Privacy Policy

Last updated: August 10, 2026

Overview

Naturalingo is a language-learning and social app: you practise with an AI tutor, message other learners, and build flashcards from what you learn. It is operated by We Sell Things LLC, a Wyoming limited liability company with its registered office at 30 N Gould St Ste R, Sheridan, WY 82801, United States, which is responsible for the personal data described here. This Privacy Policy explains what we collect, why, who we share it with, and the choices you have. We collect only what the service needs — no advertising trackers, and we never sell or rent your personal data.

Information We Collect

Account data: email address, password (stored as a salted hash, never in plaintext), display name, full name, avatar seed, bio, and your native and target languages.

Authentication identifiers: when you sign in with Google or Apple we receive a verified user identifier and an email address from them. We never receive your password for those accounts.

Content you create: direct messages, posts and comments, flashcards and decks, custom AI character definitions, voice recordings you make for pronunciation and transcription, and feedback you send us.

Learning and usage data: lesson and review history, fluency scores, XP, streaks, quota counters, and the record of which Terms of Service version you accepted and when.

Subscription data: your tier and entitlement status from the App Store or Google Play. Payment card details are handled entirely by Apple and Google — we never see or store them.

Device and notification data: a Firebase Cloud Messaging token so we can deliver push notifications you have enabled, plus app version and platform for diagnostics.

Diagnostic and analytics data: crash reports and performance traces (release builds only, with personal identifiers stripped) and product analytics events describing which screens and features are used.

How We Use Your Information

To provide the service: creating and securing your account, generating AI replies, corrections, translations and flashcards, delivering messages, and tracking learning progress.

To send notifications you have enabled, such as message alerts, friend requests and review reminders. Security and account emails — verification, password reset, deletion confirmation — are always sent.

To keep the service safe: screening content, investigating abuse reports, enforcing quotas, and rate-limiting brute-force attempts.

To bill and support subscriptions, and to detect abuse of referral rewards.

To improve the product through aggregated, non-identifying usage analytics.

Why We Are Allowed to Process It

We process your data to provide the service you asked for, to keep it secure and free of abuse, to meet our legal obligations, and — for product analytics — because we have a legitimate interest in understanding how the app is used. Where the law where you live requires us to identify a legal ground for processing, these are the grounds we rely on.

The AI processing described below is necessary to deliver the service rather than an optional extra, so it is covered by your acceptance of the Terms of Service and is not a separate consent you can withdraw while continuing to use the app. If you do not want it, delete your account.

Who We Share It With

We share data only with vendors that process it on our behalf, under contract, for the purposes above:

• AI providers — OpenAI, Google (Gemini), Groq and Cerebras — AI chat, correction, translation, transcription, speech synthesis and content moderation. We ask them not to use this content to train their models.

• Firebase (Google) — push notification delivery.

• Google and Apple — identity verification, only if you sign in with them; and subscription billing if you purchase.

• Cloudflare — image storage and content delivery.

• Sentry — crash and error diagnostics in release builds, with personal identifiers stripped.

• Mixpanel — product analytics describing feature usage.

• RevenueCat and Superwall — subscription entitlement management and paywall delivery.

• Resend — transactional email (verification, password reset, deletion confirmations).

We do not sell or rent your personal information, and we do not share it with advertisers.

AI Processing

Most of the app runs on third-party AI providers. AI chat and custom characters, grammar correction, translation and vocabulary hints, text-to-speech, voice transcription, flashcard generation, answer checking, fluency scoring and automated moderation all forward the text or voice you provide to a provider (currently OpenAI, Google, Groq or Cerebras) for real-time processing.

This includes the direct messages you exchange with other users. Their text may be sent to a provider to produce corrections, translations, vocabulary hints, the translated preview inside a push notification, and prohibited-content screening. Posts and comments are screened the same way before publication.

