Privacy Policy

Chingelish is an online British-English learning app for children, operated from https://chingelish.com by ASM Professional Services (registered in the Netherlands, KVK 42137630, VAT ID NL005526019B33), the data controller for the information described on this page. You can reach us at any time at support@chingelish.com.

Accounts are created and held by a parent or guardian on behalf of a child. Children retain their own privacy rights; an authorized parent or guardian may exercise them on their behalf. Postal address: 1409 Dalsteindreef, 1112 XC Diemen, Netherlands. You may also use our contact form or write to this address.

• Account details — the email address and password you register with (passwords are stored hashed by our authentication provider, never in plain text).
• Profile details — up to three children’s nicknames, avatars, learner groups, protected codes and device approvals. Please use a first name or nickname only.
• Learning activity — lessons completed, vocabulary and grammar answers, stories read, games played, stars, streaks and reward claims.
• Conversation activity — submitted written or transcribed responses, feedback, session history and mission progress used to continue guided practice and show parent reports.
• Parent settings — report preferences, the email address you give for progress reports, and daily reminder settings. Progress report emails (daily, weekly, monthly or annual, as you choose) summarise each child's learning time, activities, stars and conversation practice; clear the email address or untick the reports to stop them.
• Cookie consent records — each time a cookie choice is made or changed: a random consent number, the choices, notice version, time, page, browser type and (if signed in) the account. Monthly cleanup is scheduled to remove records older than 3 years. IP addresses are not stored in consent records, but may be processed separately for security rate limits.
• Billing information — per-child plan, payment and subscription identifiers, invoices and currency information. Stripe receives the account email and subscription metadata including the child’s display name; use a nickname.
• Contact messages — the name, email and message you send through our contact form.
• Technical data — basic request and error logs needed to keep the service running and secure, and per-day counters that limit guided conversation turns and voice clips.

We do not collect precise location, we do not ask for photographs; optional microphone recordings are uploaded for speech processing, we do not run advertising, and we do not sell or share personal data with data brokers.

• To provide the service (accounts, lessons, progress, guided conversations, voice playback) — performance of our agreement with the adult for necessary account and billing operations. Children’s learning data requires a separate purpose-by-purpose basis assessment; the adult contract is not a blanket basis for every child-data use.
• To keep children safe (reviewed content, usage limits and abuse prevention) — our legitimate interests in security and safe operation, subject to the child’s interests and applicable safeguards. Accounting obligations may also require certain records to be retained.
• To answer your messages — legitimate interest in responding to enquiries.
• To send reminders or reports you have switched on — your consent, which you can withdraw at any time in the parent dashboard.
• Children's data — requires the appropriate local legal basis and guardian authorization where applicable. The current parent check records self-attestation, not independently verified parental consent. Email verification, terms acceptance and cookie choices are separate and do not establish every required form of child consent.

Chingelish is designed for young learners, but accounts must be created and supervised by an adult. We ask that children never type their full name, address, school, phone number or other identifying details into the app. If you believe a child has shared personal information with us, contact us to request correction or deletion. See our Children’s Privacy and Parent Consent & Data Rights notices.

• Lovable Cloud — hosting, database and authentication for the app.
• Lovable speech gateway and configured OpenAI speech models — text-to-speech uses gpt-4o-mini-tts; uploaded recordings are transcribed using gpt-4o-mini-transcribe. These speech tools do not supply open-ended child conversations. Conversation responses and feedback can be saved in practice history.
• Stripe — handles card details directly for enabled checkout and subscription management. We keep associated billing records, not full card numbers.
• Google Analytics 4 (only with analytics consent) — counts visits and popular pages using online identifiers and technical request data. No advertising signals are enabled; this does not make all analytics data anonymous.
• Lovable’s email delivery service — sends account, device, billing and opted-in progress messages and contact notifications, with recipient, delivery and suppression records.

Providers’ roles and any separate legal purposes depend on their contracts and services; payment providers may have their own regulatory obligations. We do not claim zero provider retention or no model training without verified contractual settings. You can withdraw analytics consent at any time in cookie settings. We do not use Google Ads or any advertising tracking.

Cloud, payment, email and speech services can involve processing or support access outside your country. Applicable transfers require a lawful mechanism, such as adequacy or the appropriate contractual safeguards and assessments. Actual recipient locations, contracts and transfer instruments must be verified; this notice does not confirm a particular provider’s certification or transfer arrangement. You can request details of recipients and applicable safeguards through our privacy contact.

Account, profile and learning data are kept while the account is open. Contact, security, usage, audit, email and accounting records have different purposes; a daily counting window is not proof of deletion. Fixed schedules for every provider’s logs and backups have not been verified. We must not retain personal information longer than necessary for its purpose or applicable legal duties. Monthly consent cleanup targets records older than three years. Contact us for the retention information applicable to your request.

If you are in the UK or EEA you can ask us to access, correct, delete, export or restrict your data, object to processing based on legitimate interests, and withdraw consent at any time. Email support@chingelish.com from the address on the account. GDPR requests ordinarily receive a response within one month; any lawful extension and its reason will be explained within that month. You may also complain to your local data protection authority.

Account deletion: use Delete account in the Parent Zone and confirm with DELETE, or send a deletion request. The action attempts to cancel applicable paid plans and remove account, child and learning records in several steps. It can partially fail; contact us if an error occurs. Retained billing/consent links are removed where implemented, but this is not proof of anonymisation of all payloads. Accounting, audit, email-provider and backup records may need separate handling. Device-saved writing and emails already received are not erased by account deletion. See Parent Consent & Data Rights for full instructions.

Local mandatory privacy and consumer rights apply where the relevant law covers the service. UAE federal, DIFC and ADGM regimes are distinct, as are the other GCC countries. See Regional Privacy & Consumer Rights for the review scope and limitations. No country has been certified compliant by these notices.

Access to your data is protected by authentication and database-level access rules, designed to separate families’ records. These controls are not an absolute guarantee against security defects or unauthorized access. Voice and learning endpoints require a valid signed-in session. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your family's information.

See our Cookie Policy for exactly what we store on your device and how to change your choices.

If we make a significant change we will update the date at the top of this page and, where appropriate, tell you in the app. Questions? Write to support@chingelish.com.