Privacy Policy

Lenia App ("Lenia," "we," "us," "our") provides an online language learning platform accessible via our website and applications (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal data when you use the Service, in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

Data controller: Lenia App [Legal entity name / registered address — to be added] [Handelsregister number — to be added, if applicable] [VAT ID — to be added, if applicable] Germany

Contact: privacy@lenia.app

If we appoint a Data Protection Officer, their contact details will be added here.

We use your data for creating and managing your account, delivering learning content, processing AI features, payment processing, age verification, maintaining security, responding to support requests, and sending essential service emails. We do not sell your personal data. We do not use your data for behavioral advertising.

We use the following service providers to operate Lenia: Railway (application hosting), Vercel (frontend hosting), Cloudflare R2 & Stream (media storage), Stripe (payments), RevenueCat (mobile), Anthropic Claude (writing feedback), Google Gemini (conversation practice), OpenAI Whisper/TTS (speech), YouTube Data API (video metadata).

Where data is transferred outside the European Economic Area (EEA), we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer safeguard.

We do not permit these providers to use your data for their own purposes beyond providing their service to us.

Account data: retained for as long as your account is active, plus up to 10 years for billing records under German commercial law

Learning and content data: retained while your account is active, deleted upon account deletion

AI conversation/audio data: retained only as long as needed to provide the feature, then deleted or anonymized

Support communications: retained for as long as needed to resolve your inquiry and for quality/dispute purposes

You can request earlier deletion at any time (see Section 6).

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at privacy@lenia.app. We will respond within one month as required by GDPR.

We use only cookies strictly necessary for the Service to function: Session/authentication cookies (httpOnly, used to keep you logged in) and CSRF protection cookies.

We do not use third-party advertising or tracking cookies. If this changes in the future, we will update this policy and request consent where required.

We apply appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), hashed passwords, access controls, and regular security review of our infrastructure. We are committed to promptly investigating and addressing any incident.

Lenia is intended for users 18 years of age and older. We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a user under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy or our data practices:

Email: privacy@lenia.app

Postal address: [To be added]