.

Data Minimization

We aim to collect only the information reasonably necessary for a particular purpose.

Transparency

We explain the categories of information processed and the circumstances in which information may be shared with service providers or other authorized parties.

User Control

We provide ways to manage account information, learning records, communication preferences, and applicable privacy rights.

Security

We use appropriate technical and organizational measures designed to protect information against unauthorized access, misuse, disclosure, alteration, or loss.

Special Protection for Younger Learners

Where children or teenagers use eligible SayLingo services, we apply additional safeguards and respect applicable parental, school, and age-related consent requirements.

We do not sell private AI tutor conversations or student educational records. We do not authorize their use for unrelated third-party advertising.

03 Personal Information We Collect

The information we collect depends on how you interact with SayLingo and which features you use.

3.1 Account and Registration Information

When you register, sign in, or manage an account, we may collect:

• Email address.
• Account name or profile name, where provided.
• User account identifiers.
• Authentication and account access information.
• Language preferences.
• Selected AI tutors and learning settings.
• Account creation and login records.
• Subscription status and membership information.

We use this information to identify your account, provide secure access, maintain your settings, and support your learning experience.

3.2 AI Tutor Conversations and Learning Content

When you communicate with an AI language tutor, we process information needed to generate educational responses and maintain applicable learning features.

This may include:

• Messages you type or submit.
• Speech converted into text.
• AI tutor responses.
• Conversation history.
• Selected language and tutor.
• Grammar and vocabulary corrections.
• Translations and pronunciation guidance.
• Conversation topics and role-play scenarios.
• Learning exercises and submitted answers.
• Other content you choose to provide during a session.

Your learning conversations may contain personal information that you voluntarily include.

For example, you might mention your name, occupation, travel plans, educational goals, or personal circumstances while practicing a language.

Please avoid including sensitive personal information that is unnecessary for language practice.

We process submitted content to generate responses, deliver requested learning features, maintain relevant records, and perform other purposes described in this Policy.

3.3 Voice and Audio Information

SayLingo provides speaking and listening features that may involve audio processing.

When you choose to use voice-related features, we may process:

• Voice input from your microphone.
• Audio files that you submit.
• Speech recognition results.
• Transcriptions of spoken language.
• Pronunciation and fluency feedback.
• Audio associated with learning activities.
• Related technical information needed to process speech.

Audio processing may be performed through authorized speech recognition, AI processing, or text-to-speech service providers.

Audio or derived information may be retained where necessary to provide requested functionality, maintain available learning records, investigate technical issues, or satisfy applicable legal obligations.

We do not require continuous microphone access for ordinary text-based learning.

Microphone permissions are controlled through your browser, device, or applicable application settings. You may revoke those permissions, although doing so may prevent voice-based features from functioning.

The provision of microphone access does not authorize unrelated audio collection or processing.

3.4 Images, Files, and Other Submitted Materials

Certain learning activities may allow you to submit images, files, or other materials for AI-assisted language practice.

For example, you may use an image description exercise to practice vocabulary or sentence construction.

When you provide this material, we may process its content and associated technical information to provide the requested feature.

Please do not upload documents, photographs, or files containing unnecessary personal, confidential, or sensitive information.

If a file contains personal information about another person, you should ensure that you have an appropriate basis for submitting it.

3.5 Learning Progress and Assessment Information

We may collect or generate educational information associated with your account, such as:

• Languages studied.
• Selected courses and learning levels.
• Completed lessons and exercises.
• Conversation activity.
• Practice frequency and duration.
• Vocabulary and grammar progress.
• Pronunciation and speaking feedback.
• AI-generated proficiency assessments.
• CEFR-aligned learning levels.
• Certificate information and learning achievements.

We use these records to provide learning continuity, personalize educational activities, help you understand your progress, and deliver features included in your membership.

3.6 Subscription and Payment Information

When you purchase a membership or other paid service, we may receive information from the relevant payment provider or merchant of record.

This may include:

• Purchased plan or service.
• Transaction reference and payment status.
• Payment date, amount, and currency.
• Subscription start date and renewal information.
• Limited billing and transaction information.
• Payment-related email address.
• Refund, cancellation, and billing support records.
• Tax or invoice information where relevant.

Payment card details are ordinarily submitted to authorized payment providers rather than directly to the SayLingo learning interface.

We generally do not need to receive or retain complete payment card numbers or card security codes to operate your learning account.

