Privacy

Privacy Policy

Last updated 22 October 2026

Lundo is built to teach Icelandic, not to build an advertising profile about you. This policy explains what the app and website handle, why they need it, and the choices you have.

Who is responsible

Lundo is responsible for the personal data described here. Privacy questions and rights requests can be sent to hello@lundo.is.

Information we collect

Account and profile

When you choose Apple or Google sign-in, we receive an account identifier and may receive your name and email address. Apple may give us a private relay address when you use Hide My Email. We do not receive your Apple or Google password. We also store the username and profile choices you make in Lundo.

Learning activity

We store lesson progress, answers and mistakes, scores, words reviewed, experience points, streaks, badges, preferences, and other learning state. This provides the course, restores your progress, and helps decide what to review.

Lundo also keeps a learning record with your account: which lessons you start and finish, whether each answer was right first time, after a hint, or shown to you, and when you used help such as "Show me again". It holds ids and timings only, never what you type or say. We use it to measure and improve how Lundo teaches. It is kept for 13 months and is deleted with your account.

Friends and challenges

If you use social features, we handle friend requests and connections, blocks, challenge and leaderboard activity, preset encouragement, and the privacy choices that control discovery and activity sharing. Lundo does not provide free-text chat.

Notifications and device information

If you enable notifications, we handle a push token, a random installation identifier, platform, app version, and locale so notifications can reach the correct device. We also store your notification preferences.

Information on your device

Lundo stores learning progress, settings, queued sync events, and downloaded lesson content locally so the app can work reliably. Signing out does not necessarily remove all local learning data; deleting the app removes its local storage.

Support messages

When you contact us, we receive the details you choose to include and the address you use so we can respond.

How we use information

• Provide, secure, and synchronize your account and learning progress.
• Personalize lessons, reviews, reminders, and difficulty.
• Operate optional friends, challenge, and leaderboard features.
• Send notifications you have enabled.
• Answer support, privacy, and content-correction requests.
• Diagnose errors and protect Lundo against misuse.

Lundo does not sell personal data, show third-party advertising, or use an advertising-tracking SDK. The current app does not include a product analytics or crash-reporting SDK.

Services that process information

• Supabase provides authentication, database, synchronization, and account-deletion infrastructure.
• Apple and Google provide sign-in. Their own privacy terms apply to those accounts.
• Firebase Cloud Messaging delivers optional push notifications.
• Cloudflare delivers audio and website content through its network and object storage.
• Open-Meteo provides the current weather in Reykjavík, which the app's scenery shows. The app asks only for Reykjavík's weather and sends no account or learning data; like any website, Open-Meteo receives your device's IP address with the request.

These providers process information only to supply their services to Lundo and may process it in countries other than your own, subject to their safeguards and applicable law.

Retention and deletion

Account and learning data are kept while your account is active. When you delete your account, Lundo starts permanent deletion of the online account and associated personal learning and social data. We aim to complete verified web requests within 30 days. Limited records may be retained where required by law, to resolve a dispute, or to prevent fraud and abuse. Operational backups may retain deleted information for a limited recovery period before expiry and are not used for ordinary product activity.

You can delete in the app under Settings → Account → Delete account, or use the public account-deletion page.

Your choices and rights

You can change learning, privacy, friend-discovery, activity-sharing, and notification choices in the app. Depending on where you live, you may ask to access, correct, export, restrict, object to, or delete personal data. Email hello@lundo.is to make a request. We may need to verify that the account belongs to you.

Children

Lundo is a general-audience learning service. A person must be old enough to create and manage an online account under the rules that apply where they live, or use Lundo with the involvement and permission of a parent or guardian. Please contact us if you believe a child has provided personal data improperly.

Website storage and sign-in

The website remembers your language in local storage. If you sign in, authentication tokens are stored in this browser tab’s session storage so the website can show your synced progress and let you manage your account. Signing out removes the website session; it does not sign you out of the mobile app. The public sample lesson does not save answers or award learning points. This website does not use advertising or cross-site tracking cookies. If privacy-preserving traffic measurement is added, this policy will be updated before it is enabled.

Changes

Material changes will be dated here and, when appropriate, explained in the app. Questions can be sent to hello@lundo.is.