Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains how Readlang SL ("us", "we", or "our"), a company registered in Spain, collects, uses, and shares your personal data when you use Readlang (the "Service"). Readlang SL is the data controller for that data. We respect your privacy and aim to handle your data carefully and transparently.

1. Information We Collect

• Account information: such as your email address, username, password (stored only in hashed form), and the languages you are learning. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Your content: the texts you import, paste, or link to in order to read them, the words and phrases you save, your translations, and your reading and study progress. If you use voice features, we process the audio you record.
• Billing information: if you subscribe, our payment provider Stripe collects your payment details and billing address. We do not store your full card number; we keep records such as your plan, subscription dates, and invoice references.
• Usage and device information: how you interact with the Service (pages visited, features used, actions taken), along with technical data such as your IP address, approximate location derived from it, browser, operating system, and device type.

2. How We Use Your Information, and Our Legal Bases

Under the GDPR we rely on the following legal bases:

• To provide the Service — creating your account, storing your texts and word lists, generating translations, definitions, and audio, and processing your subscription. Legal basis: performance of our contract with you.
• To improve and secure the Service — understanding how the Service is used, developing new features, preventing abuse, and keeping it reliable. Legal basis: our legitimate interests in running and improving the Service.
• To communicate with you — sending transactional emails (for example about your account or billing), and, where you have opted in, practice reminders and other optional emails or push notifications. Legal basis: performance of our contract, our legitimate interests, or your consent, depending on the message.
• To meet legal obligations — for example keeping invoices and tax records. Legal basis: compliance with a legal obligation.

3. Cookies

We use only the cookies that are strictly necessary to operate the Service, such as keeping you logged in and securing your session. We do not use advertising cookies or third-party advertising trackers.

4. How We Share Your Information

We do not sell your personal data. We share it only with service providers who help us run the Service, and only as needed for them to provide their service to us. These include:

• Linode (Akamai) — our hosting and storage provider, where our servers, database, and your stored content (including texts and any audio recordings) reside.
• Stripe — payment processing and subscription billing.
• Quaderno — invoicing and tax compliance.
• Google — translation of the text you look up, and Google sign-in.
• OpenAI — AI features such as smart dictionary definitions and transcription of recorded audio.
• Microsoft Azure — text-to-speech for reading content aloud.
• Amazon Web Services — sending transactional and reminder emails.
• Rollbar — error monitoring to help us diagnose and fix problems.
• Trustpilot — when you upgrade to a paid plan, we share your email address so you can be invited to review the Service. Trustpilot handles this in line with its own privacy policy.

We may also disclose personal data if required by law, or to protect our rights, users, or the Service. If Readlang is ever involved in a merger or acquisition, your data may be transferred as part of that transaction.

5. International Transfers

Some of our service providers are based outside the European Economic Area, including in the United States. Where we transfer your personal data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data continues to be protected.

6. How Long We Keep Your Information

We keep your account information and content for as long as your account is active. If you delete your account, we delete your personal data, except where we are required to keep certain records (such as invoices for tax purposes) or where limited copies remain temporarily in routine backups. Some data is removed automatically — for example, cached translations are deleted after a year, and temporary files after a short period.

7. Your Rights

If you are in the EEA, you have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent where we rely on it. You can:

• Export your data at any time from your account settings.
• Delete your account and personal data from your account settings.
• Contact us at steve@readlang.com to exercise any of these rights.

If you have a concern we cannot resolve, you have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

8. Security

We take reasonable technical and organisational measures to protect your data, including storing passwords only in hashed form and restricting access to personal data. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for children under 14, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date above. If the changes are significant, we will provide a more prominent notice.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at steve@readlang.com.