The payment provider may collect additional payment, identity verification, billing, or fraud prevention information in accordance with its role and applicable legal requirements.

3.7 Technical and Device Information

When you access our Services, certain technical information may be collected automatically.

This may include:

• IP address.
• Browser type and version.
• Device type and operating system.
• Language and regional settings.
• Pages visited and features accessed.
• Session and access timestamps.
• Referral information.
• Cookie or similar identifiers.
• Error reports and diagnostic information.
• Security and authentication logs.

We use this information to operate the website, diagnose problems, protect accounts, improve performance, and understand general service usage.

3.8 Customer Support Information

When you contact us, we may process:

• Your email address and contact information.
• Your message and related correspondence.
• Account or transaction details needed to investigate your request.
• Screenshots or files you voluntarily provide.
• Support outcomes and relevant communication history.

We use this information to respond to inquiries, address technical issues, process eligible requests, and maintain appropriate customer support records.

3.9 School, Business, and Organization Information

Where SayLingo provides organizational learning features, additional information may be processed.

Depending on the applicable plan and configuration, this may include:

• School or organization name.
• Administrator account details.
• Learner names and email addresses.
• Membership and seat assignments.
• Account activation status.
• Learning activity statistics.
• Educational progress reports.
• Organization-specific account settings.

Access to this information is governed by applicable permissions, service configurations, agreements, and legal requirements.

04 How We Collect Information

We collect personal information through several sources.

Information You Provide Directly

This includes registration details, account preferences, messages, voice input, uploaded learning materials, and customer support communications.

Information Generated Through Your Use of SayLingo

This includes AI conversation results, learning progress, proficiency assessments, activity records, and technical logs associated with the Services.

Information Received From Payment Providers

This includes purchase confirmations, subscription status, transaction references, and information required for billing, refunds, and fraud prevention.

Information Received From Authorized Organizations

For school or organizational accounts, an authorized administrator may provide information needed to create and manage learner access.

Information Collected Through Website Technologies

Cookies and related technologies may provide information about how the website and its features are accessed and used.

We do not assume that information provided by a school, parent, payment provider, or other party may be used for purposes unrelated to those for which it was legitimately obtained.

05 How We Use Personal Information

We use personal information for specific business, educational, security, and legal purposes.

5.1 Providing AI Language Learning Services

We process necessary information to:

• Create and manage accounts.
• Support communication with AI tutors.
• Generate personalized AI responses.
• Deliver speech recognition and pronunciation feedback.
• Provide translations and grammar corrections.
• Present courses and exercises.
• Maintain learning history and settings.
• Generate available learning assessments and certificates.

5.2 Personalizing Your Learning Experience

We may use relevant learning preferences and educational activity to adapt the experience to your selected language, proficiency level, study goals, and learning context.

For example, previously selected language settings may be used to maintain continuity between sessions.

5.3 Processing Payments and Managing Subscriptions

We use billing and transaction information to:

• Identify successful payments.
• Activate or renew paid membership benefits.
• Manage subscription status.
• Investigate duplicate charges and payment errors.
• Evaluate refund and cancellation requests.
• Maintain required financial and transaction records.

5.4 Protecting Accounts and Platform Security

We may process technical and account information to detect suspicious access, prevent fraudulent activity, investigate abuse, maintain service availability, and enforce legitimate security controls.

5.5 Improving Service Quality

We may evaluate error reports, technical performance, aggregated usage information, and appropriately de-identified information to understand how the Services perform and identify improvements.

The use of identifiable learning conversations for any additional training or research purpose is subject to the specific safeguards described in Section 7.

5.6 Communicating With Users

We may send service-related communications, including payment confirmations, account notifications, important policy updates, and responses to customer support requests.

Promotional communications are subject to applicable marketing and consent requirements.

Where required, users can opt out of marketing communications without losing access to necessary transactional or security notices.

5.7 Complying With Legal Obligations

We may process information when reasonably necessary to comply with applicable laws, respond to valid legal requests, maintain required records, protect legal rights, and fulfill payment-related obligations.

06 Legal Bases for Processing Personal Information

Where the General Data Protection Regulation (GDPR), UK GDPR, or similar laws apply, personal information must be processed under an appropriate legal basis.

Depending on the purpose and circumstances, our legal bases may include the following.

