Privacy Policy

1. Operator, scope and sources

承德云霏信息科技有限公司 operates Lingono. This policy explains information processed through our website and learning application. It covers information you provide, records created while you use features, and information returned through sign-in or connections you authorize. Contact feedback@lingono.com for privacy questions.

2. Account and authentication information

Account data can include your name, email, phone number and avatar. Authentication can involve password credentials when used, Google sign-in identity, passkey public credentials, verification records and sessions. Session records can include IP address and browser information for authentication and security.

Passkey biometric checks take place on your device; Lingono does not receive the biometric template. Passwords, verification codes and connection credentials are different types of authentication data. Do not send passwords, active verification codes or private keys to the support mailbox.

3. Learning content and records

We store materials and links you import or upload, including audio/video, documents and ebooks, together with processed transcripts, translations and explanations. Learning records can include saved vocabulary and sentences, notes, bookmarks, progress, preferences and settings.

Conversations and relevant context are stored to support continued use and enabled tools. When you choose to share a material, collection or generated content, other people may receive access according to its visibility and permissions. Avoid placing unnecessary sensitive information or other people's private data in uploaded content.

4. Usage, orders and support communications

Task records, model and provider identifiers, token or import measurements, credit balances, allocations, orders, payment references and ledger entries support processing, metering, reconciliation and investigation of errors. These records are separate from the content of an individual AI request.

If you email us, you provide the sender address and any account, order, screenshot or diagnostic information included in the message. Send only what is relevant to the request. Current manual billing does not collect payment-card details through an online checkout; a future payment provider would process the information required for its own checkout.

5. Why information is needed

We use information to authenticate accounts, send verification messages, deliver learning and AI features, synchronize records, execute authorized connections, meter credits, investigate problems, prevent misuse, maintain accounting records and answer requests.

Some information is necessary for a selected feature: an email or phone number for its verification method, material content for processing, or authorization for a connected service. If you do not provide it or withdraw the relevant permission, that feature may be unavailable. Permissions required by applicable law are not replaced by a general statement in this policy.

6. Cookies, local storage and analytics

Authentication cookies maintain your session. Browser local storage keeps preferences and some client state. These mechanisms serve different purposes; clearing or blocking necessary authentication storage may sign you out or affect login and synchronization.

Both the website and Web application load Baidu Analytics. It receives visit, device/browser and network information and may use cookies. Browser settings or blocking tools can limit analytics. Analytics and the authentication storage described above serve different purposes.

7. AI requests and provider processing

AI features send the conversation and relevant context to the provider configured for that function. Context can include selected text, source excerpts, tool results and learning-profile information when enabled. Material-processing jobs can send text or transcripts for translation, metadata extraction and analysis.

Current model configuration supports DeepSeek, Alibaba Cloud Bailian/Qwen and Volcano Engine. The provider used depends on the selected model and active configuration; supported providers are not all used on every request. Learning settings can affect which profile data or tools are included.

Third-party request retention and use depend on that provider's policy and the active service settings. We do not promise that every provider keeps all data in one country, never retains requests or never uses data for model training. Do not submit content you are not authorized to disclose to the relevant provider.

8. Hosting, delivery, communications and optional connections

Cloudflare provides website/application delivery and R2 object storage. Our API and background processing use Alibaba Cloud servers. Configured Alibaba Cloud speech services receive text for audio generation. Transcription runs on the selected processing backend; when RunPod is configured, it processes the submitted audio.

Verification email uses the selected Alibaba Cloud DirectMail or Resend provider; enabled phone verification uses Alibaba Cloud SMS. When Sentry monitoring is enabled, sanitized error and performance diagnostics are sent. The current diagnostic configuration excludes conversation bodies and AI input/output from its intended payloads.

Google sign-in and optional Google Workspace, Microsoft OneNote, Notion and Baidu Netdisk connections process identity, authorization and requested content under the permissions you grant. We store credentials needed for authorized operations. Revocation stops Lingono using a personal connection but does not erase previously transferred content.

Shared materials can be visible to authorized users. Information may also be handled in response to applicable legal requirements or lawful requests from competent authorities. The exact disclosure depends on the feature, permissions or legal requirement; this does not grant every provider access to your entire account.

9. Locations and international processing

Account and application records use a self-hosted PostgreSQL database in mainland China. API services run in Beijing and background material processing runs in Singapore. Cloudflare delivery/storage and configured providers may process information outside mainland China.

Processing a material or using an external model can therefore involve overseas transmission or access. Lingono is not entirely local to your device or confined to one country. The processing location and practices of each external provider depend on its service and active configuration.

10. Security and retention

Authentication, permissions and HTTPS help protect public service access and connections. Your own account security and choice of shared content also matter. No transmission or storage system can guarantee absolute security; do not interpret these measures as an assurance of end-to-end encryption for all stored learning data.

We retain records while needed for the account, requested features, troubleshooting, security and accounting, considering the record type and applicable requirements. There is no single automatic deletion deadline for all data. Account deletion, accounting retention and shared references are explained below.

11. Managing information and making a privacy request

You can manage account information, learning preferences, enabled tools and third-party connections through the available settings. For access, correction, deletion or another privacy right provided by applicable law, contact feedback@lingono.com if the application has no direct control.

Describe the relevant account, information and request. Identity verification or clarification may be necessary to avoid exposing someone else's data; do not send unnecessary identity documents in the initial email. We assess the request under applicable law and any retention obligations. The available action depends on the request, the relevant records and applicable requirements.

Withdrawing an optional authorization can affect that feature, and does not undo processing or completed writes that already occurred. If you have concerns about the handling of a request, you may also use the complaint channels available under applicable law.

12. What account deletion does

Account settings offer deletion using email or phone verification and explicit confirmation. Active tasks must finish first. Sole organization ownership and organization-linked connections may need transfer or other resolution. Any remaining credits and membership entitlements require an explicit waiver; ask about refunds before confirming deletion.

Confirmation clears sessions, login identities and passkeys, releases the email and phone number, and revokes personal third-party connection credentials. Personal learning records and unreferenced stored files are cleaned up asynchronously. Accounting, credit sales and ledger records are retained, and shared materials still referenced by other users can remain.

Deletion does not guarantee immediate removal of every copy, a restore function, or erasure of content already held by another provider. A request concerning that provider's copy may need to be made through its own privacy channels.

13. Minors, updates and contact

Minors must use Lingono with parental or guardian consent and guidance. We do not currently provide automated age verification or a separate child-account mode. A guardian concerned that a minor supplied information without the necessary consent can contact feedback@lingono.com so the account and requested action can be verified.

The date above identifies the current policy. Revisit it when enabling a new feature or provider connection. Where applicable law requires additional notice or consent for a change, those requirements apply. The Chinese, English and Japanese versions have equal effect; none has automatic priority. Questions and complaints can be sent to feedback@lingono.com.