Privacy Policy and account deletion

Apps covered by this policy

This Privacy Policy covers the listed Lingofly and Hoopi apps. It describes app data, its use and sharing, analytics consent and account deletion.

In short

• There is no sign-up: the account creates itself, with a key the app invents on your device.
• The app neither asks for nor stores an email, a phone number or an address — not even when you sign in with Google or Apple.
• Optional lesson statistics are off by default and are collected only after you consent.
• You can delete the account yourself, inside the app, and it happens at once and for good.

App developer: Zorqubit Labs LLC. Questions and requests — support@zqbl.org.

The company is registered in Missouri, United States. Company website: [zqbl.org](https://zqbl.org/).

Optional learning statistics

Your profile has two independent permissions: “Help improve learning” and “Help measure advertising effectiveness”. Both are off by default. Lesson analytics permission does not enable advertising measurement. You can change your choices at any time; refusal does not affect purchases, lessons or Pro access.

For advertising measurement, the app uses Tenjin (Tenjin, Inc.), a data processor working on our behalf. After separate consent, the app and our service send install and app-open events, selected learning and verified purchase events, a random installation identifier, device and app-version information, the advertising identifier when available, and installation-source information. On iOS, the identifier for this developer (IDFV) may be used. Tenjin also receives the connection address. These are not anonymous data. They are used for attribution and measuring advertising effectiveness.

To deliver selected events, we link the app installation to your permission. This link is deleted when permission is withdrawn, the account is deleted, or after 90 days without a link update. Technical delivery records are kept for up to 30 days. These periods do not change mandatory purchase accounting.

We do not collect optional events in advance while waiting for consent. A new permission does not send event or purchase history from before it was granted. After withdrawal, no new events are sent; already delivered records are not retroactively recalled.

Information on the third-party service, processing locations and its retention periods is available in the [Tenjin privacy policy](https://tenjin.com/privacy/) and [data processing terms](https://tenjin.com/tenjin-inc-data-processing-addendum/). The 30-day retention period for our lesson journal does not promise the same period at Tenjin. Account deletion removes our records; questions about deleting provider-held data can be sent to the support address on this page.

A consent request may appear on first launch, after an update or before a purchase if no choice has been made. “Not now” postpones it: the intervals are 1, 3, 7, 30, 60 and 90 days after the previous display. Requests stop after the last reminder. “Do not ask again”, explicit refusal or a saved permission stop repeated requests. The account stores the display count, next-request time and preference not to be reminded for this purpose.

The “Help improve learning” switch is off by default. With your consent, the app records screen and exercise types, outcomes, time in the foreground and technical error codes. Records are linked to your account; app and course versions are added only when known. Answer text, voice recordings, page addresses and payment secrets are excluded from this log.

The optional statistics also include steps in ordering a personal course and making a payment, responses to permission requests, mood selections and predefined answers to a question about the lesson. The internal event ID helps deliver a record without duplicates; session and attempt IDs link actions. Records also include the interface language, the learning language when known, app variant, network state and consent version. These records are linked to your account and are not anonymous.

To remember your choice, the server stores your internal account ID, permission or refusal, choice and consent versions, and the issue date and internal ID of the permission. The latest choice is kept until you delete the account; the choice-change log is limited to the latest 256 records, which are removed during cleanup after 30 days. When accounts are merged, previous permissions are disabled: these statistics can be enabled again through a new explicit choice.

In the browser, a randomly selected tenth of sessions with consent also records limited numeric measurements of screen display and response, layout shifts, resource loading and response time. These contain no resource addresses, screen content or error text. Measurements from before consent are never sent later.

This log is kept on the server for 30 days; the offline queue stays on your device for up to 7 days. You can turn the switch off: collection on this device stops immediately, and the app clears pending records and saves your refusal. If it cannot save your choice, the app tells you and offers a retry. Records already sent expire or are removed when you delete the account. Refusing does not affect lessons, progress or rewards.

The learning record needed to save progress and verify rewards is kept separately. Turning off optional statistics does not erase it; deleting your account removes both logs.

For new level checks, the server keeps the questions and course order, so a content update does not change a check already issued. You can start it within 90 days of its latest delivery, with another 7 days to send the result while offline. These snapshots belong to your account, expire, and are removed when you delete the account.

What data the app collects

What the app does not collect

• Email, phone, address. When you sign in with Google or Apple we take only the identifier and, if there is one, the name: the email address is not requested and there is nowhere in the database to keep it.
• Device hardware identifiers: IMEI and Android ID are not included in our lesson journal. The advertising ID may be used by a third-party service only after separate advertising-measurement permission.
• Location. The app has no location permission; the country is derived from the connection address on our own server, and the address itself is written nowhere.
• Photos, video and files. The app does not ask for access to the gallery or the camera.
• Diagnostics without consent. Optional error information in our lesson journal is collected only after permission to improve learning.

Who receives the data

The app’s main service providers are the 5 services listed below. The additional advertising-measurement service receives information only after separate consent and is described in the optional analytics section.

Everything that leaves the phone travels over a secure connection: the app makes no requests over plain http.

How to delete your account

Open the app from the list above that you use for learning. Deleting your account inside that app is the most reliable way: only there can we identify whose account it is.

1. Open the settings. On the home screen — the «⚙️ Settings and progress» button under the lesson card.
2. Scroll down to the «Account» block. It sits at the very bottom of the page, below the notification settings.
3. Tap «🗑 Delete account». A warning will appear saying the action cannot be undone.
4. Type the word «delete». Confirmation by typing rather than by a single button: an accidental tap must not erase a year of study.
5. Confirm. The account is erased at once. There is no grace period and no «bin» to take it back out of.

If the app is no longer on your phone

Write to support@zqbl.org and say how you signed in — Google, Apple or Telegram — and which language you were learning. We answer and carry out the request within 30 days.

What is deleted and what stays

Deleted completely and at once

• The profile: name, country, settings, the fingerprint of the device key.
• The Apple, Google and Telegram sign-in links — and with them the very possibility of getting back into this account.
• All progress: exercise answers, the repetition schedule, the streak, achievements, the courses assembled for you.
• Personal plans, together with the request text you wrote yourself.
• Reminders and notification subscriptions: the address through which your phone could be reached disappears with them.
• Family subscription seats — both yours in someone else's family and other people's in yours.
• Friends and invitations.

What stays

• Records of purchases and consents: plan, amount, date and a note of the consents given at payment. Without them a refund dispute cannot be settled and we cannot account to the store. They contain no name and no contact details.
• Revoked device keys: SHA-256, a random record ID, and the revocation time and reason are retained indefinitely. Account deletion removes the profile link and usage timestamps; a hash of the deleted account ID is kept only to acknowledge a repeated deletion request. These records contain no original key, IP address, phone name or User-Agent. The digest prevents an old key from creating a new account.
• Lesson statistics rows: how many lessons there were on a given day and how long they lasted. These too hold no name and no contacts — only an internal number that, after the deletion, corresponds to no person at all.

Next

• Personal data processing policy
• Data processing and GDPR
• Subscription terms