Performance of a Contract

Processing necessary to provide the Services you request, such as maintaining your account, generating AI tutor responses, saving requested learning progress, and managing your subscription.

Legal Obligations

Processing required to comply with applicable tax, financial, accounting, consumer protection, or other legal requirements.

Legitimate Interests

Processing reasonably necessary for legitimate interests such as protecting accounts, preventing fraud, maintaining platform security, diagnosing service errors, and improving technical reliability, provided those interests are not overridden by applicable individual rights.

Consent

Processing based on your consent where required, such as certain optional tracking technologies, marketing communications, or other activities requiring specific permission.

Other Lawful Grounds

Where applicable law provides another lawful basis appropriate to the circumstances, processing may be carried out in accordance with that basis.

When processing relies on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing lawfully carried out before the withdrawal.

We do not rely on a general acceptance of this Privacy Policy as a substitute for separate consent where specific consent is legally required.

07 AI Processing and Third-Party AI Service Providers

Artificial intelligence is central to the SayLingo learning experience.

To generate responses, translations, corrections, pronunciation feedback, and other learning features, relevant user inputs may be transmitted to authorized AI technology providers.

Depending on the feature, this information may include:

• Conversation text.
• Relevant previous messages needed for context.
• Voice input or transcriptions.
• Selected language and learning instructions.
• Submitted educational materials.
• Technical identifiers necessary to process the request.

These providers may process information using their own technical infrastructure to perform the contracted services.

We aim to limit the information shared to what is reasonably necessary for the requested functionality and applicable security requirements.

AI Model Training and Independent Use

We do not sell private learner conversations or voice recordings to AI model providers.

We do not authorize service providers to use private learner content for unrelated advertising.

We do not use identifiable private learning conversations or voice recordings to train general-purpose AI models for unrelated purposes without an appropriate legal basis, additional disclosure, and consent where required by law.

AI service providers may retain or process limited information for service delivery, security, abuse prevention, or other legally permitted purposes under the applicable contractual arrangements.

Use of AI services can involve processing in countries outside your location.

Additional information about international processing is provided in Section 16.

08 Speech Recognition, Pronunciation, and Audio Features

Voice-based learning is an optional part of SayLingo's educational experience.

When you actively choose to speak with an AI tutor, voice input may be processed to recognize spoken language and generate an appropriate educational response.

Speech-related processing may also support pronunciation correction, speaking practice, and audio feedback.

We distinguish between the following types of information:

Voice Input

Audio submitted by the learner for speech recognition or other requested features.

Speech Transcriptions

Text produced from submitted audio.

Learning Feedback

Educational information generated from speech or language analysis.

AI Tutor Audio

Speech generated by AI or text-to-speech technologies for the learner to hear.

We do not use voice input to identify individuals through biometric authentication unless such a feature is separately disclosed and supported by an appropriate legal basis.

If you prefer not to submit voice input, you may use available text-based learning features.

You can manage microphone access through your device or browser permissions.

09 Conversation History and Learning Records

SayLingo may maintain conversation history and learning records to support continuity and help users review previous educational activities.

Depending on the feature, you may be able to:

• Review previous conversations.
• Return to earlier learning activities.
• Examine corrections and feedback.
• Track learning progress.
• Download selected learning records.
• Delete individual messages or clear available conversation history.

When a deletion function is used, information is removed from the relevant user-facing experience according to the operation of that function.

Related information may remain temporarily in backups, technical records, or service provider systems where necessary and legally permitted.

Certain information may also be retained to comply with legal obligations, resolve security incidents, or maintain valid transaction records.

The availability of a conversation history feature does not mean that every temporary audio processing file is permanently stored.

10 AI Language Assessments and Certificates

SayLingo provides educational progress assessments and language certificate features.

Information associated with these features may include:

• Learner account or display name.
• Language studied.
• AI-generated learning assessment.
• CEFR-aligned proficiency level.
• Assessment or certificate date.
• Certificate identifier.
• Information necessary to verify a certificate's authenticity.

An issued certificate may include a verification feature that allows other people to confirm specified certificate details.

If you share a certificate, verification link, or certificate identifier, information displayed through that verification process may become accessible to the recipients or other people who possess the relevant link or identifier.

We aim to limit certificate verification information to what is reasonably necessary to confirm its authenticity and educational details.

We do not intentionally publish private AI tutor conversation transcripts as part of ordinary certificate verification.

