Privacy Policy

Last updated: July 26, 2026

WiseLingo is an AI-assisted English-learning app. This policy covers the marketing site (wiselingo.app) and the learning app (app.wiselingo.app). It explains what personal data we handle, how we use it, who processes it on our behalf, and the rights you have under Vietnam's Personal Data Protection Decree (Nghị định 13/2023/NĐ-CP, "PDPD") and, for users it applies to, GDPR-style principles.

1. Information we collect

Account information

When you create an account we receive your name and email address from Google Sign-In, or a passkey (a WebAuthn public-key credential) that you register. Authentication is passwordless — we never see or store a password for your account.

Learning activity and progress

The study data you generate as you use the app: vocabulary decks and review history, listening/reading/exam attempts and scores, streaks, spaced-repetition schedules, your chosen interface language, timezone, and timestamps. This is what lets the app personalise practice and remember what you tend to forget.

Content you create or upload

Notes and images you upload for OCR (text/handwriting recognition), and audio recordings from speaking and shadowing practice, which are processed to transcribe and score your pronunciation.

Usage and device data

Which features you use, approximate timezone, basic browser/device information, and server logs kept for security and debugging.

No payment data

This version of WiseLingo does not sell subscriptions or process payments, so we do not collect card, bank, or billing information. If paid features are introduced later, this policy will be updated before any payment data is collected.

2. How we use your information

• Provide and personalise the learning experience — spaced repetition, progress tracking, and surfacing what you are due to review.
• Run AI-powered features: generating practice material and explanations, transcribing and scoring speech, running OCR on uploaded images, and translating interface content.
• Keep the service secure, prevent abuse, and diagnose and fix problems.
• Send you essential service messages (for example, about your account or important changes).

We do not sell your personal data, and we do not use it for third-party advertising or cross-site tracking.

3. AI processing and third-party processors

To run the app we rely on a small set of trusted service providers that process data on our behalf, only to deliver the feature you asked for:

• OpenAI — generating practice material, explanations, scoring, and translations.
• Deepgram — speech-to-text transcription for speaking and listening practice.
• Amazon Web Services (AWS) — hosting, compute, storage, and secrets management (primarily the Singapore region, ap-southeast-1).
• Hasura / PostgreSQL — the database layer that stores your account and learning data.
• Google — sign-in via OAuth; we receive only your basic profile (name and email).

Text you submit, audio recordings, and images uploaded for OCR may be transmitted to the relevant processor above solely to perform the requested feature. Each processor handles that data under its own terms and security practices.

4. Data retention

We keep your account and learning data for as long as your account is active. Security and debugging logs are kept for a limited period and then rotated out. When you ask us to delete your account, deletion is scheduled 30 days out (a grace period during which you can cancel by signing back in); once that passes we permanently remove your personal data. Residual copies may remain briefly in encrypted backups before they are cycled out on their normal schedule.

5. Your rights — access, correction, export, deletion

Subject to applicable law (Vietnam PDPD and GDPR-style principles), you can request to access a copy of your data, correct it, export it, restrict or object to certain processing, withdraw consent, or have it deleted.

How to exercise these rights: the quickest way is right in the app. Open Profile → Settings → Data & privacy to Export my data (download a JSON copy of your account) or Delete account. Deletion is scheduled for 30 days later rather than done immediately, so you have a grace period to change your mind — sign back in any time before then to cancel it. When the 30 days are up, your account and all its data are erased permanently and this cannot be undone. For anything else, email support@wiselingo.app and we will verify the request against your account email and respond within a reasonable time.

6. Cookies and local storage

We use essential cookies and browser local storage to keep you signed in and to remember preferences such as your interface language and light/dark theme (for example, the marketing site stores your language choice under wiselingo-marketing:lang). We do not use third-party advertising cookies or cross-site tracking pixels.

7. Children

WiseLingo is not directed to children under 14, and you must be at least 14 to use it. Where local law requires it, users aged 14 and older should use the service with the involvement of a parent or guardian. If we learn we have collected personal data from a child under 14, we will delete it.

8. International data transfers

We operate from Vietnam and host primarily in AWS's Singapore region. Some processors (such as OpenAI, Deepgram, and Google) may process data in other countries. Where data crosses borders, we rely on the processor's safeguards and applicable legal transfer mechanisms.

9. Security

We protect data with encryption in transit, passwordless authentication (Google Sign-In and passkeys), and least-privilege access to systems. No online service can promise perfect security, but we work to keep your data safe and to respond quickly if something goes wrong.

10. Changes to this policy

We may update this policy as WiseLingo grows. We will revise the "Last updated" date and, for material changes, give notice in the app or by email.

11. Contact

Questions, or want to exercise a privacy right? Email us at support@wiselingo.app.