Privacy Policy
Last updated: 28 August 2026
This page explains what personal data Lankio Learn (learn.lankio.it) actually collects, how it is used, and who it is shared with.
This document describes what the Lankio Learn application actually does, based on its real technical implementation. It is provided for transparency and is not legal advice and has not been reviewed or certified by a lawyer. Sections marked [Requires legal review] are incomplete and should be finalized with a qualified legal advisor before being relied on for compliance.
1. Who we are
Lankio Learn is an Italian-learning platform for Sinhala speakers, built and operated by Lankio. You can reach us at info.lankio@gmail.com or info@lankio.it.
[Requires legal review] The registered legal entity name, business registration number, and registered address for Lankio have not been specified anywhere in the application and are not included here. These should be added once confirmed.
2. Data we collect
If you don't create an account (guest use): your lesson progress, streak, XP, and saved words are stored only in your own browser's local storage. This data is never sent to our servers, is not visible to us, and is lost if you clear your browser data or switch devices — unless you create an account, at which point you can choose to save it to your account.
If you create an account: we collect the email address and name you provide (or that your Google account provides, if you sign in with Google), and store your learning activity — XP, streaks, completed lessons, quiz results, saved dictionary words, and flashcard review data — so your progress is available across devices.
If you purchase Premium access: payment card details are entered directly into Stripe's own secure checkout page and are never seen, transmitted to, or stored by Lankio Learn's own servers. We keep a record that a purchase happened (product, status, and Stripe's reference for it) so we know your account has premium access.
If you contact us (by email or WhatsApp), we receive whatever information you choose to include in that message. Starting a WhatsApp chat from this site is entirely your choice — we do not automatically collect, store, or message WhatsApp numbers.
3. How we use this data
- To provide the learning platform and track your progress.
- To maintain your account and, where applicable, your premium access.
- To respond to messages you send us.
- To keep the service secure (for example, detecting abuse of login or download endpoints).
We do not sell your data, and we do not use it for advertising or profiling.
4. Cookies and local storage
See our Cookie Policy for full detail. In short: we use only the cookies strictly necessary to keep you signed in, and first-party browser storage for guest progress. We do not use analytics, advertising, or tracking cookies.
5. Who we share data with
The only external services that process data on our behalf are:
- Supabase — hosts our database, handles authentication (including Google sign-in), and stores premium PDF files in private storage. Our database is hosted on AWS in the EU (Frankfurt, eu-central-1).
- Stripe — processes premium payments. Stripe receives your payment details directly; we do not.
We do not use any analytics, advertising, or marketing/tracking service.
6. Data retention
We keep your account data for as long as your account exists. Records of a purchase are kept for as long as necessary for accounting/tax purposes.
[Requires legal review] No specific retention periods (e.g. exact number of days/years) have been defined for account data, inactive accounts, or purchase records. Precise retention schedules should be set and documented here.
7. Your rights
If you are in the EU/EEA or UK, data protection law (GDPR/UK GDPR) gives you rights over your personal data, including the right to access, correct, delete, or export it, and to object to or restrict certain processing. To exercise any of these, email us at info.lankio@gmail.com. There is currently no self-service "delete my account" button in the app — deletion requests are handled manually by email.
[Requires legal review] The specific supervisory authority you can complain to, and a formal response-time commitment for data requests, should be confirmed and added here.
8. Security
The site is served over HTTPS. Passwords are handled entirely by Supabase Auth and are never visible to us in plain text. Premium files are stored in a private bucket and only ever served through short-lived, signed links after your account's access is verified server-side.
9. Children
Lankio Learn is not directed at children and is not knowingly used to collect data from children under 16.
10. Changes to this policy
If how we handle data changes materially (for example, if we ever add analytics), we will update this page and, where required, the cookie consent mechanism described in our Cookie Policy.
11. Contact
Questions about this policy: info.lankio@gmail.com · info@lankio.it