AI-generated proficiency assessments are educational indicators. They should not be interpreted as independent government-issued qualifications or official third-party language examination results.

11 School, Educational, and Organizational Accounts

SayLingo may provide language learning services to schools, educational institutions, businesses, and other organizations.

An organization may create or manage learner accounts, assign access, and review available educational information through its administrative features.

Depending on the organization's agreement and settings, authorized administrators may be able to view:

• Learner account details.
• Subscription or seat status.
• Learning activity and participation.
• Practice duration or frequency.
• Progress summaries and educational reports.
• Other information enabled for the relevant organizational service.

Administrative access is intended to support the legitimate educational or organizational purposes of the service.

Private conversation content is not made available merely because another person purchases an individual subscription. Any organizational access to more detailed learner information is subject to the applicable configuration, disclosures, permissions, and legal requirements.

For certain institutional services, the school or organization may determine the purposes and means of processing student data, while SayLingo processes that information on its behalf under an applicable agreement.

In other situations, Cloudvale LLC may act as an independent controller for its own account security, payment administration, or legal compliance activities.

Where educational privacy rules apply, responsibilities are determined according to the relevant law and contractual arrangement.

12 Children's Privacy and Teenager Mode

Protecting younger learners is an important part of our privacy approach.

SayLingo may provide age-appropriate learning experiences and features designed for teenagers or educational environments.

Teenager Mode and related safety settings are intended to support a more appropriate learning experience. They do not, by themselves, replace parental consent, age-related legal requirements, or other privacy safeguards.

12.1 Younger Children

Where the law requires parental or guardian consent before collecting or processing a child's personal information, we will seek the required authorization or use another specifically permitted legal mechanism.

In the United States, the Children's Online Privacy Protection Act and its implementing rules may require verifiable parental consent for covered online services collecting personal information from children under 13.

12.2 School-Authorized Educational Use

In circumstances where applicable law permits a school to provide consent for an educational service, such authorization must be limited to the permitted educational purpose and satisfy the relevant legal conditions.

School authorization does not permit unrelated commercial exploitation of children's information.

12.3 Children's Data Protection

For applicable child or student accounts, we seek to:

• Limit personal information collection to what is reasonably necessary for the educational purpose.
• Restrict access to authorized individuals and service providers.
• Avoid using private student learning content for targeted advertising.
• Apply appropriate security and retention controls.
• Honor legally valid parental, guardian, school, and learner privacy requests.

Children's personal information is not retained indefinitely merely because a learning account once existed.

12.4 Parent and Guardian Requests

Parents or legal guardians may contact [email protected] to request information about applicable children's data practices or to exercise legally available access, correction, deletion, or consent-related rights.

We may request reasonable verification before disclosing or changing a child's information.

Where an educational institution controls the relevant student records, we may coordinate the request with that institution as required by law and the applicable agreement.

13 Payment Providers and Transaction Privacy

Paid memberships may be processed by third-party payment service providers or merchants of record.

These providers may handle payment card information, billing data, fraud checks, refunds, taxation, and transaction verification according to their contractual and legal responsibilities.

Depending on the payment arrangement, a payment provider may act as a processor, independent controller, or merchant of record for certain information.

SayLingo may receive transaction-related information sufficient to:

• Confirm that payment was successful.
• Activate purchased services.
• Identify the relevant membership.
• Confirm subscription renewals.
• Process cancellation or refund inquiries.
• Investigate payment disputes.
• Maintain legally required financial records.

A payment provider may maintain its own records where necessary for banking, payment network, tax, fraud prevention, or regulatory purposes.

Deleting a SayLingo learning account does not necessarily require an independent payment provider to immediately erase records it must legally retain.

Information about membership payments and eligible refunds is provided in our Refund Policy.

14 Cookies and Similar Technologies

SayLingo may use cookies and related technologies to operate its websites and support the user experience.

These technologies may serve different purposes.

Essential Cookies

Used for basic functionality such as account sessions, authentication, security, and remembering necessary settings.

Functional Cookies

Used to remember selected preferences, such as website language or interface settings.

Analytics Technologies

Used, where enabled, to understand website performance, feature usage, technical errors, and general visitor activity.

Advertising and Measurement Technologies

Where applicable, certain technologies may help measure advertising effectiveness or understand how visitors discover the website.

The use of non-essential cookies or similar technologies is subject to the consent and opt-out requirements applicable in the visitor's jurisdiction.

