LingoFlex is designed from the ground up to minimize data collection. We do not require user accounts, passwords, or personal registration of any kind.

• No user text is ever transmitted to or stored on LingoFlex servers.
• No personal data is collected, sold, or shared with third parties.
• No cookies are used for tracking or advertising purposes.

2.1 Information You Provide

• API Keys: Your API key (Google Gemini or Groq) is stored exclusively in your browser's local storage. It is never transmitted to LingoFlex servers. Your browser sends it directly to the AI provider.
• User Text: Text you enter for rephrasing, translation, or grammar checking is sent directly from your browser to the AI provider. LingoFlex servers do not intercept, log, or store your text.
• Images: Images uploaded for OCR are sent directly to the AI provider from your browser. They are not uploaded to or stored on LingoFlex servers.

2.2 Information Collected Automatically

• Analytics Data: We use Vercel Analytics, a privacy-friendly service with no cookies and no personally identifiable information. It collects aggregated, anonymous data (page views, referral sources) to improve the Service.
• Visitor Count: An anonymous counter using Vercel KV (Upstash Redis) stores only a single incrementing number with no individual visitor information.

2.3 Information We Do NOT Collect

• Names, email addresses, or contact information
• IP addresses (beyond anonymous Vercel Analytics aggregation)
• User accounts, passwords, or login credentials
• Text content submitted to AI providers
• API keys or authentication tokens
• Device fingerprints or tracking identifiers
• Cookies for tracking or advertising

The limited information we collect is used solely to:

• Provide and maintain the Service
• Display an anonymous visitor counter
• Understand aggregate usage patterns to improve performance and user experience
• Monitor for technical errors and ensure service reliability

LingoFlex integrates with the following third-party services. Your text and API key are sent directly from your browser to these providers:

• Browser Storage: Your API key, theme preference, custom tones, history, and favorites are stored in your browser's local storage. This data remains on your device and is accessible only to you. Clearing browser data removes it permanently.
• Server-Side Storage: The only server-side data is a single anonymous visitor count number. No personal or user-specific data is stored.
• Security Measures: We implement Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Frame-Options, X-Content-Type-Options, and Referrer-Policy. Source maps are disabled in production and the server identity header is removed.

LingoFlex does not knowingly collect personal information from children under the age of 13. Since we do not collect personal information from any users, we believe our Service is compliant with the Children's Online Privacy Protection Act (COPPA) and similar regulations. If you believe a child has provided personal information through our Service, please contact us and we will take steps to address the concern.

When you use LingoFlex, your text is sent directly from your browser to AI providers (Google or Groq), whose servers may be located in different countries. LingoFlex itself does not transfer or store your personal data across borders. For details on how AI providers handle international data transfers, refer to their respective privacy policies linked in Section 4.

Because we collect minimal data, you have straightforward control:

• Delete Local Data: Clear your browser's local storage to remove your API key, history, favorites, and preferences at any time.
• Revoke API Access: Revoke or regenerate your API key anytime through Google AI Studio or Groq Console.
• Opt Out of Analytics: Use a browser extension or privacy setting to block Vercel Analytics.
• Access and Portability: Since we do not store personal data on our servers, there is no personal data to request, export, or delete.

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices: