1 Who We Are & Data Controller
Oslango ("we", "our", or "us") provides AI-powered language immersion, spaced repetition (FSRS), dynamic grammar mapping, and phonemic speech evaluation services via our web applications, browser extensions, and APIs.
For the purposes of applicable data protection laws (including the General Data Protection Regulation / GDPR and the California Consumer Privacy Act / CCPA), Oslango acts as the Data Controller of your personal data.
Official Contact Email: [email protected]
Primary Website: https://oslango.com
2 Information We Collect
We collect information that you provide directly, data generated automatically during your study sessions, and data received through authorized third-party authentication providers:
Account & Third-Party Auth Data
- Direct Registration: Email address, username, password hash (managed securely via Clerk).
- Facebook Login (Meta Platform): If you choose to log in via Facebook, we receive your public profile information (name, profile picture), verified email address, and Facebook App-Scoped User ID.
- Google & Apple OAuth: Email address, profile name, and account identifier.
Voice & Pronunciation Audio Data
- Audio recordings captured during Deep Word, Echoing, Shadowing, Speaking, and Dictation modules.
- Phonemic transcription breakdown, accuracy scores, completeness metrics, and fluency indicators.
- Privacy Note: Audio is processed strictly to calculate pronunciation feedback and is never sold, published, or used for third-party biometric profiling.
Learning Progress & FSRS Memory State
- Vocabulary items, definition bookmarks, custom notes, and tags.
- Free Spaced Repetition Scheduler (FSRS) memory stability, difficulty, review logs, and recall intervals.
- Grammar Mind Map topic mastery levels, CEFR distribution stats, and quiz answer history.
Technical & Diagnostic Logs
- IP address, browser type, operating system, device characteristics, and language preferences.
- Application performance metrics, error traces, and feature interaction timestamps.
3 Legal Bases for Processing (GDPR & International Standards)
We only process your personal data when we have a valid legal ground to do so:
- Performance of a Contract: To deliver our language learning service, create your profile, manage your FSRS flashcard schedules, and authenticate your login.
- Consent: When you grant browser microphone permissions to practice pronunciation or authorize Facebook Login / Google OAuth permissions.
- Legitimate Interests: To maintain platform security, prevent fraudulent activity, monitor infrastructure health, and improve audio recognition accuracy.
- Legal Obligation: To comply with legal reporting, taxation, or mandatory regulatory requests.
4 Data Sharing, Third Parties & Facebook Platform Compliance
We never sell, rent, or trade your personal data to advertisers, data brokers, or unaffiliated commercial parties. We only share necessary data with trusted service providers who adhere to strict confidentiality and security standards:
Authentication Providers (Clerk, Facebook / Meta, Google)
When you authenticate using Facebook Login, we only request standard basic permissions (such as public_profile and email). In accordance with Meta Platform Terms, this data is strictly used to create and verify your Oslango account and personalize your learning dashboard.
Cloud Infrastructure & Edge Storage (Cloudflare)
Your account metadata, vocabulary vault, and learning records are securely stored using Cloudflare D1 distributed database services with encryption at rest and in transit.
Speech Assessment Services
Short voice clips submitted during pronunciation practice are transmitted via secure HTTPS streams to speech assessment engines solely to calculate phoneme-level accuracy and return score breakdowns. Audio is not retained for model retraining without your explicit consent.
5 Your Rights & Data Deletion Instructions
Regardless of your geographical location, Oslango grants all users comprehensive data rights:
- Right to Access: Request a copy of all personal data and learning metrics we hold about you.
- Right to Rectification: Update or correct inaccurate account or profile information.
- Right to Erasure ("Right to Be Forgotten"): Request complete deletion of your account, history, and recordings.
- Right to Data Portability: Export your vocabulary items, definitions, and FSRS progress in a machine-readable format.
- Right to Withdraw Consent: Revoke microphone access or disconnect Facebook Login permissions anytime in your settings.
- Right to Non-Discrimination: We will never penalize or provide inferior service if you exercise your privacy rights.
To exercise your deletion rights or learn how to disconnect Oslango via Facebook App Settings, please review our dedicated Data Deletion Instructions or contact us directly at [email protected].
6 Data Retention & Security Measures
We retain your information for as long as your account remains active to provide continuous learning services. If you delete your account or submit a data deletion request, your personal data is purged from our production databases within 30 days.
We implement industry-standard administrative, physical, and technical safeguards—including TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, secure tokenized sessions, and role-based access control—to safeguard your information against unauthorized access, loss, or alteration.
7 Children's Privacy
Oslango is not directed to children under the age of 13 (or under 16 in certain European jurisdictions). We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has provided us with personal information without parental consent, please contact us immediately at [email protected] so we can delete the information promptly.
8 Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our platform, technologies, or applicable regulations. When significant changes occur, we will update the "Effective Date" at the top of this page and, where appropriate, provide in-app notices.
Contact & Data Protection Inquiries
If you have questions, feedback, or requests regarding this Privacy Policy or how your personal information is handled, our Data Protection Team is ready to help: