Privacy policy

Last updated 12 September 2026

This policy explains what information LingoXP collects, why we collect it, where it is held, how long we keep it, and the rights you have over it. It applies to lingoxp.com, our iOS and Android apps, and any lesson booked through them.

1. Who we are

LingoXP is operated by LingoXP LLC, a limited liability company formed in the State of Wyoming, United States, with a registered office at 30 N Gould St, Ste N, Sheridan, WY 82801, USA. LingoXP LLC is the controller of the personal data described in this policy.

For any question about this policy, or to exercise a right described in it, email privacy@lingoxp.com.

2. Information we collect

Account information. Your name, display name, email address, the language you want to learn, and your locale. If you sign in with Google or Apple, we receive basic profile details from that provider instead of a password.

Tutor information. Tutors additionally provide a headline, biography, nationality, timezone, years of experience, languages taught, specialties, any certifications, a professional photo, an introduction video, hourly and per-lesson rates, and weekly availability. Tutors also provide the bank details needed to receive payouts.

Lesson and booking information. Lessons booked, attended, cancelled, or rescheduled, the tutor and student involved, times, and the resulting credit and payment records.

Messages. Messages exchanged between students and tutors on the platform, and posts in community features where you choose to use them.

Learning activity. Progress, streaks, experience points, and quiz responses where you use our learning features.

Technical information. IP address, browser and device characteristics, and pages visited. Some of this is collected automatically to keep the service running and secure, and some only where you have allowed analytics cookies.

Support correspondence. Emails and reports you send us, and our replies.

We do not ask for and do not want special category data: health, religion, ethnicity, political views, biometrics, or sexual orientation. Please do not include such information in your profile or messages.

3. How we use your information

We use your information to create and run your account, match students with tutors, take bookings and process payments, pay tutors, send lesson reminders and service notices, provide support, investigate disputes between students and tutors, detect and prevent fraud and abuse, meet our tax and accounting obligations, and understand which parts of the platform people find useful so we can improve them.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

4. Legal bases for processing

Where the UK GDPR or the EU GDPR applies to you, we rely on the following legal bases.

Performance of a contract. Creating your account, taking bookings, processing payments, paying tutors, and providing support. Without this information we cannot provide the service.

Legal obligation. Keeping transaction and tax records, and responding to lawful requests from authorities.

Legitimate interests. Keeping the platform secure, preventing fraud and abuse, resolving disputes, and improving the service. We balance these against your rights and interests, and you may object as described in section 15.

Consent. Analytics and advertising cookies, and any marketing email you opt into. You may withdraw consent at any time without affecting processing carried out before you withdrew it.

5. Payments

Card payments are processed by Stripe. LingoXP does not see or store full card details on its own servers. Tutor payouts are sent through Wise, which receives the tutor's name and bank details in order to make the transfer. Both act as independent controllers for their own compliance purposes and process your data under their own privacy policies.

6. Cookies and similar technologies

Strictly necessary. Cookies and local storage that keep you signed in, remember your cookie choice, and protect our forms from abuse. These are always active because the service cannot work without them, and they do not require consent.

Analytics. Google Analytics, used to understand which pages and features people use. Set only where you allow them.

Marketing. Used to measure the effectiveness of our advertising. Set only where you allow them, and off by default.

Where prior consent is legally required, we ask before any analytics or marketing cookie is set, and Google Consent Mode keeps those categories denied until you choose. You can change your choice at any time using the "Manage cookies" link in the footer of every page. We ask again after twelve months.

7. Analytics

We use Google Analytics to measure usage in aggregate. Where you have not allowed analytics cookies, Google Analytics runs in a cookieless mode that does not identify you. We do not use analytics data to make decisions about individuals.

8. CAPTCHA and bot protection

LingoXP uses Cloudflare Turnstile to protect our sign-up and login forms from automated abuse. Turnstile runs invisibly and does not display a visual challenge. Cloudflare may collect technical information such as browser characteristics and interaction patterns to determine whether you are a human. This is processed under Cloudflare's privacy policy, at cloudflare.com/turnstile-privacy-policy.

9. Service providers

We use the following providers, each processing personal data only on our instructions and under a written agreement, except where noted as an independent controller.

Supabase. Database, authentication, and file storage.

Cloudflare. Hosting, DNS, security, and bot protection.

Stripe. Card payment processing. Independent controller for its own fraud and compliance purposes.

Wise. Tutor payouts. Independent controller for its own regulatory purposes.

Cloudinary. Storage and delivery of profile photos and introduction videos.

Resend. Delivery of transactional email such as lesson reminders and password resets.

Google Analytics. Usage analytics, where you have allowed analytics cookies.

We may also disclose personal data where we are required to by law, to establish or defend legal claims, or to a buyer or successor if LingoXP is sold or reorganised, in which case this policy continues to apply until you are told otherwise.

