Personal data processing

Summary

• To create an account, an email address, first name, last name and role are all that’s needed.
• Data is stored in the United States.
• The platform doesn’t show advertising or include third-party analytics or session recording tools.
• Student data is not used to train artificial intelligence models.
• The institution can request deletion of its data at any time.

Data collected

Account data

Data	Required?
Email address	Yes
First name and last name	Yes, when completing the first sign-in
Role: student, teacher, coordinator or administrator	Yes
Native language and language being learned	Requested at first sign-in
Country	Requested at first sign-in
Password	Only if the person signs in with email and password
Profile photo	No

For user accounts, the platform doesn’t ask for an ID document, phone number or date of birth.

When the person signs in with their Microsoft or Google account, or from the LMS, LingoQuesto receives their identifier, email and name from that provider. It never receives their password.

Practice data

• Student voice recordings.
• Transcription of what they said and text they wrote.
• Scores, feedback, practice time and progress.

Content

The text, documents and images a teacher uploads to create activities and courses.

Technical data

• Log of each sign-in: date, method, IP address and browser.
• Log of each launch from the LMS, with the data the LMS sent.

What it is used for

• Identifying each person and showing them their classes and assignments.
• Assessing practice and giving feedback to the student.
• Showing grades and reports to the teacher and the institution.
• Handling support requests and diagnosing failures.
• Protecting the platform and detecting misuse.

Student data is not used to train artificial intelligence models, neither LingoQuesto’s nor its providers’.

Where it is stored

In the United States: the database and files are on DigitalOcean, New York region. Details are in Security and infrastructure.

Who has access to the data

Who	To what
The student	Their own practices, grades and progress.
Teachers at the campus	The practices, grades and progress of the students at that campus.
Coordinators and administrators	The information of their campus or their institution.
LingoQuesto technical team	What is needed to operate the platform and provide support.
Service providers	The data each one needs to provide its service. See Providers and third-party services.

One institution cannot see another institution’s data.

Third-party tools in the browser

Tool	When it is active	What it receives
Support chat (Crisp)	Across the whole platform, once the person signs in	The user’s email, name, role, campus and identifier, and the support conversation.
Microsoft or Google sign-in	Only if the person chooses that method	What the person authorizes on the provider’s screen.
Browser speech recognition	In Reading activities	The audio of the reading, which the browser vendor processes.

The platform doesn’t use web analytics, advertising, heat map or session recording tools.

Retention

Data is kept while the account and the relationship with the institution are active. There is no automatic deletion based on age.

Before ending the relationship, the institution can download its classes’ grades in Excel.

Deletion

The institution or the data subject can request deletion of an account or of all of the institution’s data. Deletion covers account data, recordings, transcriptions and scores.

Deleted data remains in the database backups for up to 7 days, which is how long those backups are kept. See Backup and recovery.

Data subjects’ rights

Requests to access, correct or delete personal data are handled through the institution or directly with LingoQuesto support.