Privacy Notice

1. In short

We only process the data necessary to operate the Service and personalize your learning. We do not sell your data, we do not show advertising, and we do not share your information for advertising purposes. Our only business model is subscription.

2. Data we collect

Your account data. When you sign up with Google, we receive your name, your email address, and, where applicable, your profile photo and language, according to your Google account permissions.

Your in-app interaction data. Your study activity and progress, level-assessment results, decks and content you create, preferences, and the messages you send to the Coach and the language companions, including voice notes.

Subscription data. Your subscription status. Payments are processed by Stripe; we do not store your full card details.

Technical data. Basic information necessary for security and operation, such as your IP address, device type, and browser.

We do not collect data about you from external sources beyond what you provide through your use of the Service and your sign-in with Google.

3. How we use your data

We process your data for the following purposes:

• Provide, maintain, and personalize the Service.
• Measure your language level and adapt content to your progress.
• Generate tailored content through artificial intelligence.
• Manage your account and your subscription.
• Communicate with you about the Service.
• Ensure security, prevent fraud, and comply with legal obligations.
• Improve the Service.

By using Lemma, you consent to the collection and processing of this data for those purposes. The basis for processing may be the performance of the contract, your consent, our legitimate interest in operating and improving the Service, or compliance with the law, as applicable.

4. Processing with artificial intelligence and third parties

To operate the Service, we share certain data with providers that act on our behalf:

• Artificial intelligence providers, to whom what you write or say is sent in order to generate content and responses.
• Google, as the sign-in provider.
• Stripe, as the payment processor.
• Hosting and cloud infrastructure providers that store and process the Service's data.

These providers process the data under their own policies and only to provide their services to us. We do not authorize their use of it for advertising directed at you.

5. Sensitive information: an important warning

What you share with the Coach, the companions, or other features is processed automatically and transmitted to the AI providers. Treat that information as if you were sharing it freely.

Please do not enter sensitive personal data — health, financial, biometric, credentials, official identifiers — or information whose disclosure could harm you or others. You decide what information you provide.

6. What we do NOT do with your data

We do not sell or rent your personal data. We do not use your data for advertising, nor do we share it with third parties so they can show you ads. We do not build profiles for advertising purposes.

7. International transfers

Lemma is a global service. Your data may be processed and stored in countries other than yours, including the United States, where some of our providers operate. We seek to ensure that such transfers have appropriate safeguards under applicable law.

8. Data retention

We retain your data while your account is active and for as long as reasonably necessary for the purposes described or to comply with legal obligations. When you request the deletion of your account, we will delete or anonymize your data, except for what we are required to keep by law.

9. Security

We apply reasonable technical and organizational measures to protect your data. However, no system is completely secure, and we cannot guarantee the absolute security of information.

10. Your rights

Under Mexican law (LFPDPPP), you have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (ARCO rights), as well as to withdraw your consent.

Depending on your country of residence, you may also have rights to portability, erasure, restriction of processing, objection, and to not be discriminated against for exercising them (for example, under the European Union's GDPR or California's CCPA).

To exercise any of these rights, write to us at hola@trylemma.io. We will handle your request in accordance with applicable law. You may also turn to the data protection authority in your country if you believe your rights were not respected.

11. Cookies and local storage

We use cookies and local storage only for the essentials: keeping you signed in, remembering your preferences, and enabling the Service to function. We do not use advertising or tracking cookies for commercial purposes.

12. Minors

The Service is intended exclusively for people over 18 years of age. We do not intentionally collect data from minors. If you believe a minor has provided us with data, contact us at hola@trylemma.io to delete it.

13. Changes to this Notice

We may update this Privacy Notice when necessary. We will post the current version with its update date and, when changes are significant, we will endeavor to notify you by reasonable means.

14. Contact

If you have questions about this Notice or about the processing of your data, write to us at hola@trylemma.io.