Privacy policy
Last updated:
Who runs LangMix
LangMix is a personal, non-commercial project run by Aleksei Semenov, who is responsible for the information described here. For any question or request about it, write to contact.amiter@gmail.com.
What LangMix collects, and why
Your account
When you create an account, the app asks for your email address, a password, your first and last name, your date of birth and your native language, and it stores your phone's time zone. LangMix uses these to sign you in, to keep your profile, to choose the languages a book plays in, and to count your weekly listening in your own time zone. Your date of birth is kept as part of your profile and is not used for anything else.
Your password is kept only by LangMix's own sign-in service, which stores it as a hash, never as the password itself. It is not checked against any outside service.
Confirming your email address
When you create an account with an email address and a password, LangMix sends one email to that address with a link that confirms it is yours. LangMix records that the address was confirmed, and how: by that link, through Google, or by the operator who set up your account. To keep the app from being used to send unwanted mail, it also records when each confirmation email was sent and to which address; those send records are deleted after 30 days. The email contains no tracking: LangMix does not record whether you opened it, and the link goes straight to LangMix.
Continue with Google
If you choose Continue with Google, Google asks you to share your basic profile with LangMix
(the openid, email and profile permissions). Of what Google sends,
LangMix keeps your Google account's ID, your email address and your first and last name. It never
sees your Google password, and it gets no access to your Gmail messages, contacts, files or anything
else in your Google account. Google does not send your date of birth or native language; the app asks you for
those itself.
LangMix's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your listening and learning
To make the app work, LangMix stores:
- the books on your bookcase, how you set each one up (languages, their order, speeds and features) and where you stopped;
- the listening the app reports, and what it earns: experience points, your level, your weekly goal and your streak;
- the chapters you finish, and when;
- the levels you give for the languages you know or are learning, and your app settings;
- your plan and its history;
- the messages LangMix shows you in the app's notifications inbox, and whether you have read them.
LangMix takes no payments and holds no payment details.
Server logs
LangMix's servers keep logs and traces of the requests they handle (for example the time, what was asked for, how long it took and whether it failed) so problems can be found and fixed. While you are signed in, these records include your email address, and so does a sign-in attempt that fails. They can also include the network (IP) address a request came from. LangMix's own code never writes your password or your date of birth to them.
On your phone
The app keeps your sign-in on your phone, encrypted with the Android Keystore. It does not ask for your location, contacts, camera, microphone or files.
Where it is kept
LangMix is self-hosted. Everything above is stored on the operator's own server, a computer in the operator's home, not with a cloud provider, and the app reaches it over an encrypted (HTTPS) connection. Every night, the accounts and listening data are backed up to a storage server (NAS) on the same home network. The backups are not encrypted; they are kept on that private network only. The one exception is the email LangMix sends you, which leaves through an email delivery service (below).
Who it is shared with
LangMix does not sell, rent or share your information, and it shows no ads. Neither the app nor its servers contain any third-party analytics, advertising or crash-reporting code. Two other companies are involved:
- Resend, the email delivery service LangMix sends its emails through. To deliver one, Resend receives your email address and the message itself, the confirmation link included, and keeps its own delivery records under Resend's privacy policy. Open and click tracking are switched off.
- Google, only if you choose Continue with Google: Google then knows that you signed in to LangMix, and Google's own privacy policy covers that.
How long it is kept, and deleting it
Your account and listening data are kept for as long as your account exists. Logs are deleted automatically after 7 days and traces after 2 days. Records of confirmation emails sent are deleted after 30 days. Nightly backups are deleted after 30 days.
The app has no delete button yet. To delete your account, email contact.amiter@gmail.com from the address you use to sign in. Your sign-in account and everything LangMix holds about you will be deleted: your profile, bookcase, listening progress, finished chapters, plan history, notifications and the record that your address was confirmed. Copies left in backups disappear within 30 days, and in logs within 7 days. You can also write to ask what LangMix holds about you, or to correct it.
Age
LangMix asks for your date of birth, but it does not currently set a minimum age. If you think a child has created an account without a parent's or guardian's permission, email contact.amiter@gmail.com and it will be deleted.
Changes to this policy
This policy may change as LangMix changes. The date at the top of this page shows when it last did.