Legal

Privacy Policy

Last updated: 5 August 2026

1. Who we are

This website and app are owned and operated by MB Pundzabas, a company registered in Lithuania, with its business address in Vilnius, Lithuania. We trade under the brand name LinguaLith. MB Pundzabas is the data controller for the personal data described in this privacy policy.

If you have any privacy questions, email us at info@lingualith.com.

2. What we collect

Account data: your name, email and password hash when you sign up.
Learning data: lessons completed, quiz scores, tutor and speaking-simulator conversations, pronunciation attempts.
Voice recordings: short audio clips you record in the speaking simulator, sent to our speech-to-text provider and then deleted.
Payment data: collected and processed by Stripe, our payment provider. We only store your plan status and subscription references, never your full card number.
Technical data: IP address, browser, device, cookies used to keep you signed in and to fix bugs.

3. Why we use it

To create your account, deliver lessons, personalise the AI tutor, book teachers, process payments, send service emails (e.g. password reset, receipts), prevent abuse, and improve the product. We do not sell your personal data to anyone.

4. Legal basis (GDPR)

We process your data to perform our contract with you (delivering the service you signed up for), to comply with legal obligations (tax, accounting), for our legitimate interests (security, product improvement), and with your consent where required (marketing emails, optional analytics).

5. Who we share it with

Stripe (payment processing, billing and tax): Orders for LinguaLith subscriptions are sold by MB Pundzabas and processed through Stripe, Inc. and Stripe Payments Europe, Ltd. Stripe receives your name, email, billing country and payment details to take payment, handle billing, tax calculation and remittance, invoicing, refunds and chargebacks, and acts as its own controller for that data. See Stripe's privacy policy.
Service providers / subprocessors: cloud hosting, database, email delivery, AI providers (for tutor replies and speech recognition) and analytics.
Professional advisers: our accountants and legal advisers where needed.
Authorities: where we are required to disclose data by law.

They only receive what they need and are bound by contracts requiring them to protect your data.

6. How long we keep it

Account and learning data are kept while your account is active and for up to 24 months after you delete it, so we can restore it if you change your mind and to meet accounting rules. Payment records are kept for the period required by Lithuanian tax law. Voice recordings are deleted within 30 days.

7. Your rights

Under GDPR you can request access, correction, deletion, restriction or portability of your data, and object to certain processing. Email us at info@lingualith.com and we'll respond within 30 days. You can also complain to the State Data Protection Inspectorate of Lithuania (VDAI).

8. Cookies

We use a small number of cookies to keep you signed in and to remember your interface language. Optional analytics cookies are only set with your consent.

9. Security

Data is encrypted in transit (HTTPS) and at rest. Access to production systems is limited to a small team and protected by two-factor authentication. No online service can be 100% secure — if we ever detect a breach affecting your data, we'll notify you as required by law.

10. Children

LinguaLith is intended for people aged 16 and over. If you are younger, please use the platform with a parent or guardian who agrees to this policy on your behalf.

11. Changes to this policy

We may update this policy as the product evolves. We'll post the new version here with an updated "Last updated" date, and email you if the changes are significant.

12. Contact

Questions or requests: info@lingualith.com.