Privacy Policy

What we collect

Account data. When you register, we store your email address and a hashed version of your password. We never store your password in plain text.

Learner profile. During onboarding you provide your native language, English level, and learning goals. We store this to personalise your explanations.

Conversations. Every piece of text, image, or audio you submit and every explanation the tutor generates is stored in our database. This powers your learning history, progress tracking, and personalisation of future responses.

Usage data. We track how many explanations you use per month to apply the correct usage limits for your plan.

Billing data. If you subscribe to a paid plan, Stripe processes and stores your payment details. We store only your Stripe customer ID and subscription status — no card numbers or billing addresses.

Session data. A server-side session cookie keeps you logged in. It contains only a session identifier — no personal data.

Referral data. If you sign up through a referral link, we record the referrer's ID to credit them if you upgrade.

How we use your data

• To provide the tutoring service and personalise your explanations to your language and level
• To display your learning history, progress, and areas for improvement
• To enforce free plan usage limits and manage your subscription
• To process payments and manage billing through Stripe
• To send transactional emails (password resets, subscription confirmations, payment notices)
• To contact you if there is a security issue or important change to the service

Third parties

Anthropic (Claude API). When you submit text, images, or audio, this content is sent to Anthropic's API to generate the explanation. Your input and our system configuration are processed on Anthropic's servers. Anthropic's privacy policy governs this processing. Where available, we have enabled zero data retention on our API account, meaning Anthropic does not store your inputs after the API call completes.

OpenAI (Whisper API). Voice recordings submitted for speech analysis or pronunciation feedback are transcribed using OpenAI's Whisper API. Audio data is sent to OpenAI's servers for this purpose. OpenAI's privacy policy applies.

Stripe. Paid subscriptions are processed by Stripe. When you subscribe, you interact directly with Stripe's hosted checkout. Stripe handles and stores your payment details — we never see your full card number. Stripe's privacy policy governs how they process billing data.

Google Analytics & Google Ads. We use Google Analytics (GA4) across all pages of the site to understand visitor behaviour, and Google Ads conversion tracking to measure sign-up performance. Google's privacy policy applies.

Krystal Hosting. Our servers are hosted by Krystal UK. Your data resides on servers in the United Kingdom.

No other third parties receive your personal data.

Storage and security

Your data is stored in a MySQL database on servers located in the United Kingdom. Passwords are hashed using bcrypt. All traffic is transmitted over HTTPS (TLS). We do not store payment card details.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. No system is completely secure — if you believe your account has been compromised, contact us immediately.

Your rights

Under UK and EU data protection law, you have the right to:

• Access your data — you can view your profile and conversation history in the app at any time
• Delete your history — remove all saved conversations from the Settings page
• Delete your account — permanently remove all your data from the Settings page
• Correct your data — update your profile and preferences in Settings at any time
• Data portability — contact us to request an export of your data in a machine-readable format
• Object to processing — contact us if you wish to object to any specific use of your data

To exercise any right not covered by the app's self-service options, contact us at hello@languagelearnershub.com. We will respond within 30 days.

Data retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data is permanently deleted within 24 hours. Anonymised and aggregated usage statistics (with no personal identifiers) may be retained indefinitely.

Conversation history can be deleted at any time from the Settings page without deleting your account.

Cookies

Session cookie. We use a single httpOnly session cookie to keep you logged in. It contains only a random session identifier — no personal data. It is deleted when you log out or your session expires.

Google Analytics & Google Ads. We use Google Analytics (GA4) and Google Ads conversion tracking across all pages of the site. These set cookies to measure traffic, usage patterns, and sign-up conversions. No personally identifiable information is shared with Google. You can opt out of Google Analytics using Google's opt-out tool. Ad storage and personalisation cookies are denied by default under Google's Consent Mode until you consent.

Children

LLH Tutor is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, contact us and we will delete it immediately.

Changes to this policy

We may update this policy from time to time. For material changes that affect your rights, we will notify you by email before they take effect. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the service after a change constitutes acceptance.

Contact

For any privacy-related questions or requests:

Language Learners Hub
hello@languagelearnershub.com