This Privacy Policy describes how Wlingua, S.L.U. (hereinafter Wlingua) processes the personal data of the users of its applications and websites (hereinafter the Portal), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

Data controller

Wlingua, S.L.U., Arbidea 7, 48004 Bilbao (Spain), CIF B95698379. Contact for data protection matters: [email protected].

Data we process

Account data: username, email address, password (stored in encrypted form), country and interface language and, if the User provides it, the name that will appear on the diploma.

Study data: courses, progress, results of activities and reviews, study settings, streaks, goals and reminders. This data is stored on Wlingua's servers, located in the European Union, so that progress can be synchronized between devices.

Subscription data: Premium status, plan and dates, and the identifiers of the purchases made through the App Store, Google Play or Stripe. Wlingua does not store card numbers; payments are processed by those platforms.

Communications: messages sent through the contact form, error reports and communication preferences.

Technical and usage data: device type and operating system, app version, language, anonymous identifiers, usage events and performance data, collected through Google Firebase (Analytics, Performance Monitoring, Cloud Messaging and Remote Config). Pronunciation exercises use the speech recognition service of the device (Apple or Google); Wlingua does not store the recordings, only the result of the exercise.

Purposes and legal bases

Providing the Services, managing the account, saving and synchronizing progress and managing Premium subscriptions: performance of the contract. Sending service emails (account verification, password recovery, progress reports and study reminders): performance of the contract, according to the User's settings. Sending newsletters, product updates and promotions: the User's consent, which can be withdrawn at any time from “Communication preferences” in the profile. Answering requests and error reports: performance of the contract and legitimate interest. Analyzing the use and performance of the application in order to maintain, secure and improve it: legitimate interest of Wlingua. Complying with legal, tax and accounting obligations: legal obligation.

Retention

Personal data are kept for as long as the account remains active. The User can delete their account at any time from the profile; the account and study data are then erased, and only the data that must be kept under the applicable legislation (for example, invoicing data) are retained, blocked, for the legally required periods. Aggregated or anonymous usage data do not identify the User and may be kept.

Recipients and international transfers

Wlingua does not sell personal data. Data are accessed only by service providers that act as processors under a contract: server hosting (in the European Union), email delivery, analytics and performance measurement (Google Firebase), push notifications and payment processing (Stripe); by Apple and Google in relation to purchases made in their stores; and by the competent authorities when required by law. Some providers are located outside the European Economic Area (in particular, in the United States); those transfers rely on the guarantees provided for in the GDPR, such as adequacy decisions and standard contractual clauses.

Cookies

The web version of the Portal uses cookies and similar technologies: those necessary for its operation (for example, to keep the session open and remember preferences) and the Google Firebase analytics and performance cookies described in this policy. The User can configure their browser to block or delete cookies; in that case, some functions of the Portal may not be available. The iOS and Android applications do not use cookies.

Your rights

The User may exercise, at any time and free of charge, the rights of access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent without affecting the lawfulness of the processing carried out before, by writing to [email protected].

Security

Wlingua applies appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access or disclosure, including encrypted connections and encrypted password storage.

Minors

The Services are not directed at children under 14 years of age (or the minimum age established by the legislation of the User's country). Minors must have the authorization of their parents or legal representatives to use the Services. If Wlingua becomes aware that data of a minor have been collected without such authorization, it will delete them.

Accuracy of data and responsible conduct

All of the information provided to Wlingua must be accurate. The User guarantees the authenticity of the data provided in the registration and in any other form, and is solely responsible for any false or inaccurate statements and for the damage they may cause to Wlingua or to third parties.

The User undertakes to act responsibly and respectfully towards the other Users of the Portal.

Changes to this policy

Wlingua may update this Privacy Policy to adapt it to legislative or technical changes. Significant changes will be announced in the application. Last updated: August 2026.