Privacy Policy
LangLearn separates local study data, a user-controlled personal provider connection, and an optional registered managed service. This policy explains each boundary.
1. Who operates LangLearn
LangLearn is operated by the LangLearn developer. Privacy and support questions may be sent to lzbgt@icloud.com.
2. Data kept on your iPhone
Imported documents, generated articles, extracted or OCR text, translations, reading position, selections, downloaded or generated audio, article-generation configurations, API preferences, and saved Assistant conversation sessions are stored on your device. Personal provider keys and LangLearn session credentials are stored in iOS Keychain. LangLearn does not upload imported documents to its managed service.
You control this data by deleting individual documents or conversations, clearing cached audio, removing a personal API key, signing out, or deleting the app.
3. Personal Aliyun mode
If you enter your own Aliyun Model Studio API key, the iPhone connects directly to the fixed Aliyun service endpoint. Reader cloud speech sends only the text you ask to play. Assistant sessions send microphone audio, role instructions, the selected language pair, and bounded conversation context while the session is visibly active. These requests do not pass through LangLearn Cloud, and LangLearn does not receive your personal key.
The fixed workspace is in China (Beijing). Alibaba Cloud's current Model Studio notice says it stores data produced by model and application calls as required by law. Its service agreement says conversation data is retained only for the shortest period necessary to provide the service and is not used for model training without authorization, but it does not publish a fixed numeric retention period for realtime inference. This provider retention applies to Personal Aliyun even though LangLearn never receives the request.
4. Optional LangLearn Cloud account
The Reader and Personal Aliyun mode do not require an account. If you choose LangLearn Cloud, the service processes:
- an Apple account subject, internal account ID, encrypted Apple authorization material, and hashed session tokens for Sign in with Apple;
- App Attest installation identifiers, public keys, receipts, counters, app version, and validation status for fraud prevention;
- credit grants, purchases, refunds, disputes, balance, reservations, metered duration, model/capability identifiers, and provider cost records;
- StoreKit or PayPal transaction identifiers, product, amount, currency, status, and timing, but not card or bank-account numbers; and
- your chosen language pair, Assistant role, voice, and bounded context needed to operate a managed conversation; and
- when you request an article, its category, topic, learning level, target length, custom prompt preferences, and generated result.
5. Audio, transcripts, and model processing
During an active managed Assistant session, LangLearn Cloud relays microphone audio, transcripts, role instructions, and bounded conversation context to Alibaba Cloud Model Studio in China (Beijing). LangLearn's own managed service keeps realtime audio and transcript content in memory only and discards it when the request or session ends. It stores billing and connection metadata, not conversation content.
Alibaba Cloud is a separate processor. Its current China-region notice says Model Studio stores model-call data as required by law, and its service agreement promises only the shortest service-necessary retention rather than a fixed number of days. It also says conversation data is not used to train its models without authorization. LangLearn cannot promise immediate deletion of copies that Alibaba Cloud must retain under law or in protected backups.
Conversation mode can capture another person's voice. Start listening only after every person who may speak has agreed to cloud audio processing. Do not use it for confidential, regulated, emergency, medical, legal, or financial conversations.
Final translation, memory-compression, article-generation, and managed-speech requests do not persist source prompts, selected text, topics, custom preferences, or turns in plaintext. A successful generated text or speech-audio result may remain encrypted for up to 24 hours solely to make network retries idempotent, then expires automatically. Speech billing retains only a request hash, model, voice, weighted character count, provider request ID, exact cost, and ledger record. Complete documents, generated articles, reusable article configurations, and bilingual conversation history remain on your iPhone.
6. Payments
Apple processes in-app purchases. PayPal processes purchases initiated independently on the LangLearn web portal. LangLearn records the minimum transaction and ledger information needed to deliver credit, reconcile refunds or disputes, prevent duplicate grants, and meet accounting obligations. LangLearn does not receive or store full payment-card details.
7. Optional information sent to Apple after a refund request
Only if you separately opt in inside the app, LangLearn may respond to an Apple refund-review request with whether credit was delivered, the percentage consumed, and whether the account received a free trial. This never includes audio, transcripts, prompts, translations, or Assistant messages. The choice is not required to buy or use credit and can be withdrawn in the app.
8. Service providers and transfers
LangLearn uses Apple for identity and in-app purchases, Tongyi Yunqi (Hangzhou) Information Technology Co., Ltd. / Alibaba Cloud Model Studio for optional cloud language processing, and PayPal for independent web checkout. The managed service and Model Studio workspace are hosted in mainland China. Cloud audio, prompts, context, and output are therefore processed in mainland China. Apple and PayPal may process transaction and identity data in locations and for retention periods described by their own policies. Each provider processes data under its own terms and privacy commitments; review those terms before enabling the corresponding optional feature.
9. Security and operational data
LangLearn uses TLS, short-lived access tokens, rotating refresh tokens, App Attest, encrypted provider credentials, encrypted retry results, least-privilege containers, and an append-only credit ledger. Request logs contain a random request ID, method, path, response status, and duration; they exclude account identifiers, IP addresses, credentials, audio, and messages. A network address is used transiently in memory for abuse rate limiting and is discarded on service restart.
10. Retention and deletion
- Local content remains until you delete it or remove the app.
- LangLearn's managed server discards realtime content when processing ends. Alibaba Cloud may retain model-call data for legal requirements and service operation under its own terms; no fixed realtime-inference period is published.
- Encrypted text-operation retry results expire within 24 hours.
- Account and billing records remain while the account is active and as needed to deliver credit, prevent fraud, resolve disputes, or satisfy legal accounting duties.
- Deleting an account immediately disables access, revokes sessions, ends active conversations, erases authentication material after Apple revocation completes, removes retry content, and pseudonymizes financial records that must be retained. A keyed, non-reversible tombstone is retained to prevent repeated free-trial abuse.
11. Your choices
You may use the local Reader without an account, select Personal Aliyun instead of LangLearn Cloud, deny microphone access, remove your personal key, stop any cloud session, withdraw Apple refund-review sharing, sign out, delete local content, or initiate full managed-account deletion inside the app. See Privacy Choices for exact steps.
Provider references: Alibaba Cloud Model Studio privacy notice and Alibaba Cloud Model Studio service agreement.
12. No advertising or tracking
LangLearn does not sell personal data, show advertising, use advertising identifiers, or track activity across other companies' apps or websites.
13. Changes
Material changes will be posted here with a new effective date. Where required, the app will request new consent before a changed data use begins.