Novalingo Privacy Policy

Effective date: July 14, 2026

This Privacy Policy explains how Arjang Consulting LLC, operating as Novalingo ("Novalingo," "we," "us," or "our"), collects, uses, discloses, and retains personal information when you use the Novalingo mobile applications, websites, content, and related services (collectively, the "Service").

Controller or operator details:

Legal entity: Arjang Consulting LLC
Privacy contact:
Support contact:

1. At a Glance

Novalingo is a worldwide English-learning service for users aged 13 and older. It uses curated videos, synchronized subtitles, vocabulary and grammar tools, saved learning activity, AI explanations, authentication, analytics, and diagnostics.

The launch version does not offer paid subscriptions or in-app purchases and does not include an advertising SDK that serves third-party ads. We do not sell personal information for money or share it for cross-context behavioural advertising at launch.

YouTube may independently show advertising as part of its embedded service. Google and YouTube control those advertisements and their associated data practices.

2. Age Requirements

The Service is not directed to children under 13, and users under 13 may not use it. If you are at least 13 but have not reached the age of majority where you live, you may use the Service only with permission from a parent or legal guardian. Additional parental-consent requirements may apply under local law.

If we learn that we collected personal information from a child who is not permitted to use the Service, we will take reasonable steps to close the account and delete the information. A parent or guardian may contact .

3. Information We Collect

Account and Authentication Information

Depending on how you use the Service, we may collect or receive:

A Firebase user ID, Novalingo account ID, or anonymous user ID.
Your email address and display name if you use a sign-in method that provides them.
The sign-in method used, such as Apple, Google, email, or anonymous access.
Authentication tokens, account status, and records relating to sign-in, password reset, and account deletion.

We do not receive your Apple or Google account password.

Learning Activity and Preferences

We may collect or generate information about your learning and use of the Service, including:

Videos selected, played, paused, completed, or resumed, plus watch history and playback position.
Categories, filters, search interactions, and search metadata such as query length or result count.
Subtitle interactions, playback speed, loop settings, and subtitle visibility.
Words selected, definitions viewed, pronunciation actions, and words saved or removed.
Grammar lessons, exercises, answers, progress, scores, hints, and retries.
Native or translation language, learning level, onboarding status, category order, haptic settings, and other app preferences.

Some of this information is stored only on your device. Information may also be sent to our servers when needed to sync your account, provide requested features, prevent abuse, or support the Service.

AI Feature Information

When you request an AI explanation or use an AI conversation, we may process:

Your prompt or chat message and recent conversation context.
The selected word, phrase, sentence, subtitle, or grammar item.
Relevant video title or identifier, subtitle context, learning level, and language preference.
Technical metadata such as request time, latency, response length, error status, and usage limits.

AI processing differs by platform and device:

On supported Apple devices, some AI features may use Apple's on-device Foundation Models framework. Content handled entirely by an on-device model is not sent to an external AI model for that processing.
On Android or for server-backed AI features, the relevant prompt and context may be sent through Firebase AI Logic to Google's Gemini services so the response can be generated.

Google may process server-backed AI content and metadata to provide, secure, and maintain its services under the applicable Google Privacy Policy and Gemini API Additional Terms. The exact retention and service-improvement treatment can depend on the API service plan and configuration used for the release.

Do not submit passwords, payment card numbers, government identifiers, health information, confidential information, or sensitive information about you or another person into AI features.

Feedback and Support

If you send feedback or contact us, we may collect your message, contact information, account identifier, app version, platform, device type, error details, and staff resolution status.

Device, Network, Analytics, and Diagnostics Information

We and our service providers may collect:

Device type, operating system, app version, language, region, and platform.
Firebase installation, app-instance, Mixpanel distinct, user, or similar app identifiers.
IP address and approximate location inferred from it by infrastructure providers.
App launches, screen views, taps, feature interactions, sessions, video activity, and learning activity.
Crash logs, performance measurements, network request telemetry, endpoint identifiers, status and error codes, latency, and diagnostic logs.
Remote-configuration and experiment-assignment information.

We use Google Analytics for Firebase and Mixpanel to understand feature use, diagnose failures, improve performance, and measure how users engage with the Service. We do not use analytics data for third-party targeted advertising at launch.