10. Where your data is stored

Our primary database is hosted by Supabase in the Tokyo region of Japan (ap-northeast-1). Our website and content delivery run on Cloudflare's global network, which means static content may be served from a location near you. Our other providers process data in the United States and the European Union.

International transfers.If you are in the European Economic Area or the United Kingdom, your data is transferred outside your country. Japan is covered by a European Commission adequacy decision and by UK adequacy regulations, so transfers there do not require additional safeguards. For transfers to the United States and elsewhere, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where the UK GDPR applies. You may request a copy of the relevant safeguards by emailing us.

11. How long we keep your data

Account and profile. Kept while your account is open. When you delete your account it is deactivated immediately and your personal details are erased or irreversibly anonymised within 30 days.

Messages. Erased or anonymised with your account, within the same 30 days.

Booking, payment, and payout records. Retained for 7 years after the transaction, because tax and accounting law requires it. After your account is deleted these records are held in anonymised form, no longer linked to your name or contact details.

Tutor bank details. Kept while you are an active tutor and erased within 30 days of your account closing, subject to the transaction record above.

Tutor agreement acceptance records. Kept for the duration of the tutoring relationship and for 7 years afterwards, because they evidence a contract.

Support correspondence. Kept for 24 months.

Cookie consent records. Kept for 12 months, then we ask again.

Analytics. Retained by Google Analytics for 14 months.

Where a dispute, investigation, or legal claim is open, we keep the data relevant to it until the matter is resolved, even if a period above has passed.

12. Security

Access to the database is restricted by row level security, so an account can reach only its own records. Traffic is encrypted in transit, passwords are hashed by our authentication provider and never visible to us, card details never reach our servers, and administrative access is limited to those who need it. We review these controls periodically.

No system is perfectly secure. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant regulator within the timeframes the law requires.

13. Age requirement

LingoXP is for adults. You must be 18 or older to create an account, whether as a student or a tutor, and we do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18 we will close it and delete the associated data. If you believe a minor has created an account, email privacy@lingoxp.com and we will act promptly.

14. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Tutor applications are reviewed by a person, and account suspensions are decided by a person.

15. Your rights

Subject to the law that applies to you, you have the right to access the personal data we hold about you, to correct it if it is wrong, to have it deleted, to receive a copy in a portable format, to ask us to restrict how we use it, to object to processing we carry out on the basis of legitimate interests, and to withdraw consent you have previously given.

We will not treat you differently, deny you service, or charge you a different price for exercising any of these rights.

16. How to exercise your rights

You can view and correct most of your information, and delete your account, from your account settings. For anything else, email privacy@lingoxp.com from the address on your account. We may ask for further detail to confirm it is you, and we will not use that detail for anything else.

We respond within 30 days. Where a request is complex we may extend that once, and we will tell you why before the first 30 days are up. An authorised agent may make a request on your behalf with written permission we can verify. If we decline a request, we will explain why and you may ask us to reconsider by replying to our response.

17. Notice for United States residents

The categories of personal information described in section 2 are collected from you directly, from your device when you use the service, and from Google or Apple if you sign in through them. The purposes are set out in section 3, the categories of third parties we disclose to are listed in section 9, and retention is set out in section 11.

In the twelve months before the date of this policy we have not sold personal information, and we have not shared it for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes beyond those permitted without a right to limit.

Depending on your state, you may have the right to know what we collect and why, to obtain a copy, to correct inaccuracies, to delete, to opt out of sale, sharing, or targeted advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Use the contact route in section 16. Several states also give you a right to appeal a refused request, which you can do by replying to our response.

18. Global Privacy Control

We recognise the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as an opt-out of analytics and marketing cookies for that browser, and you do not need to do anything else.

19. Tutors and payout data

If you teach on LingoXP we hold the bank details you provide, and we pass your name and those details to Wise so that payouts can be made. We hold a record of your acceptance of the Tutor Policy, including the version, the date and time, and the IP address it was accepted from, because it evidences our agreement with you and our payment partners require it. You are responsible for your own tax reporting, and we may be required to share earnings information with tax authorities where the law obliges us to.

20. Complaints

If you are unhappy with how we have handled your data, please tell us first at privacy@lingoxp.comso we can put it right. You also have the right to complain to your data protection authority. In the EEA that is the supervisory authority in the country where you live or work, in the UK it is the Information Commissioner's Office, and in the United States it is your state Attorney General or, in California, the California Privacy Protection Agency.

21. Changes to this policy

We may update this policy. The date at the top always shows when it last changed. Where a change materially affects how we use your data, we will tell you by email or through the platform before it takes effect. Continuing to use LingoXP after a change takes effect means the updated policy applies to you.

22. Contact

LingoXP LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Email privacy@lingoxp.com.