Privacy Policy

GoraLingo is an online Montenegrin language-learning service. For privacy requests, use the contact page and include the email address connected to your account or lead magnet request.

• Account data: email address, authentication identifiers, preferred language, and subscription status.
• Learning data: lesson progress, XP, completed lessons, review items, scenario simulator attempts, and similar course activity.
• Lead and email data: email address, lead magnet source, referral code, email delivery status, and unsubscribe events.
• Payment data: plan selected, payment status, order identifiers, and limited transaction metadata from WayForPay. We do not store full card numbers.
• Admin content data: phrase images, audio files, and related content review metadata uploaded through the admin area.
• Technical data: locale preference, session cookies, browser/device information, analytics events, and security logs.

• To create accounts, keep users signed in, and sync progress across devices.
• To deliver the phrase kit, course emails, product updates, and support replies.
• To unlock paid access, prevent duplicate purchases, and reconcile payment records.
• To improve lessons, translations, exercises, audio, images, and user experience.
• To protect the service from abuse, fraud, unauthorized admin access, and technical failures.

We use Supabase for authentication, database, and storage; Resend for email delivery; Vercel for hosting; and WayForPay for payment processing. These providers process data only as needed to provide their services to GoraLingo.

When you request a lead magnet or join a course flow, we may email you the requested material, onboarding messages, product updates, and practical Montenegrin learning tips. You can unsubscribe from marketing emails at any time.

We keep account, learning, lead, and payment records for as long as needed to provide the service, comply with legal obligations, prevent fraud, resolve disputes, and maintain accurate business records. You may request deletion of personal data where applicable.

• You can request access, correction, export, or deletion of your personal data.
• You can unsubscribe from marketing emails.
• You can clear browser storage and cookies, though some features may stop working until you sign in again.

We use reasonable technical and organizational safeguards, including authenticated admin access, encrypted provider storage where available, and limited access to production secrets. No internet service can be guaranteed to be completely secure.

GoraLingo is intended for adults and older learners who can manage an account and payment. We do not knowingly collect personal data from children without appropriate consent.

We may update this policy when the product, providers, or legal requirements change. The updated date will show when the latest version took effect.