Privacy policy

1. Who operates LuloKit

LuloKit is operated by Jenn & Pau. Its initial market is the United States. Send privacy requests to soporte@lulokit.com.

2. Information we use

• English and Spanish: sign-in email, chosen name or nickname, practice answers, initial assessment results, review dates and practice days for streaks. The administrator can view authorized learners’ progress and manage access. Nicknames are allowed; we do not ask for a birth date. Language sign-in does not subscribe you to marketing emails.
• Free practice: all topics require free registration and a verified email, with no card. Email, answers, points and practice days are saved in your account so you can continue on other devices and progress can be reviewed in the control panel. A local copy helps recovery if the connection fails. You may choose to keep previous practice without an account; existing progress is not automatically replaced.
• Account and access: email, chosen username, account identifier, access status and role. Supabase securely manages passwords; passwords are not stored in lesson progress or LuloKit’s username table. Verify your email when registering and use it to recover your password. Changing it keeps your account and progress. Existing email-link sign-in remains available.
• Product progress: current step, decisions and answers saved separately for each activity.
• Assists: requested assist type, status, approximate use and balance movements.
• Interest list: email, selected future product and consent date when someone selects “I’m interested”.
• General email list: email, optional name, topic, subscription source (including a verified purchase), notice shown, status and unsubscribe date.
• Email interaction: delivery, bounce, complaint, unsubscribe, open and click events reported by the provider. Opens are approximate; clicks and conversions take priority when evaluating usefulness.
• Purchases: purchase email, product, amount, currency and transaction or mandatory reversal identifiers.
• Technical diagnostics: page path, browser type and limited error details when someone with an active session encounters an issue.

LuloKit does not receive or store full card numbers. Stripe processes payment details on its secure page.

3. Where answers are saved

Each activity keeps a separate device copy. When you sign in, only that product’s progress is synced with the corresponding Supabase account. Database access controls allow each account to read only its own information.

4. How Lulo works

Language hints, examples and corrections are prepared within the lessons. Answers are checked against each activity’s rules.

The microphone is optional; you can type all answers. If you speak, your browser may process voice with its recognition provider and share recognized text with the activity. LuloKit does not store recordings on its server. Recognizing words does not evaluate accent or pronunciation.

In archived tools, a generated assist could send necessary draft context to OpenAI. Those historical conditions do not describe the prepared hints in language lessons.

Advertising and preferences

LuloKit currently loads no ads or advertising trackers. The site is registered with Google AdSense, and an ad unit and privacy drafts have been prepared. This does not mean Google has approved the site or that advertising is active in your browser.

The planned location is after a free lesson, separated from answers and the continue button and labelled “Advertising”. Ads or clicks will not be required for hearts, points or access. Previous US$17 purchases retain the ad-free option in both languages; payment is not required to complete the lessons.

Free practice offers “Privacy preferences” to reject advertising or withdraw permissions. This choice is saved separately from progress, for both languages in this browser. It is not sent to Google or the panel. Google’s review option remains disabled until its integration is ready. If storage is unavailable, blocking remains active on the page and a notice explains that it was not saved.

Before advertising is enabled, we will review data handling, ad categories and applicable consent or rejection choices. Because children use this experience, ad requests will use child-directed treatment, without personalization or remarketing. Practice answers, voice, account email and progress will not be sent to Google for advertising.

If AdSense is enabled, Google may receive technical data needed to serve and measure ads, such as IP address, browser and device information. Cookies and identifiers will depend on applicable treatment and allowed preferences. Details and preference controls will be published before activation. See how Google uses information on sites using its services.

5. Why we use information

• Provide access and save progress.
• Deliver, debit or return Lulo assists.
• Notify someone about a future product only when requested.
• Send the Opportunity Radar, with advice, resources and opportunities, to direct subscribers or purchasers in Jenn’s or Pau’s stores who saw the purchase-subscription notice. Previous and new unsubscribes are respected. Other purchases retain the choice made at payment.
• Respect preferences, unsubscribes, bounces and complaints before preparing an audience.
• Confirm purchases and mandatory reversals without duplicating benefits.
• Protect accounts, investigate errors and prevent abuse or fraud.
• Respond to support requests and meet legal obligations.

We do not sell personal information or use it for behavioral advertising.

6. Necessary providers

Supabase provides accounts, email preferences and database services; Stripe and Link process payments; OpenAI handles requested assists; Resend handles access emails and Radar/news according to the recorded source and subscription notice; Cloudflare provides hosting, protection and DNS. Access and marketing emails use separate configurations. Providers process information according to their function and terms.

7. Retention and security

Information is retained while needed by the account or product, required for accounting or legal obligations, or necessary for a dispute. Marketing keeps minimum consent and unsubscribe history to demonstrate and respect preferences. Confirmation links expire; technical events are retained as needed. We use individual access, restricted permissions, encrypted connections, private tables and verified payment-notification signatures.

No system is infallible. If an incident affects personal information, we will investigate and notify where applicable.

8. Your choices and requests

Request access, correction, export or deletion by emailing support. Marketing emails include an unsubscribe option; unsubscribing does not cancel purchases, access, progress or necessary service communications. Some transactions and a minimum suppression record may be retained where required by law, fraud prevention or a dispute.

Your website language choice is saved in this browser to suggest the version you prefer. It is separate from lesson progress and advertising preferences. You can switch between Español and English at any time.

9. Children

Language paths are designed for family learning and include activities for children. Free registration uses a verified email and saves progress in an account. A parent or responsible adult should accompany registration for a minor and may request review or deletion of account data. Clearing browser data removes only the local copy, not the account data.

Children’s accounts should be managed with a parent or responsible adult. Sign-in email and progress are account data and are not used for marketing. Contact support to review or delete them. This policy does not replace a parental-consent mechanism: the site currently has no automatic age or parental-consent verification.

The optional microphone may use the browser’s provider. Type to avoid that voice processing. Archived creator tools were intended for adults; their conditions do not change the family audience of language paths.

10. Changes

We may update this policy when products, providers or applicable requirements change. We publish the current version date and provide notice where a material change requires attention.