Your reading stays yours.

01Who we are

NativeLingo (“we”, “us”) makes the NativeLingo browser extension and the NativeLingo web app, where you sign in, review words and manage your subscription. We decide how the information described here is used, and we are responsible for it (in GDPR terms, the controller). Questions go to support@nativelingo.io.

02What we collect

When you sign in

You sign in with Google. We receive your email address, your name and your profile photo, plus Google’s internal ID for your account, and create a NativeLingo account from them.

While you read

The extension looks at the text of the page in your browser, picks a few words that suit your level, and shows them in the language you learn. That analysis happens on your device. What the extension sends to us is limited to the words you were shown: for each word, its number in our dictionary, the form that appeared (for example “compré”), its dictionary translation and the time. We use this to schedule reviews and to show your progress on every device you use.

We don’t receive the sentence the word was in, the page’s title or its address. We also don’t receive a list of the sites where you use NativeLingo. For the awards, the extension works out on your device what kind of site you are on — one of 20 categories such as “News” or “Recipes” — and sends that category with the word, and it tells us how many different sites you have used it on as a number. The site itself stays on your device. The one exception: if you pause NativeLingo on a site, that site’s domain (for example “example.org”) is saved to your account, so that the pause applies on your other devices too.

When you learn in the app

• Your answers in reviews and the resulting schedule for each word
• Your level test answers and the level they point to
• Your goals, daily pace and why you learn (for example travel or work)
• Settings: interface language, time zone (to send reminders at your morning), notification choices, whether you finished the tour, whether the extension is paused
• Which days you answered reviews, used for your streak, and a count of words you met each day for your weekly chart
• Awards you earned and rewards you claimed (streak freezes, Pro days, items for Pip and what Pip wears), and which words you listened to, at most once per word per day
• If you joined through an invite link, who invited you; if you invite someone, whether they became an active learner

If you turn on reminders

Your browser gives us a push subscription: an address at your browser’s push service and the keys to encrypt messages to it. We use it only to send the reminders and summaries you turned on.

If you subscribe

Lemon Squeezy handles the payment. We store your plan, its status, trial and billing dates, the identifiers it uses for you and your subscription, a link to your subscription’s billing page, and the notifications it sends us. We never receive your card details.

If you remove the extension

Chrome opens a goodbye page. If you answer its question, we store the reason you picked, anything you typed and the page’s language — not your name, email, account, IP address or the pages you read. The answer can’t be linked back to you.

Technical information

Like any web service, our servers see your IP address with each request. We use it briefly to limit abusive traffic: rate-limit counters keyed by IP address expire after one minute for most requests and after at most an hour for a few one-off forms (checkout, unsubscribe, feedback after removing the extension). Our servers also keep access logs, which record the time, the API address called and the response, and, at the proxy, the IP address. Because a pause is saved through an address that contains the domain, a paused site’s domain can appear in these logs. For each signed-in session we store the browser’s user-agent string, so you can tell sessions apart.

03What we never collect

• The text of the pages you read, their titles or addresses
• Your browsing history, or the list of sites where NativeLingo runs
• Anything in the parts of a page NativeLingo skips: forms with a password field, text you are typing, code blocks
• Your card or bank details (Lemon Squeezy holds them)
• Your Google password or any Google data beyond email, name and photo

The extension has no analytics or advertising trackers. The website and web app use Google Analytics to count visits (see “Services we rely on”); there are no advertising trackers.

04How we use it

• To run NativeLingo: choose words for you, schedule reviews, keep your progress in sync across devices. This is necessary to provide the service you signed up for.
• To send reminders and weekly summaries — only if you turn them on. You can turn them off at any time in Settings → Notifications, or with the unsubscribe link in each summary email.
• To understand why people remove the extension — only from the anonymous answers you choose to send on the goodbye page.
• To manage your subscription and meet accounting and tax obligations.
• To keep NativeLingo secure and working: rate limiting, error reports, fixing bugs. This is our legitimate interest in running a reliable service.
• To send product news — only if you opted in to “Product updates”.

We don’t sell your information, use it for advertising, or use it to build profiles for anyone else. We don’t use it to train AI models.

NativeLingo’s use of information received from Google APIs adheres to the Google API Services User Data Policy and the Chrome Web Store User Data Policy, including the Limited Use requirements.

05Services we rely on

These companies process data for us, only for the purpose listed. Some of them are based outside your country, including in the United States; where that applies, transfers are covered by standard contractual clauses or an equivalent safeguard.

06How long we keep it

Account, words, progress and settings

While your account exists. When you delete your account, everything is erased 7 days later — unless you sign in and restore it before then.

Record of a deleted account

Kept: when deletion was requested and done, and the reason if you gave one. It contains no email, name or learning data — only an internal number that no longer points to anyone, and a one-way fingerprint of your Google account ID, so that signing up again doesn’t start a second free trial.

A word you removed

The word leaves your list at once. A short marker stays for up to 90 days so your other devices learn it was removed, then it is deleted too.

Sign-in sessions

Expire after 30 days without use, or when you sign out.

Push subscription

Until you turn notifications off, sign out in that browser, or the browser withdraws it.

Subscription and payment records

As long as accounting and tax law requires.

Rate-limit counters with your IP address

One minute; up to an hour for checkout, unsubscribe and extension feedback.

Feedback after removing the extension

Kept. It contains no account, email or IP address and can’t be linked to you.

Server logs

A limited time: logs are rotated and overwritten as they grow.

Backups

Daily copies of the database, each kept for 30 days. Data you delete disappears from backups within that time.

07Cookies and browser storage

The web app uses one cookie, nativelingo_refresh. It keeps you signed in, can only be read by our server, and expires after 30 days. The app also keeps a short-lived sign-in token in your browser’s local storage, and remembers there if you answered “Not now” to the reminder prompt.

The extension stores its data in your browser’s extension storage: the dictionary, a copy of your progress, the sites you paused, your sign-in tokens, shown words waiting to be sent, and salted hashes of the sites you used NativeLingo on (to count them for awards; deleted when you sign out). The extension asks for these permissions:

• Run on web pages — to find and replace words while you read. The text is processed locally.
• Storage — to keep the dictionary and your progress on your device.
• Alarms — to send shown words to your account every so often, even if you’re offline for a while.
• Active tab — to pause NativeLingo on the site you’re looking at when you ask it to.

The website and web app also carry Google Analytics cookies (_ga and _ga_*), which count visits. You can block them in your browser or with Google’s opt-out add-on; the site works the same without them. No advertising cookies are used anywhere in NativeLingo.

08Your rights and choices

You can do much of this yourself:

• Delete your account in Settings → Account. You’re signed out everywhere at once; after 7 days your account and everything linked to it are erased. Sign in within those 7 days to restore it.
• See your words and progress, and remove any word, in the web app.
• Change your level, goals and notification choices in Settings.
• Pause NativeLingo on a site or everywhere from the extension.
• Turn off reminders, or block notifications in your browser.

You can also ask us to give you a copy of your data, correct it, delete it, or stop a particular use. Write to support@nativelingo.io from the email of your account. We reply within 30 days. If you live in the EEA, the UK or another place with similar laws, you can also complain to your data protection authority.

A subscription that renews automatically has to be cancelled before you can delete your account, so you’re never charged for an account that no longer exists.

09Security

• All traffic between your browser and NativeLingo is encrypted (HTTPS).
• We never have a password to leak: you sign in with Google.
• Sign-in refresh tokens are stored only as hashes, never in readable form.
• Each account can only reach its own data; access is checked on every request.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authorities as the law requires.

10Children

NativeLingo isn’t intended for children under 13, or under 16 in the EEA and the UK. We don’t knowingly collect their data; if you believe a child has an account, contact us and we will delete it.

11Changes to this policy

When we change what we collect or how we use it, we update this page and the date at the top. For significant changes we’ll also tell you in the app or by email before they take effect.

12Contact

Questions, requests or concerns about your data: support@nativelingo.io.