Expemo.aiPrivacy Policy

Expemo.ai is run by Lingua House sp. z o.o. (“Linguahouse”, “we”, “us”). This policy explains what personal data we collect when you use the Expemo.ai apps for iPhone, iPad and Android, the web app and this website (together, the “Service”), what we do with it, who we share it with, and the rights you have over it.

Who we are

Lingua House sp. z o.o. is the controller of your personal data: we decide why and how it is used. Expemo.ai is one of the Linguahouse services, alongside linguahouse.com and Livetea.ch.

One account for every Linguahouse service

You sign in to Expemo.ai with a Linguahouse account. The same account, with the same e-mail address and name, signs you in to linguahouse.com and Livetea.ch, so these services know it is you, and what you do in one can reach the others: the QR code on a Linguahouse worksheet unlocks its practice deck in Expemo.ai, and a Livetea.ch lesson can add a practice course to your library. The data linguahouse.com and Livetea.ch keep themselves is covered by their own privacy policies.

What we collect

Your account

• E-mail address. You sign up and sign in with it: each time, we send a one-time code to it, so there is no password.
• Name. Your first name, and your last name if you give it, when you create the account.
• Account ID. The identifier of your Linguahouse account, which ties your learning data to you.

Your learning

• The courses and decks in your library, the courses you create, and the codes you scan to unlock material.
• Your study activity: the cards you review, how each answer was rated, how long it took and how you gave it (by tapping, typing or speaking), and the review schedule, XP, streaks and badges worked out from it.
• Your settings, such as daily reminders and new course alerts.
• If you used the earlier Expemo app, the review history we bring over from it, so your cards keep their schedule.

Your devices

• Installation ID. A random identifier the app creates when it is installed and registers with your account.
• Notification token. If you allow notifications, the token Firebase Cloud Messaging issues for your device, so that we can send your reminders and alerts to it.
• Technical details. The app version and platform (iOS, Android or web) and, in our server logs, the IP address, time and address of each request, and your browser or app version.

What you send us

• Support messages. What you write in Contact support, and up to two images you attach.
• Flashcard reports. Your reason, the card and course concerned, and a screenshot of your screen taken as the report dialog opens.

Session recordings, crashes and performance

To find and fix problems, and to help you when you contact us, the apps can record your sessions with OpenReplay, which runs on our own servers. A recording shows the screens you see and what you tap and type (your answers included), with crash reports and loading times, and it is linked to your account. Your e-mail address, your name and your sign-in codes are hidden in recordings, and so are the support form and the QR scanner’s camera view.

Camera and microphone

The app asks for these only when you first use a feature that needs them, and you can turn them off in your device’s settings at any time.

• Camera. The QR scanner reads the Expemo code on a Linguahouse worksheet. The picture stays on your device; only the code is sent to us, to unlock the matching material.
• Microphone and speech recognition. Speaking exercises use the speech recognition built into your device or browser. Depending on your device and its settings, your voice is processed on the device itself or by the provider of that speech recognition (Apple, Google or your browser’s maker), under its own privacy terms. We don’t receive or keep recordings of your voice: the app gets back the words it heard, and we keep only the result of the exercise.

This website

expemo.ai shows no ads, uses no analytics or tracking cookies, and loads nothing from other companies. It stores only:

• a theme cookie when you pick light or dark mode, and a locale cookie when you pick a language, each for a year, so that this website and the web app open the way you chose;
• the campaign details of the link that brought you here (such as utm_source), in your browser’s session storage, so that they travel with you to the web app.

How we use it

• To run the Service: to create your account and sign you in, keep your library and progress in step across your devices and offline, schedule your reviews, and work out your XP, streaks and badges.
• To remind you: to send the daily reminders and new course alerts you turn on.
• To e-mail you: sign-in codes, and messages about your account or important changes to the Service.
• To help you and fix problems: to answer your messages, correct the flashcards you report, and investigate errors, crashes and slow screens.
• To keep the Service safe: to verify accounts, and to prevent and investigate abuse and security incidents.

We don’t sell your personal data, use it for advertising or track you across other companies’ apps and websites. We make no decisions about you by automated means alone that have legal or similarly significant effects on you.

Legal bases

Under the EU General Data Protection Regulation (GDPR), we rely on:

• our contract with you (Art. 6(1)(b)) to provide your account, library and progress, the sign-in e-mails and the support you ask for;
• your consent (Art. 6(1)(a)) for notifications, the camera and the microphone, which you give and can withdraw through your device’s permissions;
• our legitimate interests (Art. 6(1)(f)) in keeping the Service secure and working: session recordings, crash and performance data, server logs and flashcard reports;
• legal obligations (Art. 6(1)(c)) where a law requires us to keep or disclose data.

Who we share it with

We don’t sell or rent your personal data. We share it only with:

• the other Linguahouse services your account signs you in to, as described in One account for every Linguahouse service;
• providers that process it for us, under contracts that require them to protect it: the companies that host our servers and deliver our e-mail, and Google, whose Firebase Cloud Messaging delivers notifications;
• Apple and Google, under their own privacy policies, when you get the app from the App Store or Google Play, or use their speech recognition;
• public authorities, when the law requires it.

Some of these providers, Google among them, may process data outside the European Economic Area. Where they do, the transfer is protected as the GDPR requires, for example by an adequacy decision of the European Commission or by its standard contractual clauses.

How long we keep it

• Your account and learning data: for as long as you have the account. Deleting the account deletes them (see Deleting your account).
• Support messages and flashcard reports: for as long as we need them to deal with what they report.
• Session recordings and server logs: for a limited time, after which they are deleted.
• Anything a law requires us to keep: for as long as it requires.

Your rights

You have the right to:

• find out whether we process your personal data, and get a copy of it with details of how we use it;
• have it corrected or deleted;
• restrict how we use it, or object to our using it on the basis of our legitimate interests;
• receive the data you gave us in a structured, machine-readable format, and have it sent to another controller;
• withdraw your consent at any time, without affecting what was done before;
• lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live or work.

To use any of these rights, contact us. We reply within one month.

Deleting your account

You can delete your account at any time in the app: open Profile and choose Delete account, on iPhone, iPad, Android or the web. As the account is shared, this deletes your Linguahouse account from every service it signs you in to (Expemo.ai, linguahouse.com and Livetea.ch) and signs you out on all your devices straight away.

With it, we delete your library, the courses you created, your progress, review history, badges and settings. Counts of how often public courses and decks are reviewed are anonymous totals, and they stay. You can also ask us to delete your account by contacting us.

Security

• Everything the apps and this website exchange with our servers is encrypted in transit (HTTPS/TLS).
• On phones and tablets, your sign-in is kept in the device’s secure storage (the Keychain on iOS, protected by the Keystore on Android), and the app’s data is left out of Android’s cloud backups.
• Only authorised staff can reach the systems that hold your data, and only when their work needs it.
• If a breach puts your data at risk, we tell the supervisory authority within 72 hours, and you without undue delay where the risk to you is high.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change is significant, we tell you by e-mail or in the app before it takes effect.

Contact us

For any question about this policy or your personal data, or to use your rights, write to us: