Privacy Policy

Last updated: July 17, 2026

LangPass locks the apps that distract you until you practice a language. This policy describes exactly what data exists, where it lives, and what (little) ever leaves your phone.

1. Your learning data stays on your device

Everything LangPass records about you — your name and passenger details, chosen language and level, difficulty, practice sessions, per-word progress, streaks, badges, and any AI topic packs you generate — is stored in a private database on your device. We do not operate accounts, and we keep no server-side copy of your learning history. We could not look at it if we wanted to.

Because of this, deleting the app (or using “Erase everything” in Settings) permanently destroys your data. Standard iOS device backups may include the app’s data and can restore it when you move to a new phone.

2. The apps you lock are invisible to us

LangPass blocks distracting apps using Apple’s Screen Time (Family Controls) framework. When you choose which apps to lock, iOS records that choice as a privacy-preserving token that only the system can read. LangPass never receives the names or identities of the apps you selected, and that choice never leaves your phone. We cannot see what you block, and neither can anyone we work with.

3. What leaves your phone, and why

• AI topic packs (Plus). When you ask LangPass to generate a custom vocabulary pack, the topic you type plus your target language and level are sent to our server and forwarded to our AI provider (OpenAI) to produce the content. This is processed transiently and, per OpenAI’s API terms, is not used to train models. Generated packs are cached on our server keyed only by (language, level, topic) so a given topic is produced once for everyone — that cache holds learning content alone and reveals nothing about any individual.
• Anonymous usage signals. The app reports coarse product events (app opened, onboarding completed, a practice session completed, a subscription started) tied to a random install identifier. These contain no names, no contact details, none of your learning content, and cannot be linked to your identity by us.
• App integrity check. To stop abuse of the paid AI endpoint, the app may attach Apple’s App Attest attestation — a cryptographic proof that the request comes from a genuine, unmodified copy of LangPass. It contains no personal data and does not identify you.

4. What we never collect

• No name, email, phone number, or account of any kind.
• No location data, contacts, photos, or advertising identifiers.
• Not the list of apps you lock — iOS keeps that from us by design.
• No sale or sharing of data with data brokers or advertisers — ever.

5. Purchases

Subscriptions are sold through Apple’s In-App Purchase and managed for us by RevenueCat, our subscription provider. To know whether LangPass Plus is active, the app sends Apple’s purchase receipt and a random, app-generated identifier to RevenueCat — never your name or Apple ID. Apple handles all payment details under its own privacy policy; RevenueCat processes the receipt under its own.

6. Your support code

Settings shows a short “support code” derived from your random install identifier. It exists so that, if you choose to contact us for help, you can share it and we can look up your anonymous device record (plan and purchase status only). It contains none of your learning data, and sharing it is entirely optional.

7. Your controls

• Erase: Settings → “Erase everything”, or simply delete the app.
• Since we hold no personal data about you, there is nothing for us to disclose, correct, or delete on request — the control above is the complete set, in your hands.

8. Who operates LangPass, and your rights

LangPass is operated from Germany; the operator of LangPass is the controller for the limited processing described above (the transient AI generation and the anonymous usage signals). Because we hold no account and no data that identifies you, there is, in practice, no personal profile for us to access, correct, port, or erase. Where the GDPR applies you still have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority; the legal basis for the minimal processing we do is our legitimate interest in operating and improving the app (Art. 6(1)(f) GDPR). To exercise a right, contact us below.

9. Children

LangPass is not directed to children, and we do not knowingly collect data from anyone under 16.

10. Changes & contact

If this policy changes materially, the app will tell you before the change applies to you. Questions: privacy@langpass.app.