Privacy Policy

Last updated: 17 October 2026. Published by Language technologies Limited Liability Partnership (Kazakhstan). This English-language notice is provided for users in the European Economic Area (EEA), the United Kingdom, and the United States, and describes their rights under the GDPR and US state privacy laws (including the CCPA/CPRA) in addition to the Kazakhstan-law personal-data policy that governs the service generally. Where the two documents differ, this notice controls for users located in the EU/UK/US.

1. Who we are

The data controller is Language technologies Limited Liability Partnership (Language Technologies LLP / ТОО «Языковые технологии»), Tax ID (БИН) 231040018745, registered at 14A Auezov St., Almalinsky district, Almaty, Kazakhstan, 050009 — the company behind the Lexy voice language-learning service at lexylearn.com. Contact for any privacy request: ai@lexylearn.com.

2. What data we collect

• Account data — name and email address, collected when you sign in with Google starting from lesson 2.
• Voice and lesson content — audio you speak during a live lesson, messages you type, lesson transcripts, and the language, level, and current-lesson context needed to respond. We collect voice through the microphone only after iOS grants microphone access; typed content is collected when you submit it. Lesson progress (level, completed lessons, mistakes reviewed) is stored so the course can continue where you left off.
• Payment data — if you subscribe, payment is processed by a payment provider, never by us directly. On the website we use TipTop Pay or CloudPayments; in the mobile apps, payment goes through the Apple App Store or Google Play. We do not receive or store your card number. The provider shares back only what is needed to confirm and manage the subscription: transaction ID, plan, amount, currency, status and expiry or renewal date.
• Usage and device data — standard technical data (IP address, browser type, pages visited) collected via analytics tools (e.g. Google Analytics) and cookies, for the sole purpose described in Section 3.

3. Why we process this data (purpose and legal basis under GDPR)

• Providing the service (running lessons, tracking progress, account sign-in) — necessary to perform our contract with you (GDPR Art. 6(1)(b)).
• Processing payment and subscriptions — necessary to perform our contract with you, and to comply with accounting/tax obligations (Art. 6(1)(b) and (c)).
• Product analytics and service improvement — our legitimate interest in understanding how the service is used and fixing what does not work (Art. 6(1)(f)), balanced against your right to opt out of non-essential cookies via your browser or device settings.
• Product and marketing emails — based on your consent (Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link or by emailing us.

4. Who we share data with

We do not sell personal data. We share the minimum necessary data with the service providers that make Lexy work. For AI features, voice audio, typed messages, lesson transcripts, language, level, and current-lesson context are sent through Lexy's server to Google LLC's Gemini service to generate responses, translations, error reviews, and learning material. The app asks for explicit permission before this transmission; if you do not allow it, AI-powered voice lessons, chat, translations, and error review remain unavailable. We also share necessary data with payment providers (TipTop Pay and CloudPayments on the website; Apple and Google for purchases in the mobile apps), our cloud hosting provider (Google Cloud), and analytics providers. Each acts under its own data-processing terms and is required to provide the same or equivalent protection as described in this policy. We disclose data to authorities only where required by law.

5. International data transfers

Language technologies Limited Liability Partnership is registered in Kazakhstan, and some of our service providers operate infrastructure in the United States and the European Union. Where personal data of an EEA/UK user is transferred outside the EEA/UK, we rely on the service providers' own compliance mechanisms (such as the EU Standard Contractual Clauses) as implemented by those providers.

6. How long we keep data

Account and lesson-progress data is kept for as long as your account is active, so your course history is not lost. Payment records are kept as long as required by applicable tax and accounting rules. You can request deletion at any time (Section 7); we will delete or anonymize data that we are not legally required to retain.

7. Your rights

If you are in the EEA/UK (GDPR): you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA) or covered by another US state privacy law: you have the right to know what personal information we collect and why, to request deletion or correction of it, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information; if we ever use analytics or advertising tools that count as "sharing" under CPRA, you can opt out via your browser's cookie settings or by contacting us. We do not discriminate against users who exercise these rights.

To exercise any of these rights, email ai@lexylearn.com with the subject "Privacy request" and describe what you would like us to do. We will respond within the time limits required by applicable law.

8. Children's privacy

Lexy is not directed at children under 16. We do not knowingly collect personal data from children under 16; if you believe a child has provided us with personal data, contact us and we will delete it.

9. Cookies

We use essential cookies to keep you signed in and non-essential cookies for product analytics. You can block or delete cookies in your browser at any time; the service will still work, though your sign-in may not persist between visits.

10. Changes to this policy

We will update this page whenever the data we process or the purposes described above change, and the "updated" date at the top will reflect the latest revision.