Data policy and privacy
Version and effective date: 2026-10-17.
Who operates this service
This policy describes data processed by the operator of LingoTailor. For the operator's contact mailbox and privacy requests, see the privacy & contact page.
Account and learning data
LingoTailor stores your profile, preferences, episodes and learning records to provide personalized podcasts. Sign-in uses an authentication session. Your unlisted personal feed can be accessed by anyone with its link, so keep that link private.
Account data can include your identity-provider identifier, name, email address, and profile image when supplied by your sign-in provider. Learning data includes language choices, topics, instructions you submit, generated scripts and audio, lesson activity, assessments, and progress. We use it to authenticate you, deliver and personalize learning features, apply plan limits, and maintain service security and reliability.
Agreements and optional marketing emails
We store the versions and time of your EULA acceptance and data-policy acknowledgment. We separately record your marketing choice, the email address to which an opt-in applies, the notice version, and changes to that choice. Marketing is off unless you expressly opt in. Sign-in, agreement acceptance, use of a free account, and analytics permission do not subscribe you.
If you opt in, LingoTailor may email product news, learning tips, and promotional offers to the email supplied by your sign-in provider. Withdraw permission in Email & privacy preferences without losing app access. A changed sign-in email needs a fresh opt-in; we do not transfer permission to a new address automatically. Any marketing campaign must include an unsubscribe route. Essential account or security communications are separate from marketing.
Acknowledging this policy records that you have read it; it does not constitute blanket consent to all processing. Optional marketing and browser analytics have independent choices.
ChatGPT connection and learning records
Connecting LingoTailor in ChatGPT uses browser sign-in and a separate permission screen. The connection can read your language profile, curriculum, learning progress, saved instructions and personal podcast library, including scripts and audio links. Tools may send the practice answers, corrections, grades, lesson checkpoints and podcast requests that you choose to share. The connection does not receive your entire ChatGPT conversation. Do not submit passwords, payment details, government identifiers or sensitive personal information in learning content.
We use these records to personalize language practice, schedule review, resume saved lessons and generate requested podcasts. Saving an interactive lesson checkpoint requires your permission. Podcast generation uses your existing account quota and publishes to your unlisted personal feed, not the public Spanish podcast catalog.
Service providers and recipients
Our cloud hosting and authentication providers process account and service data to operate LingoTailor. Requested content may be sent to configured AI and speech providers, including OpenAI or Azure OpenAI, Azure Speech and ElevenLabs, to generate scripts and audio. When you connect ChatGPT, requested tool results are shared with OpenAI through that connection and handled under its policies. Anyone who receives a personal feed or audio link may access that content. Public catalog publication is a separate editorial action.
Deployments can use Amazon Web Services and Microsoft Azure for hosting and authentication; identity providers can also include Google and Microsoft. Processing locations and international transfers depend on the configured deployment and providers. Ask the operator for the providers and regions used for your account.
Learning-data retention and your controls
Profiles, podcast scripts and audio, practice results, grades, saved preferences and lesson checkpoints do not have automatic expiry; they remain stored until removed by the service operator. You can cancel future podcast instructions through the connection and decline checkpoint saving. Disconnecting LingoTailor in ChatGPT stops future tool use from that connection; it does not erase records already saved in LingoTailor or ChatGPT. Use the support contact provided with the plugin listing to request access, correction, deletion or connection revocation; these requests require operator handling rather than a self-service deletion tool.
OAuth access tokens expire after one hour. Authorization codes expire after ten minutes; refresh tokens rotate on use and expire after 30 days without renewal. Expired grant records are eligible for storage cleanup; physical deletion may take longer. Operational hosting logs are separate from the optional website analytics described below.
Optional website analytics
When analytics is enabled, we ask for your permission before measuring page views or audio playback in this website. Declining does not change playback or other app features. Use the analytics preferences control to withdraw permission at any time. Global Privacy Control and Do Not Track disable browser collection even if you previously agreed.
Optional Google Analytics
If configured, Google Analytics measures consenting page visits alongside our first-party analytics. We ask again before including Google if you previously agreed only to first-party analytics. The same preferences control turns both off, and browser privacy signals override permission. Google's tag is not loaded before permission.
Google receives page categories rather than episode identifiers, titles, query strings, fragments or referrers. We do not send account identities, email addresses, transcripts or audio playback events to Google. Google also processes technical browser and connection information, including your IP address when receiving requests, and uses host-only session cookies. Advertising personalization and Google signals are disabled. See Google's privacy policy and how Google uses information from partner sites. Withdrawal deletes this site's Google Analytics cookies and stops future collection; it does not delete information already received by Google. Google's retention settings are separate from our first-party retention periods below.
Our first-party analytics measures page categories, playback time and the portions of audio played with permission. We use temporary random session identifiers and daily pseudonyms to count activity without providing individual activity histories in administration reports. We do not use advertising trackers or browser fingerprinting. Withdrawal clears pending browser events and identifiers; it does not remove counts already included in aggregate reports.
Audio delivery logs
Audio requests, including requests from podcast apps, may be measured separately by our hosting infrastructure. Restricted delivery logs can temporarily contain your IP address, user agent and requested audio path. These logs are used to estimate downloads, not to prove that you listened. Podcast apps cannot use the website analytics consent control and may also process activity under their own policies.
Retention and access
Raw analytics delivery logs and temporary analytics session and deduplication records are retained for up to seven days, subject to storage deletion processing. Aggregate reports are retained for 13 months. Reports are available only through restricted administration tools and do not display account identities, IP addresses or individual listening histories. Operational generation records are separate from optional browser measurement; we use them to understand generation reliability and timing.
Account requests and retention of choices
Request account access, correction, export, deletion, or other rights applicable in your jurisdiction through the operator's privacy contact. These requests require operator handling and may require verification of account ownership. Limited agreement and suppression records may need to be retained to demonstrate choices, honor opt-outs, or meet legal obligations. Backups and third-party copies can follow separate deletion schedules. Do not send passwords, sign-in tokens, or private feed links with a request.
Policy updates
The app requests acknowledgment when the required policy version changes. A policy update does not create marketing permission. Read the EULA for the terms governing personal account features.