Privacy Policy – Levingo

Effective: 1 January 2026 · Last updated: 27 April 2026

    Levingo is committed to protecting the personal data of its users. This policy describes what data we collect, why, and how we protect it – in accordance with the EU General Data Protection Regulation (GDPR).
  

1. Data Controller

Name: Viktor Lengyel

Capacity: Individual

Email: hello@levingoapp.com

Website: levingoapp.com

2. Data We Collect

Data	Purpose	Legal Basis	Retention
Email address	Registration, login, notifications	Contract performance	Until account deletion
Password (encrypted)	Authentication	Contract performance	Until account deletion
Child's name, age, character	Personalised learning	Contract performance	Until profile deletion
Learning progress	Continuation, statistics	Contract performance	Until account deletion
Payment data	Subscription management	Contract performance	Stored by Stripe – not by us
Device identifier (hashed)	Trusted device recognition	Legitimate interest	180 days
Anonymous visitor data (device type)	Analytics, development	Legitimate interest	12 months
Email address (newsletter)	Sending updates and announcements	Consent	Until unsubscription

3. Children's Data

Levingo provides learning content for children, but accounts and subscriptions may only be created by a person aged 18 or over (parent or guardian).

Child profiles contain only a name, age group, and character selection – we do not collect personal data directly from children.

4. Data Sharing with Third Parties

Stripe – payment processing (compliant with EU data protection standards)
Email provider – sending transactional emails (e.g. verification emails)
We do not sell or share your data with third parties for marketing purposes.

5. Cookies

Levingo uses only strictly necessary cookies (e.g. maintaining login state). We do not use third-party marketing or tracking cookies.

6. Your Rights

Right of access – you may request a copy of the data we hold about you
Right to rectification – you may request correction of inaccurate data
Right to erasure – you may request deletion of your account and data
Right to data portability – you may request your data in a machine-readable format
Right to withdraw consent – you may unsubscribe from the newsletter at any time

Send your requests to hello@levingoapp.com. We will respond within 30 days.

7. Data Security

Passwords stored with bcrypt encryption
HTTPS encrypted connection
JWT token-based authentication
We do not store card details – these are handled by Stripe under the PCI DSS standard

8. Complaints

If you believe your data is not being processed in accordance with GDPR, you have the right to lodge a complaint with your national supervisory authority. In Hungary:

naih.hu · ugyfelszolgalat@naih.hu · +36-1-391-1400

For users in other EU countries, please contact your local Data Protection Authority (DPA).

9. Changes to This Policy

If this policy is updated, registered users will be notified by email. Continued use of the service constitutes acceptance of the updated terms.

← Back