Privacy Policy

1. Data Controller

Xlang operates this platform. For questions about how we handle personal data, contact us at privacy@xlang-learn.com.

2. Information We Collect

• Account data: Name, email address, selected learning language, and CEFR level.
• Learning activity: Saved vocabulary, quiz progress, story interactions, and video watch history (only tracked while logged in).
• Admin/upload data: Video metadata, transcript files, and thumbnail URLs for admin workflows.
• Technical data: IP address, browser type, and device type for security and diagnostic purposes.

3. Legal Basis for Processing (GDPR)

• Contract: Account data and learning data are processed to deliver the service you signed up for.
• Legitimate interests: Security, fraud prevention, and platform improvement.
• Consent: Optional analytics and personalisation cookies (you can withdraw consent at any time via the cookie banner).
• Legal obligation: Record-keeping required by law.

4. How We Use Your Data

We use your data to authenticate your account, personalise level routing, provide AI-powered translation and review features, send service emails, and improve platform reliability and learning quality.

5. Processors & Third Parties

6. YouTube Embedded Player & Cookies

Xlang embeds YouTube videos using the privacy-enhanced youtube-nocookie.com player. This means YouTube does not set personalised tracking cookies unless you choose to play a video. When you interact with an embedded player, Google LLC may set cookies and collect data in accordance with their own Privacy Policy and Cookie Policy. You can prevent this by not playing embedded YouTube videos, or by managing your Google account privacy settings at myaccount.google.com/privacy.

7. Cookies & Local Storage

We use cookies and local storage for:

• Essential: Authentication session tokens, security state (always active)
• Functional: Your selected language, CEFR level, and display preferences
• Analytics (optional): Anonymous usage statistics to improve the platform
• Third-party (YouTube): Cookies placed by Google when you interact with embedded video players

You can manage optional cookie preferences via the cookie banner shown on first visit.

8. Data Retention

We retain your account and learning records while your account is active or as required by legal and fraud-prevention obligations. You may request deletion at any time (see Your Rights below).

9. International Transfers

Your data may be processed by service providers outside the European Economic Area (EEA). Where such transfers occur, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission.

10. Your Rights (GDPR & Equivalents)

If you are in the EU/EEA/UK, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure ("right to be forgotten"): Request deletion of your data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for optional cookies or analytics at any time

To exercise any right, email privacy@xlang-learn.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

11. Security

We use industry-standard technical and organisational safeguards including encrypted connections (TLS), row-level security in our database, and access controls. No service can guarantee absolute security; we continuously review and improve our security posture.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice. Your continued use of Xlang after the effective date constitutes acceptance of the updated Policy.

13. Contact

Privacy questions or data requests: privacy@xlang-learn.com