Overview
Leelo is a Spanish language learning app built around comprehensible input. This Privacy Policy explains what personal data we collect when you use Leelo, why we collect it, how we use it, and your rights in relation to it.
Leelo is operated as a sole trader business registered in the United Kingdom. UK GDPR and the Data Protection Act 2018 apply to all data we process.
Short version: We collect only what we need to run the app. We do not sell your data. We do not show ads. Articles are adapted using AI. A disclosure is shown during onboarding.
Data we collect
Account data
When you create a Leelo account, we collect your email address. This is used to authenticate you via a one-time passcode (OTP) and to contact you about your account if necessary.
Reading activity
We store records of articles you have read, including the article ID, reading level, word count, and the date completed. This powers your words read tracker, streak tracking, and reading history.
Reading preferences
Your selected reading level is stored on your account so it persists between sessions.
Vocabulary
Words you save to your vocabulary list are stored on your account.
External reading logs
If you use the external words calculator, we store the source type, source name (optional), estimated word count, and date logged. This information is stored on your account and is never shared.
Subscription status
We store your subscription tier (Free, Standard, or Premium) to determine which features are accessible to you.
Device identifiers
We collect basic device identifiers for push notification delivery (via Expo Notifications) and for analytics purposes.
Analytics
We use PostHog (EU region) to collect anonymised usage data. This includes events such as articles opened, words looked up, and articles completed. No personally identifiable information is included in analytics events.
How we use your data
| Purpose | Data used |
|---|---|
| Authenticating your account | Email address |
| Delivering the reading experience | Reading level, reading history |
| Tracking reading progress | Words read, streak, roadmap level |
| Sending daily article reminders | Device identifier, notification preference |
| Processing subscription payments | Subscription status (via Apple/Google) |
| Improving the app | Anonymised analytics events |
| Responding to support requests | Email address |
We do not use your data to train AI models. Article adaptation is processed via the Anthropic API. Only article content is sent, never user data.
Legal basis for processing
| Data type | Legal basis | Provider |
|---|---|---|
| Email address | Contract (necessary to provide the service) | Supabase |
| Reading activity | Contract (core feature of the app) | Supabase |
| Subscription status | Contract (necessary for paid features) | Apple / Google |
| Push notifications | Consent (you opt in during onboarding) | Expo Notifications |
| Analytics events | Legitimate interests (improving the product) | PostHog |
| Transactional email (OTP) | Contract (necessary for authentication) | Resend |
Data retention
We retain your personal data for as long as your account is active. If your account is inactive for 24 months, we will review whether retention is still necessary and may contact you before deleting your data.
If you request account deletion, we will delete your personal data within 30 days. Some data may be retained for a limited additional period where required by law (for example, transaction records for tax purposes).
Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Access: you can request a copy of the personal data we hold about you
- Correction: you can ask us to correct inaccurate data
- Deletion: you can ask us to delete your personal data
- Restriction: you can ask us to restrict processing of your data in certain circumstances
- Portability: you can request your data in a machine-readable format
- Objection: you can object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, contact us at hello@leelolanguages.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
Children
Leelo is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account and associated data.
Users between 13 and 17 may use Leelo. We encourage parents and guardians to monitor the digital activities of minors in their care.
International transfers
Your data is stored in the EU by default (Supabase EU region, PostHog EU region). Some data may be processed in the United States by Anthropic (for article adaptation) and by Apple and Google (for subscription billing). These transfers take place under appropriate safeguards in accordance with UK GDPR, including standard contractual clauses where applicable.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. The date at the top of this page reflects when the policy was last updated.
Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: hello@leelolanguages.com
Subject line: Privacy enquiry
We are based in the United Kingdom. UK GDPR is our applicable data protection law.