Privacy Policy

We are committed to protecting your privacy and handling your personal data responsibly, in accordance with the General Data Protection Regulation (GDPR).

Who we are

JennyLingo is an online English learning platform providing 1:1 lessons, progress tracking, and structured lesson feedback.

The data controller is Jenny Wright, trading as JennyLingo, resident in Italy. You can contact her at:

Email: admin@jennylingo.com

What data we collect

When you create an account and use the platform, we collect the following categories of personal data:

• Identity & account: name, email address, hashed password, timezone
• Profile: avatar image, biography, spoken languages, learning goals
• Learning data: CEFR level history, lesson records, lesson topics, tutor-written feedback
• Communications: chat messages between you and your tutor, chat file attachments (automatically deleted after 7 days)
• Payment records: purchase history and transaction IDs (we do not store card numbers — payments are processed securely by Stripe)

Why we process your data

• To provide access to the learning platform and its features.
• To enable communication between tutors and students.
• To improve our services and overall learning experience.
• To comply with legal and regulatory obligations.

Legal basis for processing

• Performance of a contract (delivery of educational services).
• Legitimate interest (platform security, service improvement, and fraud prevention).
• Consent (where required, such as optional communications or non-essential cookies).

Data retention

Account and learning data is retained for as long as your account is active or as required to provide the service. Chat file attachments are automatically deleted after 7 days. Payment records are retained as required by applicable tax and accounting law. You may request deletion of your account and personal data at any time by contacting admin@jennylingo.com.

Data sharing

We do not sell your personal data. We share data only with the following trusted third-party processors under GDPR-compliant agreements:

• Stripe, Inc. — payment processing. Stripe stores and processes card data on our behalf. See Stripe's privacy policy at stripe.com/privacy.
• Hosting and infrastructure providers — for storing and serving platform data.

No personal data is shared with advertisers or data brokers.

Your rights

• Access, correct, or delete your personal data.
• Restrict or object to certain data processing activities.
• Withdraw your consent at any time, where applicable.
• Lodge a complaint with your national Data Protection Authority.

To exercise your rights or ask questions about this policy, please contact us at admin@jennylingo.com.

Supervisory authority

As Jenny Wright is resident in Italy, the lead supervisory authority for this service is the Garante per la protezione dei dati personali (www.garanteprivacy.it). If you are based in another EU country, you may also contact your national Data Protection Authority.

For more details about how we use cookies, please see our Cookie Policy.