lingoni – Privacy Policy

Last updated: October 8, 2026

We only collect the data we need to run lingoni: to create your account, give you access to your lessons and downloads, take payments, send you the emails you asked for and keep our website safe. We don’t sell your data. The details are below.

1. Who is responsible

lingoni UG (haftungsbeschränkt), Lölsberg 30, 51491 Overath, Germany. Managing directors: Jennifer Tehraud and Jacqueline Tehraud. Email: info@lingoni.com. Website: lingoni.com.

If you have questions about your data, write to us at info@lingoni.com.

2. What data we process and why

2.1 Visiting our website

When you visit lingoni, our website platform automatically records technical data: your IP address, the date and time, the pages you open, and your browser and device type. We use it to deliver the website, keep it secure and fix errors. Legal basis: our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR).

2.2 Your account

When you sign up for a free trial, we process your first name, your email address and the password you choose. We need this to give you access to your lessons. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

2.3 Orders and payments

When you buy a plan, we process your order details (plan, price, date), your billing details (first and last name, address, ZIP code, city and country) and your payment status. Payments are handled by our payment providers Stripe and PayPal. We don’t see or store your full card number or your PayPal login. Legal basis: our contract with you (Art. 6(1)(b) GDPR) and our legal duties under tax and commercial law (Art. 6(1)(c) GDPR).

2.4 Learning content and progress

When you use lessons, worksheets and podcasts, our platform records your progress, for example which lessons you have completed. We use it to show you your progress and to improve our content. Legal basis: our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in improving our lessons (Art. 6(1)(f) GDPR).

2.5 Premium Drive folder

Premium (lifetime) members get access to a Google Drive folder. To share it with you, we pass your email address to Google. Google processes it as described in its own privacy policy. Legal basis: our contract with you (Art. 6(1)(b) GDPR).

2.6 Emails

Service emails. Order confirmations, confirmations of your right of withdrawal, receipts, password resets and messages about your plan are part of our contract with you. We use Proton Mail for our email inbox and Brevo to send automated emails. Legal basis: Art. 6(1)(b) GDPR.

Newsletter. We only send our newsletter if you tick the newsletter checkbox (or use our sign-up form) and confirm your email address by clicking a link in a confirmation email (double opt-in). We store your consent and the time of your confirmation so that we can prove it. You can unsubscribe at any time with the link in every email. We send our newsletter with Brevo. Legal basis: your consent (Art. 6(1)(a) GDPR).

2.7 Contacting us

If you write to us, we use your message and contact details to answer you. Legal basis: our contract with you (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

2.8 Cancellations and withdrawals

When you cancel a subscription or withdraw from a purchase, we process the data in your request to carry it out and to document it. Legal basis: Art. 6(1)(b) and (c) GDPR.

2.9 Cookies and similar technologies

When you first visit our website, a cookie banner lets you accept all cookies, reject all optional cookies or choose by category. We set cookies that are necessary to run the website, for example to keep you logged in, without asking you. Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tools are only used if you agree. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your choice at any time with the “Cookie settings” link in the footer of our website.

Website statistics. We use Plausible Analytics to understand how our website is used, for example how many people visit which pages. Plausible works without cookies and doesn’t create profiles of individual visitors. Legal basis: our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

2.10 Videos

We show videos from YouTube (Google) on our website. YouTube videos are only loaded after you agree in the cookie banner. When you play a video, YouTube may store cookies and process data such as your IP address. Legal basis: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).

3. Who receives your data

We only pass on data where this is needed:

• LearnWorlds: the platform we use for our website, accounts, lessons and checkout.
• Stripe and PayPal: payments.
• Google: the Drive folder for Premium members and YouTube videos.
• Brevo: newsletter and automated emails.
• Proton: our email inbox.
• Plausible: website statistics.
• Our tax advisor and accountant: bookkeeping and taxes.

These providers work on our behalf under data processing agreements (Art. 28 GDPR), or, like the payment providers, are responsible for their own processing. We don’t sell your data.

4. Transfers outside the EU and EEA

Some of our providers, such as LearnWorlds, Stripe, PayPal and Google, may process data in the USA. These providers take part in the EU-US Data Privacy Framework. This means the European Commission has decided that data transferred to them is adequately protected. Proton is based in Switzerland, which also has an adequacy decision from the European Commission. Brevo and Plausible process data within the EU.

5. How long we keep your data

• Account and learning data: as long as your account exists. After you close it, we delete the data within 30 days, unless we have to keep it by law.
• Order and invoice data: for the periods required by German tax and commercial law: 8 years for accounting documents such as invoices and receipts, and 6 years for business correspondence. The periods start at the end of the calendar year in which the document was created.
• Newsletter: until you unsubscribe. We keep the proof of your consent for up to 3 years after that, to defend legal claims.
• Technical log data: deleted after a short time, usually within 30 days.

6. Your rights

Under the GDPR you have the right to:

• ask us for access to your data,
• have wrong data corrected,
• have your data deleted,
• have the processing restricted,
• receive your data in a common format (data portability),
• object to processing that is based on our legitimate interests (Art. 21 GDPR), and
• withdraw a consent at any time, with effect for the future.

To use your rights, write to us at info@lingoni.com.

You also have the right to complain to a data protection authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, ldi.nrw.de.

7. Do you have to give us your data?

You need to give us the data for your account and your purchase. Without it, we can’t provide our service. Giving us your data for the newsletter and optional cookies is voluntary.

8. Automated decisions

We don’t use automated decision-making or profiling that has legal effects on you.

9. Security

We protect your data with technical and organizational measures, such as encrypted connections (HTTPS) and limited access for our team.

10. Children and young people

Our plans are for people aged 18 and over.

11. Changes to this policy

We may update this policy, for example when we add a new service or the law changes. The current version is always on our website. If a change is important, we will let you know by email or on the website.