Privacy Notice

This notice explains how Elemental Lingua LTD, a company registered in the United Kingdom, handles personal data when you use Elemental Mandarin. Elemental Lingua LTD is the data controller for this data. We follow the UK GDPR, the Data Protection Act 2018, and the EU GDPR where it applies.

Data we collect and why

• Account data (name, email, login credentials, Google sign-in profile) — to create and secure your account. Legal basis: contract.
• Learning data (HSK level, goals, lesson progress, decks, review history, streaks) — to provide the Service. Legal basis: contract.
• Content you submit to AI tools (text, images you scan, audio recordings) — to generate lookups, decks and feedback. Processed to return a result; we do not use it to advertise to you. Legal basis: contract.
• Subscription status (plan, renewal dates, payment-provider customer ID) — to unlock Pro. Card details are handled by Paddle, not us. Legal basis: contract.
• Technical and usage data (IP address, device and browser information, logs) — for security, fraud prevention, troubleshooting and improving the Service. Legal basis: legitimate interests.
• Support messages — to help you. Legal basis: legitimate interests / contract.
• Service emails (such as account confirmation and receipts) — Legal basis: contract. We only send marketing with your consent, which you can withdraw at any time.

Who we share data with

• Service providers who process data for us: cloud hosting and database, authentication, AI model providers that power the AI tools, and email delivery.
• Paddle.com, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

We do not sell your personal data.

International transfers

Some providers process data outside the UK/EEA (for example in the United States). Where this happens we rely on adequacy decisions, the UK International Data Transfer Agreement/Addendum, or the EU Standard Contractual Clauses.

How long we keep data

We keep account and learning data while your account is active. When you delete your account, we delete or anonymise it within 30 days, except where we must keep records (such as transaction records) for legal or tax reasons. Logs are kept for a limited period for security.

Your rights

You can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interests, and withdraw consent at any time. We respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user data isolation.

Cookies and local storage

We use only essential storage needed to keep you signed in and remember your preferences. We do not use advertising cookies. Paddle may set essential cookies during checkout. You can clear these in your browser settings, but you may be signed out. See our Cookie Policy.

Contact

For privacy requests, contact Elemental Lingua LTD through the support contact shown in the app or on your receipt.