AcquiLingua Privacy Policy

Effective Date: 2026-06-09 · Last Updated: 2026-06-09

AcquiLingua, the trade name of NextThing LLC, a Delaware Limited Liability Company (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Services. If you do not agree with this policy, please do not use our Services.

Contact: support@acquilingua.com

Address: 8 The Green Ste B, Dover, DE 19901

1. Information We Collect

1.1 Account and Authentication Information

When you register for AcquiLingua, we collect:

• Email address (required for account creation and login)
• Display name or username
• Date of birth or age (to verify eligibility and apply age-appropriate experiences)
• Authentication status and login provider
• AWS Cognito account identifier (password stored in hashed, encrypted form (we never see your plain-text password))

We use AWS Cognito and related AWS services to support account registration, login, authentication, and account security.

1.2 Profile and Personalization Information

To personalize your language learning experience, we may ask you to optionally share:

• Interests and hobbies
• Occupation or professional field
• Topics you enjoy discussing
• Family member names and pet names (used to make AI conversations feel natural)
• Age and gender (for tailored conversation contexts)
• Language learning goals, preferred language, and self-assessed proficiency level

This data is self-reported and is not independently verified by AcquiLingua. You may update or delete it at any time in your account settings.

1.3 AI Conversation Inputs and Processing

When you use AI-powered language-learning features, AcquiLingua processes conversation text and voice input to provide AI and speech features. AcquiLingua does not provide a permanent user-visible conversation-history feature, but normal service operation includes temporary retention used for reliable delivery, retry protection, duplicate-request handling, and service security.

• AcquiLingua may temporarily retain chat-turn response payloads and associated technical metadata, including technical identifiers, timestamps, and request fingerprints used for reliability and idempotency.
• Completed chat-turn records are marked to expire approximately 24 hours after completion. Expiration does not mean immediate physical deletion; expired records may remain in the active database while the database provider completes asynchronous TTL deletion.
• The chat-turn database currently uses a 14-day point-in-time recovery window. Historical table states containing chat-turn records may therefore remain recoverable within that managed recovery window.
• AcquiLingua may retain account-linked learning and usage metrics, such as vocabulary progress, proficiency estimates, session statistics, and feature engagement, subject to the retention practices described in this Policy.
• AcquiLingua does not store raw audio recordings as part of normal AI conversation operation.
• Third-party AI and speech providers process conversation inputs under their own terms and privacy policies and may retain data independently. Their retention periods and purposes may differ from AcquiLingua's.

1.4 Learning Metrics and Analytics

We collect account-linked and aggregated data about your learning activity:

• Vocabulary words practiced and retained
• Proficiency estimates and progress rates
• Session frequency, duration, and completion data
• Feature engagement and error/correction patterns

1.5 Device Permissions Data

When you grant device permissions:

• Microphone: Audio transmitted to STT providers (Deepgram and/or others) for real-time transcription. AcquiLingua does not store raw audio.
• Camera: Live video during video chat sessions. Not stored except during flagged session reviews per our monitoring policy.
• Location (GPS): Approximate location (country/region) for content localization and peer matching. Not used for precise real-time tracking.

1.6 Payment and Subscription Data

Payments are processed by Stripe, Inc. We do not store your full payment card number. We may receive payment metadata such as subscription plan, renewal status, transaction identifiers, and last four digits of your card. See stripe.com/privacy for Stripe’s data practices.

1.7 Cookies, Local Storage, and Similar Technologies

We use cookies, local storage, and similar technologies. See Section 7 (Cookies and Tracking) for full details.

1.8 Device, Log, and Technical Data

We automatically collect:

• IP address and approximate location (country/region level)
• Browser, operating system, device type, and app version
• Session identifiers and timestamps
• Pages and features accessed, referring URLs
• Crash reports and error logs

1.9 Communications Data

We retain records of emails you send to our support team and feedback submitted through the Services.

