LangBytes · Policies & support
Privacy Policy
Effective July 15, 2026. Last updated November 8, 2026.
1. The short version
This box summarizes the Privacy Policy in plain language. The full policy below controls if there is any difference.
- We do not sell Personal Data, and we do not use it for targeted advertising or cross-context behavioral advertising.
- We collect only what we need to run LangBytes, such as account details, support messages, payment status, and usage and security information, depending on the features you use. Payment providers handle card details, and we do not store full card numbers.
- We do not use your content or Personal Data to train models, or let a provider train on it, without your separate, explicit opt-in.
- On request, we will give you your data, correct it, export it, and delete it, subject to the limited records we must keep.
- Your data may be processed in the United States and other countries where our providers operate. We take appropriate safeguards where law requires them and will tell you which on request.
- You must be at least 21. We do not offer, market, or target LangBytes in the European Union, the European Economic Area, the United Kingdom, or Switzerland.
- We will give advance notice of material changes to this policy.
2. Operator and scope
LangBytes is a product operated by Algodyne Corporation, a Delaware corporation. In this Privacy Policy, LangBytes refers to the product and Services, and Algodyne, we, us, or our refers to Algodyne Corporation.
This Privacy Policy explains how Algodyne collects, uses, shares, protects, and retains Personal Data when people use LangBytes websites, applications, accounts, support channels, and related services.
This policy does not apply to third-party websites or services that Algodyne does not control, including payment providers, sign-in providers, and integrations. Those services have their own privacy notices.
This policy applies to the LangBytes website, waitlist, accounts, language-learning service, support, and related transactional messages.
3. Regions we do not serve
Algodyne does not offer, market, or target the Services in the European Union, the European Economic Area, the United Kingdom, or Switzerland, and has not appointed a representative in any of them.
Algodyne does not block sign-ups. If you register for or use the Services from the European Union, the European Economic Area, the United Kingdom, or Switzerland, you do so on your own initiative and you are responsible for complying with the local law that applies to you. You acknowledge that Algodyne does not offer or target the Services in those regions, and you give the acknowledgment set out in the Terms before you register.
4. Personal Data we collect
Algodyne may collect the following Personal Data, depending on the features you use.
Account and identity information
- Email address, name or display name, and authentication identifiers.
- Login, session, passkey, multi-factor authentication, recovery, and security metadata where enabled.
- Account, language, notification, consent, and privacy settings.
Support and communications
When a user contacts Algodyne about LangBytes, Algodyne may collect contact information, messages, attachments, screenshots, logs supplied by the user, support history, and resolution notes.
Users should not send unnecessary content, credentials, recovery material, payment-card numbers, or other sensitive information through support channels.
Payment and commercial information
Where paid services are enabled, Algodyne may collect plan, entitlement, invoice, tax, payment-status, refund, dispute, and billing-event information, and customer and transaction identifiers issued by the payment provider. Payment providers process payment-card and banking details. Algodyne does not store full payment-card numbers.
Usage, technical, and security information
Algodyne and its service providers may process:
- IP address, browser type and version, operating system, device information, approximate region, referring URLs, request headers, and timestamps.
- Pages visited, feature usage, performance data, errors, and billing events.
- Login, session, authentication, audit, abuse, spam, fraud, rate-limit, and security signals.
Waitlist, account, learning, and service data
- Waitlist and acquisition data, including email address, consent records, referral and campaign attribution, landing source, and confirmation-delivery events.
- Account data, including email address, display name, password hash, email-verification status, language pair, session records, and accepted policy version.
- Learning data, including text encounters, learner notes, situation context, classifications, generated lessons, review activity, progress, and outcome evidence.
- Service data, including request metadata, security and abuse-prevention signals, operational events, support requests, and transactional-message status.
The current product accepts text encounters. It does not currently collect speech or audio recordings.
5. Cookies and similar technologies
LangBytes uses cookies, local storage, session storage, and similar technologies for authentication, security, requested preferences, consent records, and service operation. Optional analytics and other non-essential technologies are used only with consent where required.
6. How Algodyne uses Personal Data
Algodyne may use Personal Data to:
- Provide, operate, maintain, secure, and support LangBytes.
- Create and manage accounts, sessions, and permissions.
- Process subscriptions, payments, invoices, taxes, refunds, disputes, credits, usage, and entitlements where paid features are enabled.
- Send transactional, security, billing, support, legal, and user-requested communications.
- Detect and prevent abuse, spam, fraud, infringement, attacks, and policy violations.
