Privacy Policy

AI Business Machines Ltd., a company registered in England and Wales under company number 15429820 (aibusinessmachines.com), operating LinguaBOOST, is the data controller for the personal data described here. Our registered office is 124-128 City Road, London, EC1V 2NX, United Kingdom. For any privacy question or request, write to contact@linguaboost.me.

Where a school or teacher enrols learners and manages their classes, that school or teacher decides how the learners' work is used within their teaching; we process it to run the platform.

• Account data — name, email address, password (stored only as a secure hash), display name, avatar if you add one, chosen support language, and the role you hold (student, teacher, administrator).
• Learning data — lessons opened, exercises and quizzes attempted, answers given, scores, placement test results and grading cards, CEFR points, achievements and your activity timeline.
• Content you create — lessons, exercises, quizzes and files you author or upload in the Studio, including PDFs used for AI generation.
• Spoken answers — audio you record in the AI Speech Guide, and the transcript and feedback produced from it.
• Tutor conversations — messages you exchange with the AI tutors.
• Class and teaching data — which class you belong to, which teacher you are linked to, and records of teacher-led sessions (who led, which learner, when).
• Billing data — subscription status, plan, and the identifiers our payment processor gives us. We never see or store your full card number.
• Technical data — sign-in events, IP address and browser information used to keep the service secure, and error reports when something breaks.
• Enquiries — the details you submit in the school quote form or send us by email.

• To provide the service you signed up for — accounts, lessons, progress tracking, classes and assignments. Legal basis: performance of a contract.
• To assess your English and show your level, achievements and improvement over time. Legal basis: performance of a contract.
• To take payment and manage subscriptions. Legal basis: performance of a contract and legal obligation for accounting records.
• To send service email — invitations, password resets, assignment notices and the Word of the Week. Legal basis: performance of a contract, or your consent where the message is optional.
• To keep the platform secure, prevent abuse, and audit sensitive actions such as content access and teacher-led sessions. Legal basis: legitimate interest.
• To improve the platform using aggregated, non-identifying usage patterns. Legal basis: legitimate interest.

Generating a lesson, scoring an answer, transcribing a spoken response, producing feedback or holding a tutor conversation means sending the relevant text, file or audio to an AI model provider for processing. Only the content needed for that task is sent. We do not sell your data to AI providers and it is not used to train public models by us. Providers process it under their own terms as our processors.

Automated scoring influences the level and feedback the app shows you. It does not produce any legal or similarly significant decision about you, and a teacher can always review it.

We use a small number of service providers, each acting on our instructions under a data-processing agreement:

• Cloud hosting and database — running the application and storing your account, content and learning records.
• AI model providers — generating and scoring content as described above.
• Payment processing — handling card payments and subscriptions. Card details go directly to the processor, not to us.
• Email delivery — sending service email from our own domain.

Some providers operate outside the European Economic Area. Where that happens, transfers are covered by the European Commission's standard contractual clauses or another lawful transfer mechanism.

We do not sell your personal data, and we do not share it for third-party advertising.

If you are linked to a teacher or a class, that teacher can see your learning activity — lessons completed, scores, assignment results, error patterns and the work produced in teacher-led sessions. They cannot see your password, your billing details or your private account settings. Work completed in a teacher-led session is labelled as such on your timeline so you can tell it apart from your own work.

Learners under 18 should use LinguaBOOST with the consent of a parent, guardian or their school. We do not knowingly create accounts for children under 13. If you believe a child's data has been given to us without the proper consent, contact us and we will delete it.

• Account and learning data — for as long as your account is active, and for a short period afterwards so a closed account can be recovered by mistake-correction.
• Content you authored — until you delete it, or until your account is deleted.
• Audio recordings and transcripts from the Speech Guide — kept with your learning record so you can review your progress; deleted with your account.
• Billing and invoice records — kept for the period required by accounting and tax law.
• Security and audit logs — kept for a limited period appropriate to their purpose.

When you ask us to delete your account, we remove or anonymise your personal data except where law requires us to keep a record.

Under the GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate — much of it you can edit yourself on your profile page.
• Delete your account and data.
• Restrict or object to certain processing, including processing based on our legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent, where processing is based on consent, without affecting what happened before.

Write to contact@linguaboost.me or to AI Business Machines Ltd., 124-128 City Road, London, EC1V 2NX, United Kingdom, and we will respond within one month. If you are not satisfied, you can complain to the UK Information Commissioner's Office (ico.org.uk), or, if you are in the EU, to your national supervisory authority — for learners in Czechia that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

We use cookies and browser storage that are necessary to run the site: keeping you signed in, remembering your language and light/dark preference, and protecting forms against abuse. We do not use advertising cookies or third-party tracking profiles.

Access to data is controlled per account and per role, enforced on the server rather than in the browser, so a learner's records are only reachable by that learner and the teachers linked to them. Passwords are stored hashed, data is encrypted in transit, and uploaded files sit in private storage reachable only through short-lived links. No system is perfectly secure; if a breach affects your data and poses a risk to you, we will notify you and the supervisory authority as the law requires.

We will update this policy as the platform develops. The date at the top shows the current version, and we will notify account holders of material changes. See also our Terms and Conditions.