2. How We Use Your Information

• Provide the Services: account access, AI conversations, learning tools, video chat, subscriptions
• Personalize learning: use profile, interests, and goals to tailor AI conversations and content
• Track progress: vocabulary, proficiency estimates, completed activities
• Process payments: Stripe billing and subscription management
• Security and fraud prevention: abuse detection, account protection, payment fraud
• Product improvement: aggregate metrics, debugging, feature optimization
• AI model improvement: anonymized, de-identified learning data (not conversation content) -- see Section 4
• Advertising: AdSense on web, AdMob on mobile, subject to your consent and settings
• Communications: transactional, service, and (with consent) promotional emails
• Compliance: legal obligations, tax/accounting, policy enforcement

3. Legal Basis for Processing (EU/EEA Users (GDPR))

If you are located in the European Economic Area, we process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)): to provide the Services you signed up for
• Legitimate interests (Art. 6(1)(f)): to improve the Services, ensure security, and send service-related communications
• Consent (Art. 6(1)(a)): for marketing communications, personalization data, AI training, and optional features
• Legal obligation (Art. 6(1)(c)): where required to comply with applicable law

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

4. AI Processing, Speech Services, and Data Training

Large Language Models

AcquiLingua’s conversational features are powered by OpenAI’s models (such as ChatGPT) and may use other LLM providers. When you engage in AI conversation, your input is transmitted to OpenAI or another LLM provider to generate a response.

Third-Party LLM Data Retention

Third-party AI providers such as OpenAI process your inputs under their own Terms of Service and Privacy Policies. While OpenAI’s API guidance states that API data is not used to train models by default unless the customer opts in, their policies may still permit retention for safety, abuse prevention, or other purposes. AcquiLingua does not control this. Review openai.com/policies for current terms.

Speech-to-Text and Text-to-Speech (STT/TTS)

Voice features are powered by Deepgram and/or other third-party speech processing providers. When you use voice input, your audio is transmitted to these providers for real-time transcription. AcquiLingua does not store raw audio. See deepgram.com/privacy for Deepgram’s data practices.

Third-Party AI Provider Summary

• OpenAI (openai.com): LLM conversational AI processing
• Deepgram (deepgram.com): Speech-to-text and text-to-speech
• AWS (aws.amazon.com): Hosting, APIs, storage, database, and Cognito authentication

We may add or change AI providers over time. Material changes will be reflected in an updated Privacy Policy.

AI Training Reservation

We reserve the right to use anonymized and de-identified learning interaction data, including vocabulary patterns, session metrics, learning pace, and error analysis data, but expressly excluding the content of your conversations, to train, fine-tune, and improve our AI models and Services.

For users under 18, we will not use data for AI training without the applicable parental consent, in compliance with COPPA 2025 requirements.

You may opt out of having your anonymized data used for AI model training at any time by contacting support@acquilingua.com or through your account privacy settings.

No Training on Conversation Content

We do not use the content of your AI conversations to train AI models without your explicit consent.

5. Authentication Services: AWS Cognito

We use Amazon Web Services Cognito for user authentication, login, and account security. AWS Cognito processes your email address and authentication credentials (in hashed form) to manage your identity. AWS’s data handling practices are governed by the AWS Privacy Notice at aws.amazon.com/privacy.

6. Analytics: Google Analytics

We use Google Analytics to understand how users interact with the web version of our Services. Google Analytics collects usage data including pages visited, session duration, general location, and device information using cookies and similar tracking technologies.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout, or by adjusting your browser’s cookie settings.

7. Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device when you visit a website. We also use related technologies such as local storage, session storage, pixel tags, and mobile advertising identifiers. Together these are referred to as “tracking technologies” in this section.

Types of Tracking Technologies We Use

Session and Authentication Cookies

Used to keep you signed in, maintain your session state, and authenticate your identity. These are required for the platform to function.

Preference Cookies

Used to remember your settings and preferences, including language preferences, display settings, and consent choices.

