Privacy Policy
Last updated: 2026-10-14
This document explains how Learby (learby.io) — operated by WheatNd LLC (Улаанбаатар, Монгол Улс) — collects, uses and protects your personal data. We do NOT sell your data or use it for advertising.
1. What we collect
- Account data: username, e-mail address, phone number (if provided), password (stored only as a one-way hash — we cannot read it), profile and cover images.
- Sign in with Google, Facebook or Apple: if you choose one of these, we receive only your user ID, name and e-mail address from that service (with Apple's "Hide My Email", the relay address). The name is used once to suggest a username, the e-mail becomes your account contact address, and the ID lets us recognise you next time. For Apple sign-in we also keep Apple's authorization token, encrypted, so that we can revoke Learby's access when you delete your account. We NEVER receive your password, friends list, photos or posts, and we never post anything to these services.
- Learning data: words viewed, marked or learned, level, daily activity, progress through reading/writing/listening material, notes, likes, personal goals.
- Social content: chat (private and public), feed posts, comments, reactions, friend requests, notifications.
- Technical logs: login history, page visits, online status, IP address, browser and device type. IP addresses are used for security only and are never used to determine location.
- Notification tokens: push token from the mobile app, platform (Android/iOS), app version.
- Requests: PDF access requests, password reset requests, feedback, poll answers.
2. Why we use it
- To create your account, sign you in and identify you.
- To save your learning progress so you can continue where you left off and receive review reminders.
- To operate social features such as chat and the feed.
- To deliver notifications (chat, friend requests, announcements).
- For security — detecting attacks, fake accounts and abuse.
- To find and fix errors and improve the service.
3. Third parties
- Google Fonts — your IP address is visible to Google when fonts are loaded.
- Google Firebase Cloud Messaging (FCM) — used to deliver notifications to the mobile app. Notification tokens are passed to it.
- Google, Facebook (Meta), Apple — only if you choose to sign in with them: you sign in on their own page or sheet, and we receive only the data listed in §1. We do not send your Learby data to them.
- Cloudflare — protects and speeds up the website (CDN); all connections pass through it.
- We use no advertising networks and no analytics services (no Google Analytics, no Facebook Pixel).
- We do not sell or rent your personal data to anyone.
4. Cookies
- Only strictly necessary cookies are used: login session, "remember me", chosen language and display settings.
- There are no advertising or tracking cookies.
5. Retention and security
- Data is kept while your account is active. To request deletion see §7.
- Connections are encrypted with HTTPS. Passwords are stored as one-way hashes.
- Database backups are taken regularly; deleted data disappears from backups within 30 days.
6. Your rights
- View and correct your information — from the profile page.
- Delete your account and data — use Profile → "Delete account" or the Data Deletion page to erase everything yourself, immediately.
- If you signed in with Google, Facebook or Apple, you can also remove Learby in that service's settings (Facebook: Settings → Apps and Websites). This only removes the link — to delete your Learby data, use the step above.
- Questions or complaints: batuchiny@gmail.com
7. Children
- The platform is intended for users aged 13 and over. If we learn that an account belongs to a child under 13, we delete their data and close the account.
8. Changes
- We may update this policy. Significant changes will be announced on the site. The last-updated date is shown at the top of this page.