Privacy Policy

Last updated: 26 July 2026

This policy explains what Langio collects, why, who it is shared with, and the rights you have. We keep it short and concrete. It is written in good faith and is not legal advice.

Who is responsible for your data

The data controller for the personal data described here is Aleksandr Bukhtoiarov, operating Langio, Slovakia (European Union). For any data question, contact privacy@langio.me.

What we collect

Account details — your username and email address.
Learning content — the texts and words you add, the cards we create for you, and your study progress.
Basic technical data — standard server logs (request times, error information) needed to run and secure the service.

Why we use it, and our legal basis

To provide the service — build your lessons, track progress, sign you in. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
To send account emails — such as email-address confirmation. Legal basis: performance of the contract.
To keep the service secure and working — logging, abuse prevention. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).

Sharing with third parties (processors)

To generate lessons, translations, grammar breakdowns, and suggestions, the text and words you submit are sent to and processed by third parties on our behalf:

AI processing — we currently use OpenRouter, which routes requests to the underlying language-model providers it works with. The content you submit for a lesson is sent to them to produce the result.
Email delivery — account emails are sent from our own mail server; delivering an email necessarily discloses your email address to the receiving mail provider (for example your own email host).

These providers process the data only to perform their service for us. We do not sell your personal data and do not share it for advertising.

International transfers

Some of these providers (in particular AI-model providers) may process data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on an appropriate safeguard permitted by the GDPR (such as the European Commission's Standard Contractual Clauses) or an adequacy decision. Submitting content for AI processing may involve such a transfer.

Your rights

Under the GDPR you can, in respect of your personal data:

access it, and get a copy;
correct it if it's wrong, or complete it;
delete it ("right to be forgotten");
restrict or object to certain processing;
receive it in a portable format;
withdraw any consent you gave, without affecting past processing.

To exercise any of these, email privacy@langio.me. You also have the right to lodge a complaint with your supervisory authority — in Slovakia, the Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk).

Retention and deletion

We keep your data while your account is active. When your account is deleted, your personal data and learning content are removed. Content already processed by a third-party provider is subject to that provider's own retention policy.

Cookies

We use a single session cookie so you stay signed in. We do not use advertising or tracking cookies, so no cookie consent banner is required.

Children

Langio is not intended for children under 16. If you are under 16, please do not create an account.

Changes

We may update this policy as the service evolves; the "last updated" date reflects the current version.