Privacy Policy

1. Information We Collect

We may collect:

• Account information (e.g. email, username)
• User input submitted for processing (text, images)
• Usage data (basic analytics)

We do not store uploaded images used for OCR processing. Only processed text may be temporarily stored for user access. If you choose to save an image to your Journal, it will be stored as your user content within your account.

We also collect usage statistics (number of TTS plays, translations, and word lookups per day) to enforce plan quotas and manage your subscription. This data is transmitted to our server.

When using the LingoMeow browser extension, we additionally access:

• Text you select or highlight on any webpage, for TTS playback or word lookup — this text is transmitted to our servers and relevant third-party providers listed in Section 8
• The surrounding sentence or text around a word you look up, sent together with that word to provide translation context (we do not transmit the page URL or your browsing history)
• Locally cached TTS audio files and translation results (stored on your device via chrome.storage.local only, never transmitted to our servers)
• Health reminder preferences (stored locally on your device only)
• Your authentication token, which may sync across your Chrome browser instances via chrome.storage.sync if you are signed in to Chrome

2. Legal Basis for Processing

• Contract performance: Processing necessary to provide the Service
• Legitimate interests: Improving service quality and maintaining system security
• Consent: Content you actively submit

3. AI Conversation Data

Your conversations with the AI companion are processed by third-party AI providers to generate responses. We use a multi-provider routing system that may include Microsoft Azure, Google, and OpenRouter. The specific provider used for any given request is selected automatically based on availability and performance.

We do not use your conversation content to train AI models, and we do not sell it. Conversation history is retained until you delete it, or within 30 days of account closure.

4. How We Use Information

We use data only to provide and improve the Service, enable user access to saved learning materials, and maintain system security. We also use daily feature usage counts to enforce plan quotas. We do not sell your personal data, and we do not use it for any purpose unrelated to the features described in this policy.

5. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account closure
• OCR images: deleted immediately after processing
• Conversation history: retained until you delete it, or within 30 days of account closure
• Usage logs: retained for a maximum of 12 months
• TTS audio cache (extension): stored locally on your device only; automatically limited to the 100 most recently used items
• Translation cache (extension): stored locally on your device only; automatically limited to the 500 most recently used items

6. Cookies

We use a small number of cookies that are necessary or functional for the Service to operate correctly:

• Session/authentication cookies: to maintain your login state
• Preference cookies: to remember your interface settings (e.g. sidebar state) across visits
• Security cookies: Google reCAPTCHA v3 sets a cookie (_GRECAPTCHA) on our login and registration pages to distinguish human users from bots. This is a third-party cookie operated by Google, used for security purposes only and not for advertising or tracking.

We do not use advertising, analytics, or tracking cookies. We do not use Google Analytics or any similar analytics service.

We also load fonts from Google Fonts (fonts.googleapis.com), which means your browser makes a request to Google's servers when visiting our site. Google may log your IP address as part of this request.

7. Data Storage and Security

• All data transmissions are encrypted via HTTPS
• User passwords are hashed using the bcrypt algorithm before storage
• Third-party API calls only transmit necessary content data

In the event of a data breach involving your personal data, we will notify the relevant supervisory authority (ICO) within 72 hours as required by UK GDPR.

8. Third-Party Services

We use the following third-party services to operate LingoMeow. Each provider receives only the data necessary to deliver their specific function:

These providers act as data processors and are contractually bound to process your data only as instructed. Your personal data and private journal entries are never used to train AI models.

9. International Data Transfers

To provide the Service, some of your data (e.g., AI prompts and payment processing) may be transferred to and processed in countries outside the UK or the EEA, such as the United States. We implement the highest security safeguards compliant with the UK GDPR, including relying on the UK-US Data Bridge or International Data Transfer Agreements (IDTA/SCCs), ensuring your personal data receives a level of protection equivalent to that within the UK.

10. Your Rights Under UK GDPR

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing
• Right to data portability
• Right to object
• Right to lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, contact us at: 📧 customerservice@lingomeow.com

11. Children and Age Requirement

The Service is intended for users aged 18 and above.

12. Changes to This Policy

We may update this policy from time to time. For significant changes, we will notify you in advance.

13. Contact

Last Updated: June 23, 2026 · Effective Date: April 24, 2026