Privacy Policy

Lyngo ("we", "us", or "our") is a brand operated by Xtent Solutions, a sole proprietorship based in Ontario, Canada, that operates the Lyngo French language assessment app (the "App"). We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

This Privacy Policy describes what personal information we collect, why we collect it, how we use and protect it, and what choices you have. Please read it carefully before using the App.

1. Who We Are

Lyngo is a brand of Xtent Solutions, a sole proprietorship based in Ontario, Canada. Our App provides AI-powered French language oral proficiency assessments.

• Website: https://www.lyngo.ca
• Contact email: contact@lyngo.ca

2. Information We Collect

2.1 Account Information

When you register with an email address and password, we collect:

• First name and last name
• Email address
• Password (stored as a one-way hash — we cannot read your password)

When you register using Google Sign-In or Microsoft Sign-In ("social login"), we receive from those providers:

• Your name and email address
• A provider-specific user ID (used only to link your account)
• No passwords are stored when using social login

2.2 Onboarding Information

During initial setup, we ask questions to personalise your experience:

• Your primary language (mother tongue)
• Your current French proficiency level (self-reported)
• Your learning goal (e.g., work, school, travel)
• Whether you have completed the microphone test

2.3 Voice Recordings

The core function of Lyngo is oral language assessment. When you complete an assessment, we record your spoken responses through your device's microphone. Specifically:

• Audio files are captured during assessment questions you initiate
• Recordings are uploaded to our secure cloud storage (Microsoft Azure Blob Storage, Canada Central region)
• Recordings are then processed to transcribe and evaluate your spoken French (see Section 4)
• We do not access your microphone in the background or at any time other than when you are actively recording a response inside the App

2.4 Assessment and Learning Data

• Assessment scores and detailed results per question
• CEFR proficiency level assigned after each assessment
• Transcriptions of your spoken responses
• AI-generated feedback on grammar, vocabulary, fluency, and pronunciation
• Timestamps of assessments taken
• Number of assessments completed and credits consumed

2.5 Billing and Subscription Information

If you subscribe to a paid plan, we collect and store:

• Your subscription plan (e.g., weekly, monthly)
• Subscription start date and renewal date
• Number of assessment credits remaining
• A Stripe Customer ID and Stripe Subscription ID (references to records held by our payment processor)

Payment card details (card number, CVV, expiry) are entered directly into Stripe's secure forms and are never transmitted to or stored by Lyngo.

2.6 Technical Data

We do not integrate any third-party analytics SDKs (e.g., Firebase, Mixpanel, Amplitude). We collect only the minimal technical data needed to operate the service:

• App error logs (recorded in our own backend)
• Platform type (iOS, Android, web)

3. How We Collect Information

4. How We Use Your Information

We do not use your information for advertising, behavioural profiling, or sale to third parties.

5. Third-Party Services

We rely on the following sub-processors to deliver the App. Each processes only the data necessary for its function:

We do not use advertising networks, behavioural analytics platforms, or data brokers.

6. Microphone Access

Lyngo requires access to your device microphone exclusively for recording your spoken responses during assessments. We commit to the following:

• Microphone access is only activated when you press the record button inside an active assessment session
• We do not record audio in the background, when the app is closed, or at any other time
• You can revoke microphone permission at any time in your device settings, though this will prevent you from completing assessments

7. Data Storage and Security

Your data is stored on servers located in Canada (Azure Canada Central region) and, in the case of Supabase/PostgreSQL, on AWS infrastructure. We implement the following safeguards:

• Encryption in transit: All data is transmitted over HTTPS/TLS
• Encryption at rest: Data stored in Azure Blob Storage and our database is encrypted at rest using platform-managed keys
• Password hashing: User passwords are hashed using bcrypt and are never stored or transmitted in plain text
• Access controls: Access to production systems is restricted to authorised personnel only
• JWT authentication: API requests are authenticated with short-lived JSON Web Tokens

No security system is impenetrable. If you suspect unauthorised access to your account, please contact us immediately at contact@lyngo.ca.

8. Data Retention

9. Your Privacy Rights

Under PIPEDA and applicable Canadian privacy law, you have the following rights:

• Right to access: You may request a copy of the personal information we hold about you
• Right to correction: You may ask us to correct inaccurate or incomplete information
• Right to deletion: You may request deletion of your account and all associated personal data, including voice recordings
• Right to withdraw consent: Where we rely on your consent (e.g., microphone access), you may withdraw it at any time. This may limit your ability to use the App
• Right to lodge a complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca

To exercise any of these rights, email us at contact@lyngo.ca with the subject line "Privacy Request". We will respond within 30 days.

10. Children's Privacy

The App is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@lyngo.ca and we will delete it promptly.

11. Social Login (Google and Microsoft)

If you choose to sign in using Google or Microsoft, you will be redirected to that provider's authentication screen. We receive only your name and email address from the provider, subject to your consent on that provider's platform. We do not receive access to any other accounts, contacts, or data from those providers. Your use of Google or Microsoft sign-in is also governed by their respective privacy policies.

12. International Data Transfers

Some of our service providers (OpenAI, Stripe, Google, Microsoft) may process data outside Canada. Where this occurs, we rely on those providers' data processing agreements and standard contractual safeguards to ensure your data is protected to a standard consistent with PIPEDA.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an in-app notification or email. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

---

© 2026 Xtent Solutions. All rights reserved.