- Maintain security and audit evidence for sensitive actions.
- Improve reliability, accessibility, usability, performance, and product quality using aggregated usage information and, where required, consented analytics.
- Comply with legal obligations and enforce Algodyne policies and contracts.
Algodyne does not sell Personal Data and does not use Personal Data for targeted advertising or cross-context behavioral advertising.
Algodyne uses this data to:
- Operate the waitlist, referrals, accounts, authentication, and support.
- Classify text encounters and generate personalized lessons and review material.
- Track learning progress, entitlements, billing events, and service delivery.
- Measure aggregate acquisition, product, reliability, and delivery performance.
7. AI-assisted features
Algodyne does not use Personal Data or content you submit to train an Algodyne-owned model or authorize a model provider to train on it without separate, explicit, opt-in authorization for the specific content and purpose.
AI-assisted and automated output may be inaccurate, incomplete, biased, derivative, infringing, mistranslated, or unsuitable.
Algodyne may process operational metadata about AI-assisted features that is needed for security, reliability, auditability, and quality control.
LangBytes sends relevant encounter text, learning context, and structured instructions to Cloudflare Workers AI to classify encounters and generate lessons. Model output is validated before it becomes a LangBytes learning artifact. Do not submit secrets or sensitive personal data that are unnecessary for language learning.
8. Legal bases
Where applicable law requires a legal basis or a stated ground for processing, Algodyne relies on the following:
| Purpose | Legal basis where applicable |
|---|---|
| Accounts, paid access, and core service features | Contract |
| Storing and processing content or data at the user's request | Contract |
| Features and actions requested by the user, such as imports, exports, sharing, or AI assistance | Contract and consent where required |
| Security, abuse prevention, fraud prevention, rate limiting, and service integrity | Legitimate interests and legal obligation where applicable |
| Transactional and service communications | Contract or legitimate interests |
| Optional marketing communications | Consent |
| Optional analytics and non-essential device technologies | Consent where required |
| Billing, tax, accounting, disputes, and legal compliance | Contract and legal obligation; otherwise Algodyne's legitimate interest in meeting applicable tax and accounting obligations |
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
9. Sharing and subprocessors
Algodyne may share Personal Data with:
- Cloud infrastructure, hosting, storage, security, content-delivery, observability, authentication, email, and support providers.
- Payment and billing providers where paid features are used.
- Integration, export, calendar, map, or other third-party providers when requested by the user or needed for a feature the user uses.
- Professional advisers, auditors, insurers, accountants, and legal counsel.
- Courts, regulators, law-enforcement bodies, or other parties where required by law or necessary to protect rights, security, or safety.
- A successor or transaction participant in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.
Algodyne uses third-party providers to operate LangBytes under contracts, data-protection terms, and security reviews where appropriate, and maintains information on the providers actually enabled for production processing and what each processes. Each provider processes Personal Data only to the extent needed for its stated purpose and also under its own privacy policy.
If you follow a link to a third-party site or service, that service receives the information your browser sends to it and handles that information under its own terms and privacy policy.
Cloudflare processes infrastructure, database, object-storage, queue, security, Turnstile, observability, Workers AI, and transactional-email data for LangBytes. The active categories are listed in the vendor and subprocessor register.
10. International processing
Algodyne Corporation is a United States corporation. Personal Data is processed in the United States and in other countries where Algodyne, its infrastructure providers, or its subprocessors operate. Some of that processing is necessary to provide the Services you ask for, such as hosting, payment processing, and email delivery, and by using the Services you understand that your Personal Data will be transferred to and processed in those countries.
Algodyne takes appropriate safeguards where applicable law requires them for a transfer, such as contract terms with providers, and will ask for your consent where the law requires it. For users in Japan, where the Act on the Protection of Personal Information requires your consent or other measures before Personal Data is provided to a third party in a foreign country, Algodyne will obtain that consent or take those measures. On request, Algodyne will provide details of the safeguards that apply to a particular transfer. Algodyne does not state that any specific transfer mechanism applies to its processing unless the corresponding contractual and operational evidence exists.
Cloudflare operates a global service, so data may be processed outside the place where it was collected.
11. Retention
Algodyne retains Personal Data only for as long as reasonably necessary for the purposes collected, including service operation, user instructions, security, abuse prevention, billing, tax, accounting, disputes, backups, audit integrity, and legal compliance.
| Data type | Retention approach |
|---|---|
| Account information | Retained while the account is active and for a limited period afterward where legally or operationally necessary |
| Support records | Retained while needed to provide support and to resolve legal, security, or quality matters |
| Security and audit records | Retained for service integrity, abuse prevention, incident investigation, and legal compliance |
| Billing and tax records | Retained as required for accounting, tax, fraud-prevention, chargeback, and legal obligations where paid features are enabled |
Deleting an account or a request record may not immediately remove information from backups, security logs, legal records, billing records, already-delivered exports or emails, caches, or third-party archives.
