Baursaq ("we", "us", "our") operates the LinguaCap iOS app and the LinguaCap Chrome extension (together, the "Services"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Services.
We are committed to protecting your privacy. We do not sell your personal data, and we do not use it for advertising or tracking purposes.
Some practices differ between our iOS app and our Chrome extension. Where this is the case, dedicated iOS App and Chrome Extension sub-sections clearly indicate which product the information refers to.
1. Information We Collect
1.1 Account Information
When you create an account using Apple Sign-In or Google Sign-In, we collect:
- Email address — for account identification and communication;
- Full name — for personalization (optional, depending on your sign-in method);
- Profile photo URL — for display in the App (if provided by your sign-in provider);
- User ID — a unique identifier generated by our authentication system.
1.2 Learning Data
As you use the App, we store the following learning-related data:
- Saved words — words you save with translations, transcriptions, examples, and synonyms;
- Learning statistics — daily goals, streak count, correct/wrong answer counts;
- Dictation results — scores and history of your dictation practice sessions.
This data is stored locally on your device using Apple's SwiftData framework.
1.3 Browsing and Watch History
- YouTube watch history — titles, video IDs, thumbnails, and last watched timestamps of YouTube videos you watch in the App;
- Web browsing history — URLs of pages visited through the App's in-app browser;
- Bookmarks — URLs and titles you save as bookmarks;
- Search queries — search terms entered in the App's search bar.
This data is stored locally on your device.
1.4 Subtitle and Transcript Data
When you use the subtitle feature, the App retrieves YouTube subtitle data and may send it to our servers for AI-powered punctuation correction. This text is processed in real-time and is not stored on our servers after processing.
1.5 Subscription Information
When you subscribe to LinguaCap Pro:
- Subscription status — active, expired, or cancelled;
- Plan type — monthly, yearly, or lifetime;
- Purchase timestamps — when the subscription started and when it expires.
Payment details (credit card numbers, billing address) are handled entirely by Apple and are never accessible to us.
1.6 Audio Data
The dictation feature uses text input (keyboard typing). We do not record or collect any audio data from your microphone.
1.7 Information We Do NOT Collect (iOS App)
- We do not collect device identifiers (IDFA) for tracking;
- We do not use analytics SDKs or advertising frameworks;
- We do not collect location data;
- We do not access your contacts, photos, or camera.
1.8 Anonymous Session
On first use, the Extension creates an anonymous account via Supabase Auth. This generates a random user ID (UUID) used solely for rate-limiting translation requests. No email, name, or personally identifiable information is collected by the Extension.
1.9 Device ID
A random UUID is stored locally in Chrome storage to identify the installation. It is never sent to third parties.
1.10 Saved Words and Preferences
Words you save to the dictionary, UI language, style settings, and feature toggles are stored locally in chrome.storage.local on your device. They are never uploaded to any server (unless you sign in via the linked iOS / web app for sync — in that case the data is governed by the iOS App section above).
1.11 Translation Requests
When you click a word or enable auto-translate, the text is sent to our Supabase Edge Functions, which call third-party AI and translation APIs (Google Translate, Groq, Google Gemini). Only the word or subtitle line is sent — no page URLs, browsing history, or personal data.
1.12 Information We Do NOT Collect (Chrome Extension)
- Browsing history or page URLs;
- Cookies or authentication tokens from visited websites;
- Video or audio content;
- Personal information (name, email, address);
- Keystrokes or form data.
2. How We Use Your Information
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Account info (email, name) — App only | Account creation, authentication, profile display | Contract performance |
| Saved words & learning stats | Core functionality, learning progress tracking | Contract performance |
| Watch history & bookmarks — App only | Resume playback, quick access to content | Legitimate interest |
| Subtitle / translation text (sent for processing) | AI punctuation correction and word translation | Contract performance |
| Subscription status — App only | Feature access management, entitlement verification | Contract performance |
| Anonymous user ID — Extension only | Translation request rate limiting | Legitimate interest |
3. Data Storage and Security
3.1 Local Storage
- iOS App: words, history, bookmarks, learning stats are stored locally on your device using Apple's SwiftData framework and UserDefaults. Authentication tokens are stored in the iOS Keychain with
kSecAttrAccessibleAfterFirstUnlockThisDeviceOnlyprotection. - Chrome Extension: all user data (saved words, preferences, anonymous session tokens) is stored locally in
chrome.storage.local. The Extension does not maintain a database of user data on any server.
3.2 Cloud Storage
If you sign in (iOS App), the following data is stored on our secure cloud servers (Supabase, hosted on AWS):
- Profile information (email, name, avatar URL);
- Subscription status and plan information;
- Saved words (when sync is enabled).
3.3 Security Measures
- All network communication uses HTTPS / TLS encryption;
- Database access is protected by Row-Level Security (RLS) policies — users can only access their own data;
- Server-side functions execute with minimal required permissions.
4. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Apple (Sign-In, IAP) — App | Authentication, payments | Apple ID token | Apple Privacy |
| Google (Sign-In) — App | Authentication | Google OAuth token | Google Privacy |
| Supabase | Auth, database, edge functions | Profile, subscription, anonymous session | Supabase Privacy |
| RevenueCat — App | Subscription management | User ID, entitlements | RevenueCat Privacy |
| YouTube | Video content, subtitles | Video requests via web | YouTube / Google Privacy |
| Google Translate — Extension | Line-level subtitle and word translation | Selected text | Google Privacy |
| Groq API — Extension | Detailed word translation via AI | Selected word | Groq Privacy |
| Google Gemini — Extension | Lyrics batch translation | Lyrics text | Google Privacy |
| Upstash Redis — Extension | Rate limiting | Anonymous user ID, request counts | Upstash Privacy |
AI translation and language detection in the iOS App is performed through our own server-side edge functions. The text you send is processed in real-time and is not retained after the response is returned.
5. Browser Extension Permissions
The Chrome Extension requests the following permissions:
- webRequest — to detect subtitle file downloads (VTT/SRT) from streaming services;
- storage — to save user preferences and dictionary locally;
- activeTab — to interact with the current tab's video player;
- scripting — to inject the subtitle overlay into video pages;
- host_permissions (
*://*/*) — required because subtitle URLs vary across streaming platforms and CDN domains; the Extension only activates its features on supported sites (YouTube, Netflix, Spotify, Yandex Music and other sites with VTT/SRT subtitles).
6. Data Retention
- Local data — retained on your device until you uninstall the App / Extension or clear its data;
- Cloud profile data (App) — retained as long as your account exists;
- Subscription records (App) — retained for legal and accounting purposes;
- Rate-limit counters (Extension) — expire automatically after 12 hours;
- Processed text (translations, punctuation) — not retained after real-time processing.
7. Your Rights
You have the following rights regarding your personal data:
- Access: You can view your profile and saved data within the App;
- Correction: You can update your profile through your Apple or Google account;
- Deletion: You can delete your account and all associated data from the App's Settings screen. Account deletion is permanent and removes all cloud-stored data within 30 days. For the Extension, simply uninstall it to remove all local data;
- Export: Contact us to request a copy of your data;
- Withdraw consent: You can revoke access by signing out and deleting your account.
8. Children's Privacy
LinguaCap is not directed at children under 13 years of age (or the applicable minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including the United States (where our cloud infrastructure is hosted). We ensure appropriate safeguards are in place for such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App or Extension. The "Last updated" date at the top reflects when this policy was last revised.
11. Contact Us
If you have questions or concerns about this Privacy Policy or your data, contact us at:
Email: baursaqdev@gmail.com
Baursaq
Astana, Kazakhstan