Loqwa — Privacy Policy

Loqwa ("Loqwa," "we," "us," or "our") is a language-learning application operated by Varda Systems.

This Privacy Policy explains what information we collect when you use Loqwa, why we process it, how it is stored, and the choices and rights available to you.

For privacy-related questions, contact us at: support@loqwa.vardainnovation.com

Account information

If you create a Loqwa account, we may process:

• Your email address
• A unique account identifier
• Authentication and session information
• Account status and subscription tier
• Language and application preferences

Authentication is provided through Supabase. Loqwa does not store your password in readable form.

Learning data

When you use Loqwa while signed in, we may store information needed to save and synchronize your learning progress, including:

• Languages you are learning
• Native-language preferences
• Sentence practice progress
• Repetition and mastery information
• Favorites
• Learning settings
• Collections or other learning content associated with your account where synchronization is supported

We use this information to let you continue learning across sessions and devices.

Guest data

You can use parts of Loqwa without creating an account.

Guest progress and preferences are generally stored locally on your device. If you later create or sign into an account, Loqwa may offer or perform a merge of eligible guest learning progress into your account.

Technical information

When Loqwa communicates with our infrastructure, we and our service providers may process technical information necessary to provide, secure, and troubleshoot the service, such as:

• IP address
• Device or browser information
• Request timestamps
• Network and request metadata
• Error and security logs

We do not use this information for third-party advertising.

Communications

If you contact Loqwa support, we may process your email address and the contents of your communication in order to respond to you and resolve the issue.

We use personal data only where necessary to operate and improve Loqwa, including to:

• Create and authenticate your account
• Send email verification and password-reset messages
• Save and synchronize learning progress
• Remember your settings and language preferences
• Restore your account across devices and sessions
• Protect Loqwa against abuse, fraud, and security threats
• Diagnose technical problems
• Respond to support requests
• Comply with applicable legal obligations

For users in the European Economic Area, our principal legal bases are performance of our service agreement with you, our legitimate interests in operating and securing Loqwa, and compliance with legal obligations where applicable. Consent will be used where applicable law specifically requires it. GDPR recognizes contractual necessity, legal obligations, legitimate interests, and consent as separate lawful grounds for processing.

We use a limited number of service providers to operate Loqwa.

Supabase provides authentication, database infrastructure, and synchronization of account and learning data.

Resend provides transactional email delivery, including account verification and password-reset emails. Email delivery necessarily involves processing information such as the recipient email address and message content. Resend maintains a Data Processing Addendum covering its processing services.

Cloudflare provides media infrastructure used to deliver Loqwa audio and related assets. Cloudflare maintains data-processing terms including provisions for international data transfers.

Vercel provides hosting infrastructure for Loqwa's web application. Vercel's data-processing terms cover customer data and technical service-generated data used to provide and secure its services.

These providers may process information only as necessary to provide their respective services to Loqwa or as otherwise permitted under their agreements and applicable law.

We do not sell personal data and we do not provide personal data to advertising networks for targeted advertising.

Account and synchronized learning data are generally retained for as long as your Loqwa account remains active and the information is needed to provide the service.

If you delete your account, Loqwa will delete or anonymize personal account data that is no longer required, subject to limited exceptions where retention is necessary for security, fraud prevention, backups, dispute resolution, or legal obligations.

Technical logs and backup copies may remain for a limited period before being automatically removed or overwritten.

We do not retain personal information longer than reasonably necessary for the purposes described in this Privacy Policy.

You can delete your Loqwa account from within the application.

Account deletion removes access to the account and initiates deletion of user-owned information associated with that account.

You may also contact: support@loqwa.vardainnovation.com to request assistance with deletion or privacy-related requests.

Apple requires apps that support account creation to explain their retention/deletion practices and provide a way to request deletion of user data.

Depending on where you live, you may have rights concerning your personal information.

For users covered by the GDPR, these can include the rights to:

• Access personal data we hold about you
• Correct inaccurate information
• Request deletion
• Restrict certain processing
• Object to certain processing
• Receive eligible information in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent data protection authority

These rights are provided under the GDPR and are described by the European Commission and Norway's Data Protection Authority.

You may exercise applicable rights by contacting: support@loqwa.vardainnovation.com

Users in Norway may also lodge a complaint with Datatilsynet.

Some of the service providers used by Loqwa operate internationally and may process information outside your home country or outside the European Economic Area.

Where applicable, international transfers are handled using legally recognized safeguards such as adequacy decisions, Standard Contractual Clauses, or other valid transfer mechanisms.

For example, Cloudflare's current Data Processing Addendum incorporates mechanisms for EEA and other international transfers, and Resend's DPA includes Standard Contractual Clauses.

We use reasonable technical and organizational measures designed to protect user information.

Account access is authenticated, and Loqwa uses access-control rules intended to ensure that authenticated users can access only their own user data. Supabase recommends Row Level Security for protecting data exposed through frontend applications, which Loqwa uses for its user-data architecture.

However, no internet-connected service can guarantee absolute security.

Loqwa currently does not:

• Display third-party advertising
• Sell personal data
• Use advertising networks to track users across unrelated apps or websites
• Use personal data for targeted advertising

If these practices change in the future, this Privacy Policy and any required consent mechanisms will be updated before such processing is introduced.