YouTube and Embedded Player Information

The Service uses YouTube API Services and embedded YouTube playback. When the player loads or you interact with a video, YouTube or Google may receive IP address, device and browser data, identifiers, playback activity, and other information under their own terms and privacy policy.

Novalingo uses YouTube's privacy-enhanced embed host where technically appropriate, but this does not prevent all processing by YouTube or Google when the player loads or a video plays. See the Google Privacy Policy and YouTube Terms of Service.

Websites, Cookies, and Similar Technologies

Our websites and web-based player may use cookies, local storage, SDK identifiers, logs, and similar technologies for security, preferences, analytics, diagnostics, and embedded content. Our Cookie Policy explains these technologies and the choices available to you.

No Purchase Information at Launch

The launch version does not offer paid subscriptions or in-app purchases, so Novalingo does not process purchase history, receipts, or subscription-entitlement data for an active paid Novalingo product at launch. Apple and Google may independently process information about downloading or installing the app under their own policies.

If we introduce purchases later, we will update this policy and the applicable app-store disclosures before activation. We will not receive your full payment card number from Apple or Google.

4. How We Use Information

We use personal information to:

Provide accounts, authentication, app features, synchronized learning activity, and support.
Deliver video, vocabulary, grammar, pronunciation, search, history, and AI features.
Remember settings and personalize learning context.
Measure use, diagnose errors, monitor reliability, and improve the Service.
Secure accounts and systems, prevent abuse, and enforce our Terms.
Communicate about support requests, security, material policy changes, and service messages.
Comply with legal obligations and respond to lawful requests.

We do not use personal information to make decisions that produce legal or similarly significant effects through solely automated processing.

5. Legal Bases Where Required

If the law where you live requires a legal basis for processing, we rely on:

Performance of a contract: to provide the account and features you request and administer our Terms.
Legitimate interests: to secure, maintain, diagnose, and improve the Service, provided those interests are not overridden by your rights.
Consent: where we ask for permission for non-essential cookies, analytics, device storage, marketing, or another specific use. You may withdraw consent at any time.
Legal obligations and public interests: to comply with law, protect rights and safety, and respond to lawful process.

Where local law requires consent before analytics or other non-essential device access, that processing must not be enabled until a valid consent choice is available.

6. How We Disclose Information

We may disclose information as follows:

Service providers: to providers that perform authentication, hosting, storage, analytics, diagnostics, AI processing, content delivery, email, support, and security services for us.
Platform and content providers: to Apple, Google, Firebase, Mixpanel, YouTube, and sign-in providers when you use their features.
Legal and safety reasons: when reasonably necessary to comply with law or legal process; protect users, the public, our rights, or our systems; or investigate fraud, abuse, or security incidents.
Business changes: as part of a proposed or completed financing, merger, acquisition, restructuring, insolvency, or sale of assets, subject to appropriate confidentiality and legal safeguards.
With your direction or consent: when you ask us to disclose information or consent to a specific disclosure.

We may use and disclose aggregated or de-identified information that cannot reasonably identify you. We will not attempt to re-identify information that applicable law requires us to maintain as de-identified.

7. Service Providers and Third Parties

The launch Service may interact with:

Google Firebase for authentication, analytics, crash reporting, remote configuration, performance monitoring, and related infrastructure.
Mixpanel for product analytics, including events, feature interactions, device and app information, identifiers, and approximate region.
Google Gemini through Firebase AI Logic for server-backed AI features on supported platforms.
Apple for Apple Sign In, on-device platform features, app distribution, and related platform services.
Google for Google Sign-In, Google Play distribution, and related platform services.
YouTube and Google for embedded video playback and YouTube API Services.
Our backend, hosting, storage, content-delivery, dictionary, email, and support providers.

The presence of subscription or entitlement code in the app does not mean a paid service is active at launch. Any dormant purchase SDK must remain unconfigured or disabled until our purchase disclosures and terms are updated.

Third parties process information under their own terms and privacy policies or under contracts with us, as applicable.

8. International Processing and Transfers

We offer the Service worldwide. Information may be processed in Canada, the United States, and other countries where we or our providers operate. Those countries may have privacy laws different from the laws where you live.

Where required, we use recognized safeguards for international transfers, such as adequacy decisions, contractual protections, data-processing agreements, standard contractual clauses, or another lawful transfer mechanism. You may contact for information about applicable safeguards.

9. Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, considering the type of information, account status, operational needs, security risks, provider settings, and legal requirements. In general:

Account and synchronized learning data are kept while your account is active and are deleted or de-identified after a valid deletion request, subject to the exceptions below.
Local settings and learning data remain on your device until you delete or reset them, clear app storage, or remove the app.
AI prompts and related context are kept by Novalingo only as needed to provide the interaction, diagnose failures, prevent abuse, and secure the Service. A third-party AI provider may apply its own disclosed retention rules.
Analytics, crash, performance, and security logs are retained according to configured provider retention periods and are deleted, aggregated, or de-identified when no longer reasonably needed.
Support and feedback records are retained while needed to resolve the request, maintain a record of the resolution, and protect legal rights.
Backups may retain residual copies for a limited deletion cycle before they are overwritten.

We may retain limited information longer where required for law, security, fraud prevention, dispute resolution, or enforcing agreements.

10. Your Choices and Rights

Depending on where you live, you may have the right to:

Know whether we process your personal information and access a copy.
Correct inaccurate information.
Delete information.
Object to or restrict processing.
Receive certain information in a portable format.
Withdraw consent without affecting processing that occurred before withdrawal.
Opt out of targeted advertising, sale, sharing, or certain profiling if those practices apply.
Appeal our response where local law provides that right.
Complain to a privacy or data-protection regulator.

To submit a request, email . We may need to verify your identity. An authorized agent may submit a request where local law permits, subject to verification of authority.

We will not discriminate against you for exercising a privacy right. Some information may be exempt from a request or retained where law permits or requires.

11. Account Deletion

You may request account deletion through the in-app deletion feature or by contacting . We may take reasonable steps to verify the request.

Deletion is intended to remove or de-identify the account and associated server-side learning data. Limited information may remain temporarily in backups or be retained for security, fraud prevention, legal compliance, or dispute resolution. Information stored only on your device may remain until you clear it or remove the app.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transport, authentication, access controls, logging, monitoring, and platform security features. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Advertising and Sale or Sharing

Novalingo does not include an advertising SDK that serves third-party ads at launch. We do not sell personal information for money or share it for cross-context behavioural advertising at launch. YouTube may independently show advertisements as part of its service.

If we introduce third-party advertising, personalized advertising, or advertising measurement later, we will update this policy and provide notices, consent prompts, app-store disclosures, and opt-out mechanisms where required before enabling those practices.

14. Regional Information

European Economic Area, United Kingdom, and Switzerland

You may exercise the rights in Section 10 and lodge a complaint with your local supervisory authority. Our legal bases are described in Section 5 and international-transfer safeguards in Section 8.

If applicable law requires us to appoint a local privacy representative, we will make the representative's contact details available in this policy.

California and Other U.S. States

Subject to applicability thresholds and exceptions, residents may have rights to know, access, correct, delete, obtain a copy, and opt out of sale, sharing, targeted advertising, or qualifying profiling. At launch, we do not sell personal information or share it for cross-context behavioural advertising.

For the preceding 12 months, the categories we may have collected are identifiers and contact information; internet or electronic activity; user-provided content; approximate location inferred from IP address; and app, device, and diagnostic information. We collect these categories from you, your device, platform providers, and service providers for the purposes in Section 4, and disclose them to the provider categories in Section 6.

Where required, we will honor recognized opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

Canada and Other Regions

Depending on where you live, you may have rights to access or correct information, withdraw consent, challenge our compliance, or complain to a regulator. Contact to exercise a right or ask about our practices.

15. Changes to This Policy

We may update this policy as the Service, providers, or law changes. If a change is material, we will provide notice where required, such as in the app, on our website, by email, or through app-store release notes. The revised policy will state its effective date.

Where a change requires consent, we will request it before applying the new processing to you.

16. Contact

For privacy questions, complaints, or rights requests, contact:

Arjang Consulting LLC, operating as Novalingo
Email: