Privacy Policy

Effective Date: July 21, 2026

Welcome to PupaLingo. This Privacy Policy explains how PupaLingo ("we," "us," or "our") collects, uses, and protects information when you use the PupaLingo website and web application available at pupalingo.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Information from Your Google Account

The Service uses Google sign-in. When you sign in, we receive basic profile information from your Google account: your name, email address, and profile picture. We use this information to create and identify your account within the Service.

1.2 Information You Provide

• Profile data: a display name you may set in your profile.
• Learning data: word sets you create, words you hide, words you suggest, and your training progress.

1.3 Information Collected Automatically

• Session and security data: when you sign in, we record technical information about the session, such as IP address, browser and device type, and sign-in time. This is used to keep you signed in and to show you your active sessions.
• Usage data: we use Google Analytics to understand how visitors use the Service — pages viewed, actions taken, approximate location (derived from IP address), and device and browser type. See Section 4 below.
• Server logs: our servers automatically record standard technical logs (requests, timestamps, errors) used for operating and securing the Service.

1.4 Information We Do NOT Collect

• We do not collect payment information (the Service is free).
• We do not collect precise location data.
• We do not use advertising cookies and do not show ads.
• We do not sell personal information to third parties.

2. How We Use Your Information

Data Type	Purpose	Legal Basis
Google account data (name, email, picture)	To create and identify your account and display your profile	Performance of service
Learning data	To provide the Service's core functionality and sync your progress across devices	Performance of service
Session and security data	To keep you signed in, secure your account, and show active sessions	Performance of service / Legitimate interest
Usage data (Google Analytics)	To analyze how the Service is used and improve it	Legitimate interest / Consent where required
Server logs	To operate, debug, and secure the Service	Legitimate interest

3. Cookies and Local Storage

The Service uses strictly necessary cookies and browser storage to keep you signed in and to make the Service work, and Google Analytics cookies to collect usage statistics (see Section 4). We do not use advertising cookies. You can block or delete cookies in your browser settings; the Service remains usable, though you may need to sign in again.

4. Third-Party Services

We use the following third-party services:

• Google Sign-In: used for authentication. Google may process certain information as described in Google's Privacy Policy.
• Google Analytics: used to collect anonymous usage statistics (pages viewed, approximate location, device and browser type) that help us improve the Service. Google may process this data as described in Google's Privacy Policy. You can opt out with the Google Analytics Opt-out Browser Add-on or by blocking analytics cookies.
• Google Fonts: the Service loads fonts from Google's servers; your browser sends standard technical information (such as your IP address) to Google when fetching them.

5. Data Storage and Security

• Your data is stored on our servers located in the European Union.
• Data is transmitted using encrypted connections (TLS/SSL).
• We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

• We retain your account and learning data for as long as you use the Service.
• Sessions expire automatically; you can also terminate active sessions in your profile.
• Server logs are retained for a limited period needed for operations and security.
• Usage analytics data is retained in accordance with Google Analytics' retention settings (typically up to 14 months).
• You may request deletion of your account and data by contacting us (see Section 10).

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: request information about the data we hold about you.
• Rectification: correct your profile information directly in the Service.
• Deletion: request deletion of your account and data.
• Objection and restriction: object to or restrict certain processing.

To exercise these rights, please contact us at the email address provided below. If you are located in the European Economic Area, you also have the right to lodge a complaint with a supervisory authority.

8. Children's Privacy

The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has provided personal information through the Service, please contact us so we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date above. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us