MiuLingo is an educational app designed with privacy at its core: we do not show ads, we do not track your behavior for marketing purposes, and we never sell your data. Your educational progress is securely synced via Google Cloud Firebase. You can request full deletion of your account and personal data at any time.
Section 01
Data Controller
The Data Controller responsible for processing personal data collected through the MiuLingo Application is:
| Field | Details |
|---|---|
| Controller / Developer | Emmanuele Villa (Shadowings) |
| Location | Italy / European Union |
| Contact Email | emmanuele.villa89@gmail.com |
| Website | emmanuelevilla.com |
| Application | MiuLingo (com.shadowings.gero) |
| Platforms | Android, Web |
Section 02
Legal Basis for Processing
The processing of user personal data is carried out on the following legal bases under Article 6 of the GDPR:
| Legal Basis | GDPR Article | Applicable Scope |
|---|---|---|
| Contract Performance | Art. 6(1)(b) | Account management, synchronization of learning progress, unlocking in-app purchases (PRO Version) |
| Legitimate Interest | Art. 6(1)(f) | Technical diagnostics, crash monitoring (Crashlytics), improving app performance, and maintaining service security |
| Legal Obligation | Art. 6(1)(c) | Compliance with applicable statutory requirements and lawful requests from public authorities |
Section 03
Categories of Data Collected and NOT Collected
3.1 Data Voluntarily Provided by the User
- Email address: provided when registering an optional Firebase account.
- Password: stored in encrypted, one-way hashed format exclusively by Firebase Authentication; the Controller never has access to plaintext passwords.
3.2 Learning Progress & Gamification Data
- Curriculum progress: unlocked chapters (Chapters 1–11), stars earned (
stars), perfect quizzes (perfect), explanations viewed (explanations). - Gamification state: experience points (
experience), hearts available (hearts), daily study streak (strike), timestamps of last open and last quiz. - Preferences & Builder: favorite hieroglyphs and vocabulary words, visual character customization (Alyn, Nilo, Zeta, Masko), UI language preference (
it,en,de,es), words created and saved in the Hieroglyph Builder.
3.3 Technical & Diagnostic Data (Firebase Analytics & Crashlytics)
- Anonymized Firebase instance ID, device or browser model, Android operating system version or browser version on the Web version, app build version.
- Aggregated anonymous usage metrics (e.g. lesson started, chapter completed) and non-identifying crash logs for technical bug fixes.
3.4 Data NOT Collected
The Application never collects:
- No precise GPS geolocation data.
- No camera, microphone, or address book / contacts access.
- No payment card or bank account numbers (all transactions are securely handled by Google Play Store).
- No biometric or special categories of sensitive personal data under Article 9 of the GDPR.
Section 04
Purposes of Processing
| Purpose | Description | Legal Basis |
|---|---|---|
| Educational Service Delivery | Providing access to lessons, quizzes, compendium, and the hieroglyph builder tool | Contract Performance |
| Cloud Synchronization | Securely saving and restoring progress, customizations, and saved words across devices | Contract Performance |
| In-App Purchase Management | Verifying entitlement status to the Full Version (PRO) and advanced chapters | Contract Performance |
| Technical Diagnostics & Stability | Monitoring app reliability, resolving crash reports, and optimizing user experience | Legitimate Interest |
| Security & Abuse Prevention | Preventing unauthorized API access, automated bot misuse, and safeguarding data integrity | Legitimate Interest |
Section 05
Firebase Authentication – Accounts & Guest Mode
MiuLingo supports both anonymous guest mode and authenticated user accounts powered by Firebase Authentication (Google LLC), across all supported platforms (Android, Web):
- Email & Password: identity verification through secure JWT tokens and salted cryptographic password hashing.
- Google Sign-In: federated authentication via Google Sign-In (Android) or the browser's Google sign-in popup (Web version), transmitting only the unique Google user identifier and verified email to Firebase.
- Guest / Anonymous Mode: allows immediate offline and temporary cloud usage via an anonymous user identifier without requesting an email address.
Section 06
Firebase Firestore – Cloud Database
User learning progress, preferences, and saved custom words are stored in real-time in Cloud Firestore (Google LLC) under the secured path users/{userId}.
