Privacy Policy

1. Who we are

Levelang is a translation service operated by Alex Beverage. If you have questions about this policy or your data, contact us at privacy@levelang.app.

2. What data we collect

We collect only what is necessary to operate the service:

• Account information — your email address, display name, password, and any preferences you configure (such as preferred languages and translation settings) when you create an account.
• Sign-in with Google — if you choose to sign in with Google, we receive your name, email address, and profile photo from Google.
• Device information — when you use the mobile app, we collect a device identifier, platform (iOS or Android), and app version to authenticate your device and enforce usage limits. Device identifiers are platform-assigned UUIDs, not hardware serial numbers or advertising IDs.
• Translation content — text you submit for translation (and audio, if you use voice translation) is sent to a third-party AI provider for processing. We do not store your translation text or audio recordings — they are processed in real time and discarded.
• Waitlist — your email address if you join our waitlist before creating an account.
• Usage data — anonymous, aggregated analytics (page views, referrer) to improve the site. This data cannot identify you.
• Operational telemetry — the mobile app sends performance traces (request timing, device model, OS version) to help us monitor service health. These traces do not contain translation content or personal information.
• Error reports — automatic crash reports via Sentry to help us fix bugs. These may include your browser type and the page URL, but no personal information.

We do not collect payment information, location data, contacts, or any special-category personal data.

3. Why we collect it (legal basis)

Under the GDPR, we process your data based on the following legal grounds:

• Contract performance — when you create an account or register your device, we process your data as necessary to provide the translation service you signed up for, including authentication, storing your preferences, enforcing usage limits, and managing your account.
• Consent — you provide your email address voluntarily when joining the waitlist. You can withdraw consent at any time.
• Legitimate interest — anonymous usage data, operational telemetry, and error reports help us maintain and improve the service.

4. How we use your data

• To authenticate you and keep you signed in.
• To provide the translation service, including sending your text or audio to an AI provider for processing.
• To store your preferences for a personalised experience.
• To enforce usage limits and prevent abuse.
• To send you updates about Levelang (launch announcements, early access invitations).
• To maintain and improve the website and service.
• To diagnose and fix technical issues.

We will never sell your personal data or share it with third parties for marketing purposes.

5. Where your data is stored

Account and device data is stored in Supabase (hosted in the EU). If you sign in with Google, your identity is verified by Google and subject to their privacy policy.

Translation text and audio are sent to Google Gemini for processing. Google processes this data under their API terms of service — translation content sent via the API is not used to train their models. We do not store your translation content.

Operational telemetry is sent to Grafana Cloud for service monitoring. Error reports are processed by Sentry. Both services may transfer data to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission.

The mobile app stores your preferences and device registration locally on your device. All providers maintain GDPR-compliant data processing agreements.

6. How long we keep it

We retain your data for as long as you have an active account or remain on the waitlist. Device registrations are automatically deleted after 180 days of inactivity.

You can delete your account at any time from the app or website — this permanently removes your data from our systems via cascading deletion. If you request erasure by email instead, we will remove your personal data within 30 days.

7. Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to temporarily stop processing your data while a concern is resolved.
• Object — object to processing based on legitimate interest. We will stop unless we have compelling grounds to continue.
• Withdraw consent — unsubscribe from emails at any time using the link in any email we send, or by contacting us directly.
• Lodge a complaint — with your local data protection authority if you believe we have not handled your data correctly.

To exercise any of these rights, email privacy@levelang.app. We will respond within 30 days.

8. Children's privacy

Levelang is open to users of all ages. If you are under 16 years old, you must have a parent or guardian's permission before providing your email address or any personal data. If we learn that we have collected personal data from a child under 16 without parental consent, we will delete that data promptly. If you believe we may hold data about a child without proper consent, please contact us at privacy@levelang.app.

9. Cookies and browser storage

We do not use cookies for tracking or advertising. Essential cookies may be set by our hosting infrastructure for security purposes only. When you sign in, your browser stores session data to keep you signed in between visits.

The mobile app uses on-device storage to save your preferences (language, level, theme) and device registration. This data stays on your device and is not sent to us unless required for the translation service. You can clear this data from the app settings.

10. Mobile app permissions

The Levelang mobile app requests microphone access only if you use voice translation. Audio is recorded locally, sent to our server for translation, and immediately discarded — it is never stored. No other device permissions (camera, contacts, location) are requested.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you via email (if we have your address) or by posting a notice on the site. The "last updated" date at the top reflects the most recent revision.