Privacy Policy for LingoTests

Last updated:

This Privacy Policy explains how the LingoTests website and related services (together, the “Service”) handle personal data. LingoTests is owned and operated by Botmasters, s.r.o., a company registered in the Czech Republic (“Botmasters”, “we”, “us”, or “our”). We aim to collect and process only the information needed to provide and improve the Service.

Data controller: Botmasters, s.r.o.
Registered in the Czech Republic
Website: https://lingotests.com
Email: [email protected]

This policy applies to visitors, teachers, students, and other users of the Service. It does not apply to third-party websites or services that have their own privacy policies.

1. Information we collect

Account and profile information

When you create or use an account, we may process your name, email address, account identifier, role, authentication status, newsletter preference, and subscription status. Password authentication is handled by Supabase; we do not store your readable password.

If you choose Google Sign-In or Facebook Login, the provider and Supabase may send us a unique account identifier and the basic profile information you authorize, such as your name, email address, or profile image. LingoTests does not offer Sign in with Apple.

Teacher, student, and service content

We process content and records that users intentionally create or submit, including:

  • exercises, instructions, prompts, answers, tags, and other teaching materials;
  • student names and email addresses supplied by a teacher or student;
  • invitations, assignments, completion status, submitted answers, and results; and
  • communications sent through our contact form or to our support email.

Payments and subscriptions

If you purchase a subscription, Stripe processes the payment. We may receive and store a Stripe customer identifier, subscription status, billing period, and payment-related status. We do not receive or store your full payment-card number.

Technical and usage information

Our systems and hosting providers may process standard technical records such as IP address, browser and device information, timestamps, requested pages, referring page, and security or error logs. If you consent to optional analytics, Google Analytics also processes information about how you use the website. With separate Ads measurement consent, Google Ads processes advertising measurement data. Personalized advertising stays disabled. See our Cookie Policy for details and controls.

2. How and why we use information

We use personal data to:

  • create, authenticate, secure, and manage accounts;
  • provide exercises, assignments, student invitations, results, and other Service features;
  • process subscriptions and maintain billing records;
  • deliver transactional messages, respond to support requests, and send newsletters you requested;
  • generate exercises with artificial intelligence when you choose to use that feature;
  • measure and improve the Service when you consent to optional analytics;
  • prevent abuse, investigate security incidents, and enforce our Terms of Use; and
  • comply with legal, tax, accounting, and regulatory obligations.

3. Legal bases for processing

Where the GDPR or similar law applies, we process data as necessary to perform our contract with you (providing the Service), to comply with legal obligations, and for our legitimate interests in operating, securing, supporting, and improving LingoTests. We rely on consent for optional Google Analytics, Google Ads measurement, and marketing email; you may withdraw that consent at any time without affecting earlier lawful processing.

4. Artificial intelligence features

When you ask LingoTests to generate an exercise, the prompt and the exercise type are sent to OpenAI so it can return generated content. Do not include sensitive personal data in an AI prompt. Requests are sent with provider-side response storage disabled where the provider supports that setting. AI output may be inaccurate, and teachers should review it before using it with students.

5. When we share information

We do not sell personal data, share it with data brokers, or use it for third-party behavioral advertising. We disclose data only as needed to operate the Service, comply with law, protect rights and safety, or complete a business transaction. Service providers currently include:

  • Supabase for authentication and hosted database services;
  • Google LLC for Google Sign-In and consent-based Google Analytics and Google Ads measurement;
  • Meta Platforms, Inc. for Facebook Login;
  • Stripe for subscription and payment processing;
  • OpenAI for user-requested AI exercise generation;
  • our hosting, database, infrastructure, and email-delivery providers; and
  • professional advisers or authorities when disclosure is required or permitted by law.

These providers process data under their own terms and privacy commitments. Google and Facebook login are optional; you can instead use email and password.

6. Student data and children

LingoTests is designed primarily for teachers and their invited students, not for children to discover and register for independently. A teacher who provides student data must have an appropriate legal basis and any permission required by their school, organization, parent, or guardian. Teachers should provide only the minimum student data needed to use the Service.

If you believe a child’s data was provided without proper authorization, contact us and we will investigate and take appropriate steps, which may include deleting the data.

7. International transfers

Some providers may process data outside the Czech Republic or European Economic Area. Where required, we use recognized safeguards such as adequacy decisions or standard contractual clauses. You may contact us for more information about safeguards relevant to your data.

8. Retention

We keep account data and user-created content while the account is active or as needed to provide the Service. We retain records longer where reasonably necessary for security, dispute resolution, backups, or legal, tax, and accounting duties. When data is no longer needed, we delete or anonymize it. Retention by third-party providers is also governed by their policies and our agreements with them.

9. Your privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, or a portable copy of your personal data; to object to certain processing; and to withdraw consent. You may also lodge a complaint with your local data-protection authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection .

To exercise a right, email [email protected]. We may need to verify your identity. If your account is managed through a school or teacher, you may also need to contact that organization.

10. Security

We use reasonable technical and organizational measures intended to protect personal data. No internet service can guarantee absolute security, so please use a strong password, protect access to your account, and contact us if you suspect unauthorized use.

11. Changes to this policy

We may update this policy as the Service or legal requirements change. The current version will be published on this page with a revised “Last updated” date. If a change is material, we will provide additional notice where appropriate.

12. Contact

Questions or privacy requests can be sent to [email protected] or through our contact page.