LottaLangPrivacy policy
Last updated: 11 October 2026
LottaLang is a Mandarin learning app (Android) and this website. This policy explains what information we collect, why, how long we keep it and the choices you have. In short: we collect what the app needs to work and nothing else, we never sell your data and there are no ads.
Who we are
LottaLang is operated by [legal name of the operator], [postal address] ("we", "us"). Contact: support@lottalang.com.
What we collect
| Data | Why |
|---|---|
| Account: your email address and password. The password is stored only as a salted hash; we cannot read it. | To create your account, sign you in and keep your learning in sync. |
| Sign-in sessions: a session token (stored only as a hash), when it was created and last used. | To keep you signed in and to let you sign out. |
| What you add: texts you paste, subtitle files you import (their text, title and file name) and folders. | To analyse the text and build your vocabulary, sentences and exercises. |
| Learning data: the words you mark as known or learning, your flashcards and review history, answers to practice exercises, quizzes and the level check, and your study settings (cards per day, time zone). | To schedule reviews, estimate your level and show your progress. |
| Activity: study events such as "reviewed a card" or "imported a text", with a time and, for study sessions, a duration. | To show your streak and statistics, and, in aggregate, to understand how the app is used and improve it. |
| Text sent to the neural voice: when you play a sentence with the neural voice, its text is sent to our server to generate audio. | To read the sentence aloud. The audio is cached by its text so the same sentence plays faster next time; the cache is not linked to your account. |
| Messages to support: what you write to us and your email address. | To answer you. |
The app keeps some settings on your device only (display, voice and review preferences, and the sign-in token). When the app uses your device's own voice, the text is processed by your device's text-to-speech engine, not by us.
What we do not collect
- No advertising, no advertising identifiers and no third-party analytics or tracking in the app.
- No location, contacts, photos, camera or microphone access.
- We do not keep access logs. Your IP address is used briefly, in memory, to limit repeated sign-in attempts. When a request fails, our web server's error log can record the IP address it came from; that log is kept for 14 days for troubleshooting and security.
This website
This website uses Umami, hosted on our own server, to count visits. It does not use cookies, does not identify you and does not follow you to other sites. It records the page, the referring site, the browser, the device type and an approximate country derived from your IP address, which is not stored.
Who we share it with
We do not sell or rent your data, and we do not share it for advertising. We use a small number of service providers who process data only on our behalf:
- Server hosting: [hosting provider, country], where the app's server, database and backups run.
- Email: [email provider], for messages to support.
We may disclose data if the law requires it, or to protect the rights and safety of our users.
Features that are not available yet
Some features shown in the app as "coming soon" (AI explanations, the community library, the adaptive curriculum) are switched off. If we turn on a feature that processes your data in a new way, for example by sending a sentence to an AI provider, we will update this policy first and the app will tell you what is sent before you use it.
How long we keep it
- Your account and everything in it are kept until you delete your account.
- When you delete your account, it and all of its data are deleted from our database immediately. Database backups are kept for up to 14 days, after which deleted data is gone from them too.
- Support emails are kept as long as needed to help you, then deleted.
Your choices and rights
- Delete your account in the app (Settings → Delete account) or on the account deletion page.
- Get a copy of your data, or ask us to correct it, by writing to support@lottalang.com from your account's email address.
- If you are in the European Economic Area, the United Kingdom or a similar jurisdiction, you also have the right to object to or restrict some processing and to complain to your data protection authority. We process your data to provide the service you asked for (contract) and, for security and aggregate usage statistics, on the basis of our legitimate interests.
Security
All traffic between the app, this website and our server is encrypted (HTTPS). Passwords and session tokens are stored only as hashes, and access to the server is restricted.
Children
LottaLang is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.
Where your data is stored
Our server is located in [country]. If you use LottaLang from another country, your data is transferred there.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app before they take effect.
Contact
Questions about privacy: support@lottalang.com.