This Privacy Policy explains how Lanspo processes personal data when you use the Lanspo iOS app and the public website. It also explains the rights available to you under applicable data-protection law, including the GDPR.
1. Controller
The controller responsible for the processing of personal data in connection with Lanspo is:
Erdinc Ciftci
Oderstraße 194
12051 Berlin
Germany
Email: lanspocom@gmail.com
2. About Lanspo
Lanspo is a Spanish language-learning application. Features may include notes, user-pasted Spanish text, Auto Input translation, flashcards, spaced repetition, learning progress, study packs, pronunciation/audio, and Lanspo Pro subscriptions.
Personal data is processed where needed to provide, maintain, secure and support these features.
3. Personal data we process
Account and authentication data
Depending on how you use Lanspo, we may process:
- A Supabase account / user identifier
- A Sign in with Apple identifier when you choose Sign in with Apple
- An email address where Apple provides one (this may be your real email or an Apple Private Relay address — Apple does not always provide a real email)
- A name, if Apple supplies one and it is stored in your account
- Authentication and session information
- Account settings
Guest / anonymous account data
If you use Lanspo without signing in with Apple, Lanspo may create an anonymous technical account with a user identifier and authentication session. This allows learning data to be associated with your use of the service without requiring an email address. If an anonymous account is never linked to a permanent sign-in method, you may lose access to it after signing out, losing the session or changing devices.
Learning data
- Study activity and practice history
- Study-pack membership
- Progress metrics such as XP, streak information and related learning status where the app records them
- Learning preferences
Notes and user-provided content
- Notes and folders
- Spanish text you paste into Auto Input
- Generated translations returned for that text
- Saved lines and edits
This content is private to your account and is not published to other Lanspo users.
Flashcards and spaced repetition
- Flashcards and saved learning items
- Practice history
- Spaced-repetition scheduling and status (such as New, Learning, Due, Learned and Strong)
Purchase / subscription information
Purchases and subscriptions are processed through Apple’s App Store.Lanspo and RevenueCat process product, subscription and entitlement information needed to determine Lanspo Pro access — for example product identifiers, entitlement status, subscription events and identifiers needed to associate an entitlement with your Lanspo account. Lanspo does not receive your full payment-card details from Apple.
Pronunciation / audio
When you request pronunciation for text, the relevant text may be sent to Google Cloud Text-to-Speech to generate audio. Pronunciation generated from your private user-entered content is not made available to other Lanspo users. Lanspo may separately cache or reuse audio for Lanspo-provided editorial or learning content.
Support communications
If you email us, we process your email address, the content of your message and any information you choose to include.
Waitlist and email updates
If you join the Lanspo waitlist or subscribe for product updates on lanspo.com, we process the email address you submit and related signup information needed to manage that list and send the updates you requested.
Technical and security information
To operate and protect the app and website, technical information may be processed such as app or browser version, operating system or device type, timestamps, request or server information (which may include IP address), and security or error information needed to run and secure the service. Lanspo does not use a separate third-party crash-reporting or product-analytics SDK in the iOS app.
4. Private user content
Your notes, pasted Auto Input content, flashcards and other personal learning materials are private to your account. Lanspo does not publish them, does not sell them, and does not turn one user’s private notes into another user’s notes.
Service providers may receive the minimum relevant content where needed to perform a feature you request — for example OpenAI for Auto Input, Google Cloud Text-to-Speech for pronunciation, and Supabase for storage and backend operation.
Please do not enter passwords, payment-card details, government identification numbers, health information or other highly sensitive information into Lanspo notes or translation fields.
5. Purposes and legal bases
Where GDPR applies, we rely on the following legal bases:
Art. 6(1)(b) GDPR — performance of a contract
Processing necessary to provide the Lanspo features you request, including accounts and authentication, storing learning data, notes, translations, flashcards, study progress, pronunciation, subscription entitlement, and account-related support.
Art. 6(1)(f) GDPR — legitimate interests
Processing based on our legitimate interests in keeping the service secure, preventing fraud and abuse, maintaining reliability, debugging and technical operations, protecting systems, and responding to general inquiries where appropriate. These interests are balanced against your rights and freedoms.
Art. 6(1)(c) GDPR — legal obligations
Processing or retention required by applicable law, including tax, accounting or regulatory requirements where relevant.
Art. 6(1)(a) GDPR — consent
Used where a specific optional processing activity relies on consent — for example joining the waitlist on lanspo.com.
Lanspo currently does not use advertising SDKs or third-party behavioural marketing trackers in the iOS app. The public website uses the Meta Pixel for visit and waitlist-signup measurement, as described below.
6. Service providers and other recipients
We do not sell personal data. Depending on the feature you use, personal data may be processed by:
Apple
Provides Sign in with Apple and processes App Store purchases and subscriptions. Apple also processes information relating to its own platform services under its applicable privacy terms.
Supabase
Provides authentication, database, backend and account / learning-data storage. Lanspo’s Supabase project is hosted in the West EU (Ireland) region.
RevenueCat
Provides subscription and entitlement management. This may include an app user identifier, product information, entitlement status and subscription events needed to provide Lanspo Pro.
OpenAI
Processes text you submit through Auto Input as necessary to generate the requested language-learning / translation result.
Google Cloud Translation
Processes text you select in the app when you request a translation. Lanspo may reuse or cache translations of Lanspo-provided learning material so the same translation does not need to be generated repeatedly. This does not mean arbitrary private notes are placed into a shared translation cache.
Google Cloud Text-to-Speech
Processes text submitted for pronunciation in order to generate the requested audio. Pronunciation generated from your private user-entered content is not made available to other Lanspo users. Lanspo may separately cache or reuse audio for Lanspo-provided editorial or learning content.
Vercel
Hosts the public Lanspo website and may process technical web-request information necessary to provide and secure the website.
Web3Forms
Provides the waitlist form on lanspo.com. When you submit the form, your email address and related signup details are sent to Web3Forms so we can receive the request and email you about Lanspo.
Meta Platforms
The public website loads the Meta Pixel (Facebook Pixel). It measures page views and waitlist signups (a Lead event after a successful form submission). Meta may process technical identifiers such as IP address, browser or device information, and cookie or similar identifiers, and may use this information for measurement and advertising under Meta’s own terms.
7. Lanspo.com website data
When you visit lanspo.com, technical information necessary to deliver and secure the website may be processed, such as your IP address, request time, requested URL, browser or device information and related server information.
The public website uses a waitlist form provided by Web3Forms to collect email addresses. It also uses the Meta Pixel to measure visits and waitlist signups. The website does not use Google Analytics or Vercel Analytics. Contact and support on the website are also available by email link.
8. International data transfers
Some service providers may process personal data outside the European Economic Area, including in the United States. Where a transfer requires a Chapter V GDPR safeguard, it may rely on an applicable European Commission adequacy decision, the EU Standard Contractual Clauses, and/or the EU–US Data Privacy Framework where valid and applicable for the relevant processing. Not every provider necessarily relies on the same mechanism.
Lanspo’s primary Supabase account and learning-data database is hosted in the West EU (Ireland) region.
You may contact us at lanspocom@gmail.com for further information about safeguards used for international transfers.
9. Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
- Account and learning data. Generally retained while the account remains active. After deletion, associated data is deleted or anonymized where appropriate unless retention is required for legal obligations or the establishment, exercise or defence of legal claims.
- Backups. Residual copies may temporarily remain in secured backups until they are overwritten or removed in accordance with the applicable backup cycle.
- Waitlist emails. Retained as long as needed to operate the waitlist and send the Lanspo product emails you requested, or until you ask us to remove your address.
- Support communications. Retained only as long as reasonably necessary for handling the request and for legitimate or legal record-keeping.
- Legally required information. May be retained for the periods required by applicable law.
- Subscriptions. Deleting a Lanspo account does not automatically cancel an active Apple App Store subscription. Subscriptions are managed through Apple.
10. Account deletion
You can initiate deletion of your Lanspo account in the app via:
Profile → Account → Delete account
Deletion is intended to remove or anonymize associated Lanspo account and learning data, subject to legitimate or legal retention requirements. Deleting your Lanspo account does not automatically cancel an Apple App Store subscription.
If you cannot access the app, contact lanspocom@gmail.com. Please provide enough information for us to locate the account, but do not send passwords, authentication tokens or payment-card details.
More information: Account deletion.
11. Whether providing data is required
Some information is necessary to provide particular Lanspo features. For example, a technical account identifier is needed to associate cloud-stored learning data with your account, and text must be processed when you request translation or pronunciation.
If you choose not to provide information required for a particular feature, that feature may not be available. Other information, such as optional notes or information included in support messages, is provided voluntarily.
12. Your data-protection rights
Where GDPR applies, you have the right to:
- Access your personal data
- Rectification of inaccurate personal data
- Erasure, subject to legal limits
- Restriction of processing
- Data portability where applicable
- Object to processing based on legitimate interests (Art. 6(1)(f))
- Withdraw consent at any time where consent is the legal basis, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with a supervisory authority
To exercise these rights, email lanspocom@gmail.com. We will respond within the timeframes required by applicable law.
For the controller in Berlin, Germany, the supervisory authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI). More information: datenschutz-berlin.de. You may also contact another competent supervisory authority where applicable, including in your EU/EEA place of residence or work.
13. Automated decision-making
Lanspo does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
Spaced-repetition scheduling and normal learning-progress calculations are educational product functions rather than such legal or similarly significant automated decisions.
14. Children
Lanspo is not specifically directed at children under 16. Lanspo does not normally request a date of birth as part of account creation. Where applicable law requires consent from a parent or legal guardian for processing relating to a child, the required authorization must be obtained.
If you believe personal data relating to a child has been provided to Lanspo in circumstances that are not permitted by applicable law, please contact us at lanspocom@gmail.com.
15. Security
We use technical and organizational measures appropriate to the nature and risk of the processing to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No online service or storage system can guarantee absolute security.
16. No sale of personal data
Lanspo does not sell personal data. The iOS app does not currently use personal data for third-party targeted advertising. The public website uses the Meta Pixel for visit and waitlist-signup measurement, which Meta may also use for advertising under its own terms.
17. Changes to this Privacy Policy
We may update this Privacy Policy when Lanspo’s features, service providers, data-processing activities or legal obligations change. The “Last updated” date will be revised when changes are made. Where required by law, we will provide appropriate notice or obtain consent before beginning new processing that requires consent.
18. Contact
Erdinc Ciftci
Oderstraße 194
12051 Berlin
Germany
Email: lanspocom@gmail.com