Where prior consent is legally required, non-essential technologies should not be activated before that consent is obtained.

Users may manage cookies through available website controls or browser settings.

Disabling certain cookies may affect specific features.

Where required by applicable law, users can withdraw consent or change their choices without unnecessary obstacles.

15 When We Share Personal Information

We may disclose limited personal information to authorized recipients where necessary for legitimate purposes described in this Policy.

15.1 AI and Speech Processing Providers

Providers that generate language responses, recognize speech, synthesize audio, or perform related technical processing.

15.2 Hosting and Infrastructure Providers

Providers supporting cloud hosting, data storage, security, website delivery, and technical operations.

15.3 Payment and Billing Providers

Payment processors, merchants of record, and related providers involved in subscriptions, financial transactions, fraud prevention, and billing administration.

15.4 Customer Support and Communications Providers

Services used to deliver support communications, account messages, or operational notifications.

15.5 Analytics and Security Providers

Services that help analyze technical performance, detect abuse, and protect the platform.

Where advertising measurement services are used, any disclosure of relevant identifiers is subject to applicable consent and opt-out requirements.

15.6 Authorized Schools and Organizations

Where a learner belongs to an organizational plan, information may be available to authorized administrators according to the applicable arrangement.

15.7 Legal and Compliance Purposes

Information may be disclosed when legally required or reasonably necessary to comply with valid legal process, protect rights, investigate fraud, or address security risks.

15.8 Business Transactions

If Cloudvale LLC undergoes a merger, acquisition, restructuring, financing, or transfer of relevant business assets, information may be disclosed as reasonably necessary for the transaction, subject to applicable privacy protections.

We do not provide unrestricted access to private learner conversations or educational records for unrelated commercial purposes.

16 International Data Processing and Transfers

SayLingo serves users across multiple countries and regions.

Cloudvale LLC is registered in the United States. Personal information may be processed in the United States and in other countries where authorized service providers, cloud infrastructure, AI systems, or payment providers operate.

These locations may have different data protection laws from the country where you reside.

We seek to apply appropriate safeguards to international processing and transfers.

Where the EU GDPR, UK GDPR, Brazilian LGPD, or other relevant laws impose specific requirements, we will use applicable lawful mechanisms and safeguards, which may include recognized adequacy arrangements, contractual protections, or other permitted transfer measures.

The safeguards used depend on the nature of the data, the recipient, the countries involved, and the applicable legal framework.

Where legally required, further information about the relevant safeguards and available copies of applicable transfer arrangements may be requested through [email protected].

17 How Long We Retain Personal Information

We aim to retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

Retention depends on the type of information and the reason it was collected.

Account Information

Generally retained while the account remains active and for a limited period afterward where reasonably necessary for account closure, security, dispute resolution, or legal compliance.

Conversation and Learning Information

Generally maintained according to the relevant learning history and account features, unless deleted, no longer needed, or subject to a longer lawful retention requirement.

Audio and Submitted Learning Materials

Retained according to the functionality requested, operational necessity, applicable service provider arrangements, and relevant legal requirements.

Payment and Transaction Records

Retained as reasonably necessary for billing administration, taxation, accounting, payment disputes, fraud prevention, and legal obligations.

Technical and Security Logs

Retained for periods reasonably necessary to maintain security, troubleshoot issues, investigate incidents, and protect the Services.

Customer Support Records

Retained while necessary to resolve the inquiry, maintain appropriate support history, or satisfy legal obligations.

Children's Personal Information

Retained only for as long as reasonably necessary for the specific authorized educational or other lawful purpose. Children's information is not kept indefinitely without a legitimate need.

Backups

Information removed from active systems may remain temporarily in protected backups until the relevant backup retention or deletion cycle is completed.

When information is no longer needed, we seek to delete, de-identify, or otherwise dispose of it securely.

Where information must be retained for legal reasons, we seek to limit its use to the permitted purpose.

18 Data Security

We take reasonable measures designed to protect the confidentiality, integrity, and availability of personal information.

These measures may include:

• Secure transmission of information.
• Access controls and authentication protections.
• Restrictions on internal access to personal information.
• Monitoring for suspicious account activity.
• Appropriate safeguards for data storage.
• Security practices for service providers.
• Measures to detect and respond to security incidents.

We seek to grant access only where reasonably necessary for legitimate operational responsibilities.

