Privacy policy

The short version

Mulingo needs an email address to sign you in. We store your profile and learning progress so they follow you to a new phone. Teachers can store student names. We don't sell data, we don't show third-party ads, and the app has no analytics or crash-reporting tools. You can delete your account in the app at any time.

Who we are

Mulingo is run by Hmujo LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Hmujo LLC decides how your data is used. For anything in this policy, email hey@mulingo.app. "We" means Hmujo LLC.

What we collect and why

Your account

We store your email address so you can sign in. When you sign in, we send a six-digit code to that address. We keep only a scrambled (hashed) copy of the code, and it stops working after 5 minutes. After sign-in, your phone holds a session token that lasts up to 180 days. We keep only a hashed copy of that too.

Your profile

We store the name you enter, your birthday and the avatar you choose. The app uses your age to pick the right learning path and speech pace, and it checks that a teacher account belongs to an adult. Subscribers can take a profile photo with the camera. If you do, the photo is stored with your account data on our server. We don't show it to other users.

Your learning data

While you are signed in, the app copies your learning data to our server so you can restore it on another device. This includes lessons finished, words and sentences you know, game results, streaks and quests. It also includes your settings and setup answers, such as language, course, role, English level and school grade.

Teacher data

If you use teacher tools while signed in, the same sync stores your classes, student names, attendance, scores and grades, and the words and sentences you add to teaching boxes.

Class and game names

A student who joins a class types their name. The app asks for a first and last name. Our server keeps the name and the time they joined in that class's list. Teachers can also add names to the list. For pair practice, the server keeps the pairs, scores and winners. For a live end-of-chapter game, it keeps the player name, answers and score.

Invite codes

When you enter a family or teacher invite code, we store the name you give and the time. The owner of the code can see that name.

Connection data

Our server receives your IP address with each request. The API uses it to limit how many login codes one address can ask for, and holds that count in memory for up to an hour. It isn't stored with your account. Standard server logs may also record IP addresses and request paths.

What stays on your phone

• Camera: the app asks for it to scan class QR codes, and for the subscriber profile photo. QR scanning happens on the phone and those camera images aren't stored or sent.
• Speech: the voices you hear come from your phone's built-in speech system. Word lists aren't sent anywhere to be spoken.
• Microphone: Mulingo doesn't record your voice.
• Location, contacts and photo library: Mulingo doesn't use them.

Who else handles your data

• Hetzner hosts our server and database.
• Brevo delivers the login email. It receives your email address and the message with your code.
• Apple sells subscriptions through the App Store and handles payment. We never see your card or billing details.
• RevenueCat tells the app whether a subscription is active. It receives a random user ID (our account ID once you sign in, not your email or name), your purchase and subscription history, and device details such as model, OS version, app version, language and country.
• Other Mulingo users see what the feature needs: a teacher sees the names and results in their class, and the owner of an invite code sees the names that joined with it.

Each company has its own privacy policy. We may also share data if the law requires it, or if Hmujo LLC or the app is sold to another company. We will tell you first in that case. We don't sell personal data.

Analytics and advertising

The app contains no analytics tool, no crash reporter and no advertising network. It doesn't ask to track you and doesn't use the IDFA, Apple's advertising ID.

We may advertise Mulingo on Apple Search Ads. To learn which campaign led to an install, the RevenueCat SDK collects an attribution token from Apple's AdServices. We use this to see which ads work. We don't combine it with data from other companies' apps or websites.

Children

Children use Mulingo, and part of it is made for them. These points apply to every child who uses it.

• A parent or guardian should set up a young child's account, with the parent's own email address, and stay involved. The app doesn't check who is holding the phone, and it has no step that proves a parent agreed. So we rely on you to do this.
• Thailand: under the Personal Data Protection Act (PDPA), a person under 20 is generally a minor. A child under 10 needs a parent or guardian's consent. For older minors, parental consent may also be needed, depending on what the minor can legally do alone.
• United States: under the Children's Online Privacy Protection Act (COPPA), a child under 13 needs a parent's consent before an online service collects their personal information.
• European Union and United Kingdom: under the GDPR, a child under the age set by their country, between 13 and 16, needs a parent's consent.
• A parent or guardian can ask to see, correct or delete a child's data at any time, and can withdraw consent. Email hey@mulingo.app. See "Deleting your data" below.
• If we learn that we hold a child's data without the consent the law requires, we will delete it.
• There are no third-party ads and no chat between users. Children's data isn't used to build advertising profiles.

Teachers, schools and class lists

• Teachers enter or collect student names, often children's names. A teacher or school should do this only if they have the right to, under their school's rules and local law. That may mean telling parents or getting their consent first. Where a nickname or first name is enough, use that.
• A class list is tied to a private room code, carried in the class QR code and join code. The code is the only key. Anyone who has it can see that class's names, so share it only with your class.
• Class lists aren't linked to a student's account. Deleting a student's account doesn't remove their name from a class list. A teacher, student or parent can ask us to remove it. Email hey@mulingo.app with the class code and the name.

How long we keep data

• Account, profile and synced data: until you delete your account.
• Login codes: until used, and they stop working after 5 minutes.
• Sessions: up to 180 days, or until you log out.
• Class lists, pair practice and class lesson sessions: removed in routine cleanup once 180 days pass with no change.
• Live game rooms: removed in routine cleanup once 3 hours pass with no activity.
• Subscription records at RevenueCat and Apple: kept under their own policies and our tax and accounting duties.

Deleting your data

In the app, open Settings and tap Delete account. This removes your account, profile, synced data, sessions and invite codes from our live database right away, and clears Mulingo's data from that phone. You can't undo it. If you use Mulingo on more than one phone, delete the app from the others.

Deleting your account doesn't do these things, so please note them:

• It doesn't cancel a subscription. Cancel in your Apple Account settings.
• It doesn't remove names from class lists. See the section above.
• It doesn't delete your RevenueCat record. Email us and we will ask RevenueCat to delete it.

If you can't get into the app, or you are a parent, guardian or teacher asking for someone else, email hey@mulingo.app. Tell us the account email, or the class code and name. We may ask you to confirm that you have the right to make the request.

Your rights

Depending on where you live, including under Thailand's PDPA and the GDPR, you may have the right to:

• see the personal data we hold about you and get a copy
• correct it
• delete it
• object to or limit how we use it
• move it to another service
• withdraw consent, where we rely on consent
• complain to your data protection authority, such as Thailand's Personal Data Protection Committee

Email hey@mulingo.app to use any of these. We aim to answer within 30 days.

Why we are allowed to use your data

• To run your account, sync your progress and provide subscriptions, because you asked for the service.
• To keep the service safe, limit abuse and measure our ads, because we have a legitimate interest in doing so.
• For a child's data, on the consent of a parent or guardian where the law requires it.
• To meet tax, accounting and other legal duties.

Data outside your country

Hmujo LLC is in the United States and our server runs in a Hetzner data center in the United States. RevenueCat is based in the United States and Brevo in France. So if you use Mulingo in Thailand, your data leaves Thailand. Data protection law in those countries may differ from yours.

Security

The app talks to our server over HTTPS. We store login codes and session tokens only as hashes. No service is perfectly secure, so we can't promise that nothing will ever go wrong. If a breach affects your data, we will tell you and the authorities as the law requires.

This website

mulingo.app sets no cookies and has no analytics, ads or third-party scripts. Our web host sees normal request data, such as your IP address, when you load a page.

Changes

If Mulingo starts collecting something new or sharing data in a new way, we will update this page before that version ships, and change the date at the top.

Contact

Hmujo LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. hey@mulingo.app