LangBytes retention and deletion
Unconverted waitlist records are reviewed for deletion after 24 months. Account and learning data are retained while the account is active. After a valid deletion request, personal data is erased and only a deletion record without personal content (identifiers, timestamps, and receipt codes) is retained; stored model outputs are erased shortly afterwards. Consent, security, abuse-prevention, delivery, billing, dispute, complaint, backup, and deletion evidence may be retained longer where reasonably necessary or required by law.
Account holders can start the verified deletion process from the account surface. Waitlist members and former account holders can submit a deletion request to the legal contact below.
12. Security
Algodyne uses technical and organizational controls intended to protect Personal Data, including encrypted transport, access controls, least-privilege production access, authentication controls, environment separation, monitoring, and data minimization.
No service can guarantee absolute security. Users are responsible for protecting credentials, devices, browsers, sessions, recovery material, and email accounts.
LangBytes uses access controls, encryption in transit, credential hashing, audit evidence, and service isolation.
13. Rights and choices
On request, Algodyne will:
- Give you access to your Personal Data.
- Correct inaccurate Personal Data.
- Delete your Personal Data.
- Export your Personal Data to you.
- Stop optional marketing communications to you.
- Honor your withdrawal of consent.
To the extent Algodyne agrees or the law that applies to you requires, you may also:
- Object to or restrict certain processing.
- Opt out of certain sale, sharing, targeted advertising, or profiling.
- Appeal certain privacy-request decisions.
Privacy requests can be sent to privacy@langbytes.com (support@langbytes.com as a fallback). Algodyne will respond within a reasonable time and in any case within the time the applicable law requires. Algodyne may verify identity before completing a request. Some information may be retained where necessary for security, legal, billing, tax, fraud-prevention, audit-integrity, backup, or dispute purposes.
14. Japan (APPI)
For users in Japan, Algodyne handles personal information in line with the Act on the Protection of Personal Information (APPI), including purpose specification, use within stated purposes, appropriate security controls, and procedures for requests concerning retained personal data.
Because the Act requires your consent before Personal Data is provided to a third party in a foreign country, a user in Japan who ticks the checkbox described in the Terms to agree to this Privacy Policy consents to their Personal Data being provided, so that LangBytes can be provided to them, to the third-party service providers in the United States and in other countries where they operate that are described in "International processing".
15. California privacy notice (CCPA/CPRA)
If California privacy laws apply to a user or to Algodyne, California users may have rights to know, access, correct, delete, and port Personal Data, and to opt out of certain sale, sharing, targeted advertising, or sensitive-information uses.
LangBytes's current posture is that it does not sell Personal Data and does not use Personal Data for cross-context behavioral advertising. Where legally required, Algodyne will honor applicable opt-out preference signals such as Global Privacy Control for browser-based sale, sharing, or targeted-advertising choices.
16. Children
LangBytes is intended only for people who are at least 21 years old.
Algodyne does not knowingly collect Personal Data from anyone under 21, and LangBytes does not offer a parental or guardian-consent path. If Algodyne learns that a person under 21 supplied Personal Data or created an account, Algodyne will disable the relevant access and delete the information unless continued retention is legally required.
17. Changes to this policy
Algodyne may update this Privacy Policy as LangBytes, providers, laws, or data practices change. The current policy will be posted on the LangBytes legal page with its effective and last-updated dates.
Algodyne will not make surprise changes. For a material change, including one that expands how Personal Data is used or shared, Algodyne will give you at least 30 days' notice by email or by a prominent notice in the product before it takes effect, except where the law requires a change sooner. A new use that needs your consent will wait for that consent.
18. Language
Translations of this Privacy Policy, including the Japanese version, are provided for convenience. If there is any difference or conflict between a translation and the English version, the English version controls, except that where you are a consumer and the Japanese version you were shown is more favorable to you, the Japanese version applies to you.
19. Contact
- Privacy requests, legal notices, and policy questions: privacy@langbytes.com (support@langbytes.com as a fallback)
- Operator and controller: Algodyne Corporation, Delaware, United States. Algodyne's address and the name of its representative are provided without delay on request to privacy@langbytes.com.