Legal
Cookie & GDPR Notice
Last updated: 27 March 2026
Good news: LinguaOS uses only essential cookies — no tracking, no advertising, no third-party analytics cookies. We keep it simple.
Cookies we use
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sb-access-token | Supabase authentication session | Session | Essential |
| sb-refresh-token | Supabase session refresh | 1 year | Essential |
| next-auth.session | Next.js session management | Session | Essential |
Essential cookies are required for the platform to work and cannot be disabled. Since we only use essential cookies, no cookie consent banner is required under GDPR.
Your GDPR rights — quick reference
As a user based in the EU/EEA, you have the following rights regarding your personal data. Full details are in our Privacy Policy.
Right of access
Request a copy of all personal data we hold about you.
Right to rectification
Correct inaccurate or incomplete data at any time via account settings.
Right to erasure
Request deletion of your account and associated data.
Right to restrict processing
Ask us to limit how we use your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format (JSON/CSV).
Right to object
Object to processing based on legitimate interest.
How to exercise your rights
You can exercise most rights directly in the app:
- →Update your data: Account Settings
- →Delete your account: Email us at [email protected] — we will action it within 30 days.
- →Export your data: Email us to request a full data export in JSON format.
- →Lodge a complaint: Polish supervisory authority (UODO): uodo.gov.pl
Data processing for AI features
When you use AI features (lesson plan generation, feedback writing, assignment creation), the relevant student profile data (level, motivation, age, interests) and any text you provide are sent to Anthropic's Claude API for processing. Anthropic operates under standard contractual clauses with Raeolas.AI.
Anthropic does not use your data to train its models. Only the minimum data needed for each request is transmitted — no full transcripts are sent unless you are using the conversation practice feature.
Data Processing Agreement (DPA)
If you are a school or business using LinguaOS and require a formal Data Processing Agreement (DPA) as required by GDPR Article 28, please email us at [email protected]. We will provide one within 5 business days.