Privacy Policy

MrPotato AB, organisation number 559523-7099, Sweden, is the data controller for LingoStep. Contact details are listed below.

When you create an account we store your email address, an optional display name, the language you speak, your target language, level, goals and any goal note you choose to provide. Your password is stored only as a salted scrypt hash; we never store the plain password.

We store lesson position, completed sentences and lessons, vocabulary and review scheduling, streak and practice counters, alphabet progress, preferences and the lessons included in your free allowance. This is used to run the service and personalise review.

You can use your first lessons without an account. We create a random learner identifier in a cookie and store your progress against it in our database. If you register, that progress is merged into your account.

We use ls_learner for the anonymous learner identifier (12 months), ls_session for your signed-in session (30 days), lingostep_pair to remember your selected language pair (12 months), ls_attribution to remember campaign details for 30 days, and ls_consent for your analytics choice (6 months). If you allow analytics, we store a random visitor identifier in local storage and record anonymous usage events such as page views, language and goal selections, lesson milestones and plan selections. We never record your custom goal text, lesson content or account details. Analytics stays off until you consent, and you can change your choice at any time. In production a service worker caches pages, static assets and audio you have already opened. We do not use advertising cookies or third-party trackers.

Accounts are handled by the application itself using scrypt password hashing and an HMAC-signed session cookie. The current implementation does not use a third-party identity provider. Keep your password confidential and contact us if you suspect unauthorised access.

Curriculum may be produced or improved with an OpenAI-compatible AI provider. Prompts contain the target language, your interface language, level, communication goal, sentence pattern and a short list of known vocabulary. Account identifiers and email addresses are not included in these prompts.

Free-text topic requests are normalised and matched against existing topics by our own code. In the current implementation they are not sent to an external AI provider.

If ElevenLabs is configured and a compatible voice is available, the sentence text and target language are sent to ElevenLabs to synthesise audio, which is cached on our server. Otherwise your browser's Web Speech API is used, in which case speech processing is handled by your browser or operating-system provider.

Stripe processes card payments and subscription billing. We receive and store Stripe customer and subscription identifiers, subscription status, price identifier and current period end. We do not receive or store full card details.

The application runs on hosting chosen by MrPotato AB. In production, account, progress and application data is stored in MongoDB; local development can use an application-managed file store. Account and progress data is kept while your account is active and deleted or anonymised when you ask us to delete it, unless we must keep it to meet a legal obligation.

We process account and progress data to perform our contract with you, session and security data on the basis of our legitimate interest in operating a secure service, payment and tax records to comply with legal obligations, and optional features only as described in this policy.

You may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY). To exercise a right, contact us using the details below.

Our payment, AI and text-to-speech providers may process data outside the EU/EEA. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, as offered by the relevant provider.

We will update this policy when our processing changes and will change the last-updated date. Privacy requests can be sent to the contact address below; if no address is configured in this deployment, the page marks the missing detail.