No website, network, or electronic storage system can guarantee absolute security.

Users should help protect their accounts by maintaining secure login credentials and avoiding unauthorized sharing of account access.

If you believe your account has been compromised, contact [email protected].

19 Your Privacy Rights and Choices

Depending on your location and the laws applicable to your information, you may have rights concerning your personal data.

These rights may include:

Right of Access

You may request confirmation of whether we process your personal information and obtain access to information covered by applicable law.

Right to Correction

You may request correction of inaccurate personal information.

Right to Deletion

You may request deletion of qualifying personal information, subject to applicable legal exceptions and retention obligations.

Right to Data Portability

Where legally applicable, you may request certain personal information in a commonly used electronic format.

Right to Restrict Processing

You may request restrictions on certain processing activities in circumstances provided by law.

Right to Object

You may object to processing that relies on certain legal grounds, including applicable direct marketing activities.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent.

Right to Marketing Choices

You may opt out of promotional communications through available controls or by contacting us.

Rights Concerning Certain Automated Decisions

Where applicable law provides protections concerning automated decisions with legal or similarly significant effects, you may exercise those rights.

The availability and scope of each right depend on the law applicable to the relevant processing activity.

20 How to Submit a Privacy Request

You may submit a privacy request by contacting [email protected].

You can use the subject line "Privacy Request – SayLingo.ai".

Please provide the email address associated with your account and a clear description of your request.

You do not need to provide unnecessary personal details.

We may request reasonable information to verify your identity or authority when needed to protect your account and the information of others.

Verification information will be used for the relevant verification purpose.

We will respond within the time required by applicable law.

For requests governed by the GDPR, responses are generally provided without undue delay and within one month, subject to permitted extensions or exceptions.

We do not discriminate against users for exercising applicable statutory privacy rights.

21 Privacy Rights in the European Union and United Kingdom

Where the EU GDPR, UK GDPR, or related laws apply, individuals may have additional rights relating to the processing of their personal data.

These can include the rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

21.1 Lawful Processing

We process personal data under an appropriate legal basis for the relevant purpose, as described in Section 6.

21.2 International Transfers

Where personal data is transferred internationally and specific legal safeguards are required, applicable transfer protections are addressed in accordance with Section 16.

21.3 Automated Processing

Users may have rights relating to certain decisions based solely on automated processing that produce legal or similarly significant effects.

AI-generated language learning scores and practice feedback are intended for educational guidance rather than official determinations of a person's legal status.

21.4 Privacy Requests

You may contact [email protected] to exercise applicable privacy rights.

Where required by law, individuals also retain the right to lodge a complaint with the competent data protection supervisory authority.

We welcome direct contact so that we can review and address privacy concerns promptly.

22 Privacy Rights for United States Residents

Certain U.S. state privacy laws, including the California Consumer Privacy Act as amended, may provide additional rights to eligible residents.

Depending on the law and whether it applies to the relevant processing, these rights may include:

• Knowing what categories of personal information are collected.
• Accessing specified personal information.
• Requesting correction or deletion.
• Obtaining information about certain disclosures.
• Opting out of the sale or sharing of personal information.
• Opting out of certain targeted advertising or profiling activities.
• Limiting certain uses of sensitive personal information.
• Exercising privacy rights without prohibited discrimination.

22.1 Categories of Personal Information

The categories we may process are described in Section 3 and include account identifiers, transaction information, online activity, learning content, audio inputs, educational records, and other information provided through the Services.

Some information may qualify as sensitive personal information under certain state laws.

22.2 Business Purposes and Disclosures

Our processing purposes are described in Section 5.

The relevant categories of service providers and other recipients are described in Section 15.

22.3 Sale and Sharing

We do not sell private learner conversations, voice recordings, or student educational records.

We do not authorize such information to be used for unrelated targeted advertising.

To the extent that any website identifiers or advertising-related disclosures constitute a sale, sharing, or targeted advertising under an applicable state law, we will honor applicable opt-out requirements, including legally recognized browser preference signals where required.

Eligible users may submit a relevant privacy request through [email protected] or applicable privacy controls made available through the Services.

22.4 Sensitive Personal Information

We use sensitive personal information only for applicable disclosed purposes supported by a lawful basis.

Where a state law provides a right to limit certain uses or disclosures, eligible residents may exercise that right.

22.5 Authorized Requests

Where legally permitted, an authorized agent may submit a privacy request on behalf of an eligible individual.

We may require reasonable proof of authorization or identity as permitted by law.

22.6 Non-Discrimination

We do not unlawfully discriminate against individuals for exercising applicable privacy rights.

23 Privacy Rights in Other Regions

23.1 Brazil

Where Brazil's Lei Geral de Proteção de Dados Pessoais (LGPD) applies, individuals may have rights relating to access, confirmation of processing, correction, anonymization, blocking, deletion, portability, and information about relevant disclosures.

Applicable consent-related rights and international transfer protections will be respected.

Requests can be submitted through [email protected].

23.2 Canada

Where Canadian privacy laws, including PIPEDA or applicable provincial legislation, govern the processing, users may have rights concerning access, correction, consent, transparency, and privacy inquiries.

Users may contact us for information concerning relevant personal information practices or to submit a request.

23.3 Australia

Where Australian privacy legislation applies, users may have rights relating to access and correction, along with protections concerning collection, use, disclosure, security, and overseas handling of personal information.

Privacy concerns may be submitted through [email protected]. We will assess and respond to those concerns according to applicable requirements.

23.4 Other Jurisdictions

Users in other countries or regions may have additional rights under applicable local privacy or data protection laws.

We will respect mandatory rights to the extent they apply to the relevant Services and processing activities.

24 Automated Learning Analysis and Profiling

SayLingo uses AI technologies to evaluate language learning activities and provide educational feedback.

This may involve automated analysis of:

• Submitted language responses.
• Grammar and vocabulary use.
• Pronunciation-related information.
• Conversation performance.
• Learning activity and progress.
• CEFR-aligned language proficiency indicators.

The purpose of this processing is to support learning, provide feedback, and help users understand their educational progress.

AI-generated results may contain errors or limitations.

They should not be treated as infallible assessments of a learner's ability.

SayLingo does not intend ordinary AI learning feedback to constitute a decision that, by itself, produces legal or similarly significant effects on an individual.

Where an organization separately uses educational information to make decisions about its learners, its own responsibilities may apply.

If applicable law provides rights concerning significant automated decisions, those rights remain available.

25 Managing and Deleting Your Information

Depending on the features available for your account, you may manage certain personal information directly through SayLingo.

This may include updating your profile, reviewing learning history, deleting individual messages, clearing conversation history, or requesting account deletion.

You may also contact [email protected] to request assistance.

When an account is deleted, related personal information will be handled according to this Policy and applicable retention requirements.

Certain records may remain where reasonably necessary to satisfy legal obligations, investigate payment disputes, maintain security, or establish or defend legal claims.

Deletion of learning history and cancellation of a subscription are separate matters.

If you wish to stop future recurring charges, you should cancel the relevant subscription through its available controls or contact us for assistance.

Our Refund Policy explains the applicable refund request procedures.

26 Data Security Incidents

Despite reasonable safeguards, security incidents can occur.

If we identify an incident involving personal information, we will investigate and take appropriate steps to contain the issue, reduce potential harm, and restore affected systems where necessary.

We will provide notices to affected individuals or relevant authorities where required by applicable law.

The timing and content of such notices will be determined according to the legal requirements and circumstances of the incident.

For concerns about your account or information security, contact [email protected].

27 Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, data processing practices, security measures, or legal requirements.

The latest version will be made available on this page.

The "Last Updated" date indicates when the published Policy was most recently revised.

Where applicable law requires advance notice, a new legal basis, or additional consent for a material change in processing, we will take the legally required steps.

Changes do not retroactively eliminate privacy rights that individuals have already acquired under applicable law.

28 Contact Information

SayLingo.ai is operated by Cloudvale LLC, a limited liability company registered in Wyoming, United States.

Company: Cloudvale LLC

Website: https://www.saylingo.ai

Privacy Contact and Customer Support: [email protected]

Privacy Policy: https://www.saylingo.ai/privacy-policy

Terms of Service: https://www.saylingo.ai/terms-of-service

Refund Policy: https://www.saylingo.ai/refund-policy

For privacy questions, data access requests, correction or deletion requests, concerns about AI processing, children's privacy matters, or other personal information inquiries, please contact [email protected].

We are committed to responsible data processing and to providing a transparent, secure, and dependable AI-powered language learning experience.

© 2026 SayLingo.ai. All rights reserved.