This Privacy Policy describes how Dr.Language (“Dr.Language,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our website at drlanguage.io and the related products and services we provide (collectively, the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.
1. Information We Collect
a) Information you provide directly
- Account information: email address, password (stored as a one-way hash), display name, native language, and target learning language.
- Learning content: words you save, flashcards you create, examples, translations, level (A2–C2), and topics of interest you select.
- Conversations: messages you send to our AI conversation partner are stored so we can show your chat history and improve responses.
- Communications: messages you send via our contact form or by email.
b) Information collected automatically
- Device & usage data: IP address (truncated where feasible), browser type, operating system, pages viewed, referring URLs, buttons clicked, timestamps, approximate location derived from IP.
- Cookies & similar technologies: see our Cookie Policy for details.
c) Information from third parties
If you sign in with a third-party identity provider (e.g., Google), we receive the basic profile information you authorize that provider to share with us (typically name and email address).
We do not knowingly collect Social Security numbers, government ID numbers, payment card numbers (we do not currently process payments ourselves), precise geolocation, or biometric data.
2. How We Use Information
- To create and operate your account and authenticate sessions.
- To deliver core features: translation, flashcards, AI conversation, progress tracking, and personalized recommendations.
- To send transactional messages (e.g., password reset, important account notices) and, with your consent, product updates.
- To monitor performance, prevent abuse, debug errors, and ensure security.
- To comply with applicable laws and respond to lawful requests.
- To improve the Service, including analytics and aggregated reporting.
3. AI & Automated Processing
Dr.Language uses large language models (LLMs) to generate translations, examples, and conversational responses. When you use these features:
- The text you type is sent to our AI providers in order to produce a response and is stored in your account so we can show your history.
- AI-generated content may be inaccurate, incomplete, or outdated. Do not rely on it for medical, legal, financial, or other professional advice.
- We do not use your conversations to train third-party foundation models. Our AI providers process inputs solely to return a response under their enterprise terms.
4. How We Share Information
We do not sell your personal information for money. We share information only as described below:
- Service providers (sub-processors): hosting and infrastructure (Abacus.AI, Amazon Web Services), AI inference providers (e.g., OpenAI, Google), email delivery, and analytics, each acting on our behalf under contractual confidentiality obligations.
- Authentication providers: if you sign in with Google, your authentication request is processed by Google.
- Legal & safety: to comply with law, enforce our Terms, investigate fraud, or protect rights, property, and safety.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
- With your consent or at your direction.
Some sharing for analytics and advertising cookies may be considered a “sale” or “sharing” under California law. See “Your Rights” below to opt out.
5. Cookies & Tracking
We use strictly necessary cookies to keep you signed in and remember preferences. With your consent, we may use analytics cookies to understand how the Service is used. You can manage your choices via the cookie banner or your browser settings. See our Cookie Policy for the full list.
We currently do not honor Do Not Track (DNT) browser signals because there is no industry standard. We honor the Global Privacy Control (GPC) signal as an opt-out of the “sale” or “sharing” of personal information for California residents.
6. Data Retention
- Account data: kept while your account is active.
- Flashcards and chat history: kept until you delete them or close your account.
- Operational logs: typically retained for up to 90 days for security and debugging.
- When you delete your account, we permanently delete or anonymize personal information within 30 days, except where retention is required by law (e.g., tax records) or necessary to resolve disputes.
7. Security
We protect your data in transit with TLS encryption and at rest using industry-standard mechanisms. Passwords are hashed with bcrypt. We restrict production access on a need-to-know basis. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will promptly delete it. Parents or guardians may contact us at [email protected].
9. Your Privacy Rights (U.S.)
Depending on your state of residence, you may have the following rights:
- Right to know / access: what personal information we have collected about you, the categories of sources, the purposes of processing, and the categories of recipients.
- Right to delete: request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to correct: request correction of inaccurate personal information.
- Right to portability: receive a copy of your personal information in a portable, machine-readable format.
- Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
- Right to limit use of sensitive personal information (we do not currently use sensitive personal information for purposes beyond providing the Service).
- Right to non-discrimination for exercising your rights.
These rights apply to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with similar laws as they take effect.
How to exercise your rights. Email [email protected] from the address on your account, or contact us via the contact page. We will verify your request by matching information you provide against our records and respond within the timeframe required by applicable law (typically 45 days).
Authorized agents. You may designate an authorized agent to submit a request on your behalf. We will require written proof of authorization and may verify your identity directly.
Appeals. If we deny your request, you may appeal by replying to our decision email within 60 days. Virginia, Colorado, and Connecticut residents may also contact their state Attorney General if they are unsatisfied with the outcome.
10. “Shine the Light” (California)
California residents may request, once per calendar year, information about personal information shared with third parties for those parties’ direct marketing purposes. Email [email protected] with the subject line “Shine the Light Request.”
11. International Users
Dr.Language is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your country.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page indicates when it was last revised. If we make material changes, we will provide additional notice (e.g., by email or in-product).
13. Contact Us
Questions about this Policy or your data?
- Privacy inquiries: [email protected]
- General contact: [email protected]
- Or use our contact page.