Analytics Cookies (Google Analytics)

Used to collect information about how you interact with our website. This data is aggregated and used to improve our platform. Google Analytics sets cookies including _ga and _gid.

Advertising Cookies (Google AdSense / AdMob)

We use Google AdSense on our website and Google AdMob in our mobile applications to display advertisements. Google and its partners use cookies, device advertising identifiers (such as IDFA and GAID), and similar tracking technologies to serve ads and measure their performance.

Google’s use of advertising cookies enables Google and its partners to serve ads to you based on your visits to our website and/or other websites on the Internet. You can opt out of personalized advertising by visiting adssettings.google.com, or opt out of certain third-party vendor uses of cookies by visiting optout.aboutads.info or youronlinechoices.com.

Mobile Advertising Identifiers

On mobile devices, Google AdMob and similar ad networks may use your device’s advertising identifier (IDFA on iOS, GAID on Android) to serve and measure ads. You can reset or limit use of your advertising identifier in your device’s privacy settings.

Consent Management

Where required by applicable law (including for users in the European Economic Area, United Kingdom, and Switzerland), we display a consent management prompt before placing non-essential cookies or serving personalized advertisements. You may update your consent preferences at any time through the cookie settings link in our website footer.

Managing Cookies

You can manage and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of certain features of the Services.

8. Advertising: Google AdSense and AdMob

AcquiLingua displays advertisements on our web platform through Google AdSense and within our native mobile applications through Google AdMob.

Personalized vs. Non-Personalized Ads

Where you have provided consent, Google may serve personalized ads based on your browsing history and interests. Where consent has not been provided, non-personalized ads may be served instead.

Age Restrictions

We do not serve behavioral or interest-based advertising to users who are under 18 years of age.

EEA/UK/Switzerland Users

If you are located in the European Economic Area, United Kingdom, or Switzerland, we present a consent management prompt before enabling personalized advertising.

Ad Choices

You can manage your Google ad personalization preferences at adssettings.google.com. You can opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info. Opting out does not remove ads; it means ads shown may be less relevant.

9. Third-Party Service Providers

We use the following categories of third-party service providers to operate, secure, improve, and monetize the Services:

• AWS (aws.amazon.com): Hosting, authentication (Cognito), APIs, storage, and database infrastructure
• Stripe (stripe.com): Payment processing, subscription management, billing, and fraud prevention
• OpenAI (openai.com): Large language model AI conversation processing
• Deepgram (deepgram.com): Speech-to-text and text-to-speech audio processing
• Google Analytics, AdSense, AdMob (google.com): Analytics, web advertising, and mobile app advertising
• YouTube (youtube.com): Embedded or linked educational video content
• Facebook/Meta (facebook.com): Social login options and social sharing
• X/Twitter (x.com): Social sharing
• Legal/Compliance recipients: courts, law enforcement, tax authorities, and regulatory bodies where required by law
• Business transfer recipients: in the event of a merger, acquisition, or asset sale

AcquiLingua is not responsible for the data practices of these third-party services.

10. Email Communications

• Transactional: account verification, password reset, subscription receipts, and security alerts (required; cannot be unsubscribed)
• Service notifications: product updates, feature announcements, policy changes
• Promotional: special offers and newsletters (opt-out available at any time via unsubscribe link)

We do not sell, rent, trade, or otherwise share your email address with third parties for their own marketing purposes.

11. Children’s Privacy

The Services are not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will take prompt steps to delete it and deactivate the account.

If you are a parent or guardian and believe a person under 18 has registered, contact us immediately at support@acquilingua.com. We will process deletion within 30 days.

12. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

• Service Providers: Trusted vendors (AWS, Stripe, Google, OpenAI, Deepgram) who assist in operating the Services, subject to data processing agreements.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, data may transfer to the acquiring entity with advance notice.
• Legal Requirements: Where required by applicable law, subpoena, court order, or to protect rights, property, or safety.
• Aggregated/De-identified Data: Non-identifiable data for research, analytics, or marketing.
• With Your Consent: For other purposes with your prior consent.