Strict Firebase Security Rules ensure that each user can only read and write their own data. On Android, Firestore includes local on-device caching to guarantee offline functionality; on the Web version this local persistence lives in the browser's storage.
Section 07
Analytics & Crashlytics (Technical Diagnostics)
We use Google Analytics for Firebase and Firebase Crashlytics (Google LLC) to maintain application health and resolve crashes quickly.
All diagnostic data is anonymized and aggregated. No personally identifiable information (PII) or private user text is tracked.
Section 08
No Third-Party Advertisements
MiuLingo contains no third-party advertisements (no banners, no interstitials, no rewarded video ads, no AdMob SDK). Your learning experience is completely free from ad interruptions and commercial profiling.
Section 09
In-App Purchases (PRO / Full Version)
Users can optionally purchase the Full Version (PRO) to unlock advanced chapters and enable saving custom hieroglyphic words in the Builder.
All transactions are processed directly by Google Play (Google LLC) on Android. The Controller only receives the cryptographic purchase receipt token and never collects or stores credit card numbers or banking data.
Direct purchase is not currently available on the Web version: a user who has already unlocked the PRO Version on Android and signs in with the same account will automatically see it unlocked on Web too, through the cloud synchronization described in Section 6.
Section 10
Study Reminders & Local Notifications
On Android, the Application includes an optional daily study reminder feature that triggers a local device notification at the user's chosen time.
These reminders are scheduled and executed entirely on your local device via native operating system alarms. No reminder times or personal schedules are transmitted to external servers. This feature is not available on the Web version.
Section 11
Local Storage & Android Widget
MiuLingo stores user state locally using Jetpack DataStore (Preferences DataStore) on Android, and the browser's storage on the Web version. This data lives within the sandboxed app (or browser) storage, inaccessible to other applications or sites.
On supported Android devices, an optional home screen Widget displays current daily study streak and heart counts directly from local DataStore storage without network overhead; this feature does not exist on the Web version.
Section 12
Data Retention
| Data Category | Storage Location | Retention Duration |
|---|---|---|
| Account & Learning Data (Firestore) | Firebase Cloud Servers | Retained until the user requests account deletion |
| Local Data (DataStore / browser storage) | User's Local Device or Browser | Retained until app uninstallation, site data deletion, or manual data reset |
| Diagnostic Logs (Crashlytics / Analytics) | Google Cloud Servers | Up to 14 months in aggregated, anonymized format |
Section 13
International Data Transfers
Firebase cloud servers are hosted by Google LLC across the EU and the United States. Any transatlantic data transfer is safeguarded under the EU-U.S. Data Privacy Framework and European Commission Standard Contractual Clauses (SCC).
Section 14
Your GDPR Privacy Rights
Under Articles 15–22 of the GDPR, you have the following enforceable rights regarding your personal data:
You also have the right to lodge a complaint with your competent supervisory authority (e.g. your national Data Protection Authority or the Italian Garante Privacy at garanteprivacy.it).
Section 15
Data Security
We apply robust technical and organizational security measures:
- Encryption in Transit: all communication with Firebase servers is strictly conducted over HTTPS using TLS 1.3 / 1.2.
- Encryption at Rest: all Firestore cloud databases are encrypted by Google using AES-256 keys.
- App Sandboxing: local device storage is isolated from third-party apps by Android's security model, and from other sites by the browser's storage isolation on the Web version.
- Granular Security Rules: user authentication is verified before any database read or write operation.
Section 16
Children's Privacy
MiuLingo is an educational app suitable for learners of all ages. We do not knowingly collect personal data from children under 13 (or the minimum legal age in your jurisdiction) without verifiable parental consent. If we become aware that a child's data has been collected without authorization, we will delete it immediately.
Section 17
Changes to this Privacy Policy
We may update this Privacy Policy periodically. Substantial changes will be communicated via an in-app notice or by posting an updated version on this website with a revised revision date.
Section 18
Contact & Account Deletion
For any privacy inquiries or to permanently delete your account and all associated cloud data, please:
- Email us at: emmanuele.villa89@gmail.com
- Or visit our self-service deletion request page: MiuLingo Account Deletion Form
© 2026 MiuLingo · All rights reserved · Terms & Conditions · Account Deletion