Penglo — Privacy Policy
Penglo respects your privacy. This policy explains what we collect, how we use it, and your choices. Questions: [email protected].
Who we are & scope
This policy covers penglo.com, penglo.app, their subdomains, and our mobile apps. For privacy matters: [email protected]. The data controller is Penglo.
What we collect
- Account & authentication. Email and sign-in identifiers; profile details you choose to share.
- Learning data. Progress (levels, reviews), content you interact with, answers/feedback, and your user-generated items (e.g., notes, custom cards). Your basic learning data may be shared with other learners as part of features such as the weekly leaderboard.
- Device & usage. Device type, OS, language, app version, general location (from IP) used for feature availability and analytics, timestamps, pages/screens, diagnostics (crash/performance).
- Payments. When you buy through an app store, that store processes your payment; we receive limited purchase metadata to grant entitlements and prevent fraud. For web purchases, a payment processor handles your card; we don’t store full card numbers.
- Support & communications. Messages you send us and related contact info; if you opt in, your name and email for product updates or marketing messages (unsubscribe anytime).
How we use information
Operate the Service (auth, sync, progress), personalize learning (scheduling, difficulty), provide social learning features such as the weekly leaderboard, improve reliability/content (analytics/diagnostics), communicate about account/changes/security, and, if you opt in, send product updates or marketing communications (opt out anytime). Device and usage data—including approximate location—also help us monitor performance, plan new features, prevent fraud/abuse, comply with law, and enforce our terms.
International transfers
Your data may be processed outside your country. Where required, we use appropriate safeguards (e.g., standard contractual clauses or equivalent).
Retention
- Account/learning data: kept while your account is active; deleted or anonymized within a reasonable period after deletion, subject to legal obligations.
- Analytics/telemetry: generally retained in aggregate up to 24 months.
- Logs/security: typically 30–180 days unless needed for investigations.
- Payment/receipts: kept as required by tax/accounting laws.
Your rights & choices
Depending on your location, you may have rights to access, correct, delete, restrict/object, portability, and withdraw consent (where applicable).
- In-app deletion/export: use the app settings; if you can’t access the app, email [email protected].
- You can control whether your Social profile is shown to other learners from Account settings.
- We may need to verify your identity. You can complain to your local data protection authority.
Cookies & tracking
We use cookies and similar tech for sign-in, preferences, and analytics. You can control cookies in your browser. Where required, non-essential analytics cookies run only with your consent.
Notifications (iOS)
If you opt in to push notifications, the platform provides a device token so we can deliver them. You can turn notifications off at any time in OS settings. We don’t send promotional pushes unless you opt in.
Security
We use technical and organizational measures designed to protect personal data (e.g., encryption in transit, access controls, least-privilege). If a breach affects your data, we’ll notify you as required by law.
Children
Not directed to children under 13 (or the age of digital consent in your country). If you believe a child provided personal data, contact us to request deletion.
Changes
We may update this policy; we’ll post the new version with the date above and, if changes are material, provide additional notice (e.g., in-app/email).
Contact
Contact: [email protected]
Website: https://penglo.com