13. Data Retention and Deletion

• Account data: retained while active; purged within 90 days of account deletion
• Personalization data: retained until you delete it or close your account
• Learning metrics: retained in anonymized/aggregated form; may be retained indefinitely for research
• Payment records: retained as required by financial and tax regulations (typically 7 years)
• Video session metadata: retained for 12 months following the session
• Children’s data: deleted as soon as no longer needed for its original purpose

To request data deletion, contact support@acquilingua.com. Self-service account deletion is not currently available in account settings. Requests are processed within 30 days, subject to legal retention requirements.

14. Your Rights and Choices

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Portability: Request a machine-readable copy of your personal data
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Where processing is based on consent, withdraw at any time
• AI Training Opt-Out: Opt out of having your anonymized data used for AI model training
• Opt out of marketing: Unsubscribe from promotional emails at any time
• Manage cookies/consent: Update preferences via cookie settings link in our website footer
• Opt out of personalized ads: Via adssettings.google.com or device advertising settings

Contact support@acquilingua.com or use your account settings to exercise these rights. We will respond within 30 days and may verify your identity.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the CCPA as amended by the CPRA provides you with specific rights:

• Right to Know: Disclosure of categories of personal information we collect and how we use and share it
• Right to Delete: Request deletion of your personal information, subject to exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. Manage ad personalization via Google’s settings.
• Right to Limit Sensitive Information: Direct us to limit use of sensitive personal information to service provision
• Right to Non-Discrimination: We will not discriminate for exercising CCPA rights

Submit requests to support@acquilingua.com or write to: NextThing LLC, a Delaware Limited Liability Company d/b/a AcquiLingua, 8 The Green Ste B, Dover, DE 19901. We respond within 45 days, extendable by 45 additional days where necessary.

16. European Privacy Rights (GDPR)

If you are located in the European Economic Area, Switzerland, or the United Kingdom, GDPR or equivalent legislation provides you with the rights described in Section 14, plus:

• Data Controller: NextThing LLC, a Delaware Limited Liability Company d/b/a AcquiLingua is the data controller for personal data processed through the Services.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your national data protection supervisory authority.
• EEA Consent: We present a consent management prompt to EEA/UK/Switzerland users before enabling personalized advertising cookies, in compliance with applicable requirements.

17. Canadian Privacy Rights (PIPEDA)

If you are located in Canada, we process your personal information in compliance with PIPEDA and applicable provincial privacy laws. You have the right to access, correct, and in certain circumstances withdraw consent to processing. Contact support@acquilingua.com to exercise these rights.

18. Data Security

We implement commercially reasonable technical and organizational security measures including encrypted data transmission (TLS/HTTPS), hashed password storage via AWS Cognito, access controls, and regular security reviews. No internet transmission or electronic storage is completely secure.

In the event of a data breach affecting your rights or freedoms, we will notify you and applicable regulators as required by law. If you believe your account has been compromised, contact support@acquilingua.com immediately.

19. International Data Transfers

AcquiLingua is operated in the United States. Your information will be transferred to, stored, and processed in the United States and in other countries where our vendors operate, where data protection laws may differ from those in your home country.

For transfers from the EEA, UK, or Switzerland to the United States, we rely on lawful transfer mechanisms including Standard Contractual Clauses (SCCs) approved by the European Commission.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email and/or by posting a prominent notice within the Services at least 30 days before changes take effect. We will also update the “Last Updated” date. Continued use after the effective date constitutes acceptance.

21. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Email: support@acquilingua.com (subject: Privacy Request)

Website: acquilingua.com/privacy

Mailing Address: NextThing LLC, a Delaware Limited Liability Company d/b/a AcquiLingua, 8 The Green Ste B, Dover, DE 19901

See also the Terms of Use.