We do not send your name, email address, account identifier, device identifier or location with these requests, and we ask providers not to train on the content. Your content is also subject to those providers' own usage policies, and we cannot audit their internal practices.

Messages Are Not End-to-End Encrypted

Traffic between your device and our servers is protected in transit by TLS, but messages are stored on our servers in readable form. Our systems process them automatically, and authorised personnel can access them where necessary to operate the service, investigate an abuse report, provide support, or comply with a valid legal request.

Please do not send passwords, payment or bank details, government identity numbers, health information, or other sensitive personal data through the app.

Retention and Deletion

You can delete your account at any time from Settings → Account → Delete Account. It is deactivated immediately and permanently removed after a 30-day grace period; signing in within those 30 days cancels the deletion.

Permanent deletion removes your profile, messages, flashcards, friend connections, avatar and device tokens. Backups are purged on a rolling 30-day schedule, and provider-side logs expire on their own retention schedules.

Anonymised, aggregated analytics that can no longer identify you may be retained for trend analysis. We also keep the record of your Terms acceptance for as long as needed to evidence the agreement.

Your Rights

You can view and edit your profile in Settings → Account → Edit Profile, change your password (email accounts) under Account → Change Password, opt out of product analytics on this screen, and delete your account as described above.

If you live in California or another U.S. state with a comprehensive privacy law — including Colorado, Connecticut, Texas, and Virginia — you have the right to know what personal data we hold about you, to receive a copy, to correct or delete it, and not to be treated differently for exercising those rights. We do not sell your personal data and we do not share it for cross-context behavioural advertising, so there is no opt-out to exercise. If you live outside the United States, your local law may give you similar or broader rights — and in any case, write to us and we will honour a request to access, correct, delete, or export your data wherever you live.

If you believe we have handled your data improperly, you may complain to your state attorney general or, outside the United States, to your local data protection authority.

Children

Naturalingo is not directed to children under 13, or under the age of digital consent in your country if that is higher. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

International Transfers

We are based in the United States, and our servers and our providers operate there and in other countries. If you use Naturalingo from outside the United States, your personal data is transferred to and processed in the United States, where privacy laws differ from — and may give you less protection than — the laws where you live. This transfer is necessary to provide the service, and using the app means you understand that it happens.

Security

We use TLS in transit, hashed passwords, short-lived access tokens with refresh-token rotation, certificate pinning on mobile, and screenshot protection on sensitive screens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Disclaimers, Liability, and Disputes

Naturalingo is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. We apply the safeguards described above, but no method of transmission or storage is completely secure and we do not warrant that your data will never be lost, altered, or accessed without authorisation.

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, lost opportunity, business interruption, or reputational harm arising from this policy or from the handling of your data, and our total aggregate liability is capped as set out in the Limitation of Liability section of the Terms of Service. Nothing here excludes liability that cannot lawfully be excluded, including under applicable data protection law.

You agree to indemnify and hold harmless We Sell Things LLC, its members, officers, and personnel against any claim, loss, liability, or expense — including reasonable legal fees — arising from data you submit through the app in breach of these documents, including sensitive personal data we ask you not to send and other people's personal data that you had no right to share. This does not apply where the claim results from our own breach or negligence, or where consumer law does not permit it.

You can delete your account at any time as described above, and we may suspend or terminate an account under the Termination section of the Terms of Service; in either case your data is then handled as described under Retention and Deletion.

This policy is governed by the laws of the State of Wyoming, United States, and any dispute about it is resolved under the Governing Law, Arbitration, and Class Action Waiver section of the Terms of Service — which requires individual binding arbitration and waives class actions, subject to the exceptions stated there. This does not affect your rights under mandatory consumer or data protection law, or your right to complain to your local data protection authority.

Changes to This Policy

We may update this policy. Material changes will be announced in the app or by email before they take effect, and the "last updated" date above will change.

Contact

We Sell Things LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Questions about this policy, or to exercise any of the rights above: support@ardaventures.me