Privacy Policy
This policy explains what personal information Clozemaster collects, how we use it, who we share it with, how long we keep it, and the choices and rights you have. It covers the Clozemaster website, mobile apps, and related services (the "Service"). Terms not defined here have the meanings in our Terms and Conditions.
Effective date: November 3, 2026. Last reviewed: October 16, 2026.
The short version
- We collect what we need to run Clozemaster: your account details, your learning progress, and the content you create.
- We don't sell your personal information, share it for targeted advertising, or show third-party ads in Clozemaster.
- We use service providers, for hosting, email, payments, support, analytics, AI, translation, and audio, who process data on our behalf.
- Some features send text you write to an AI provider (OpenAI) to generate a response. We don't use what you write to train AI models. See section 5.
- You can delete your account at any time, and ask us for a copy of your data.
- Questions or complaints? Email [email protected].
Contents
- 1. Who we are
- 2. Information we collect
- 3. How we use your data, and our legal bases
- 4. Who we share data with
- 5. AI features
- 6. International transfers
- 7. How long we keep your data
- 8. Your rights and choices
- 9. Additional rights by region (United States, Canada, Australia, and New Zealand)
- 10. Cookies and opt-out signals
- 11. Security
- 12. Links to other sites
- 13. Changes to this policy
- 14. Contact us
1. Who we are
Clozemaster is operated by Language Innovation LLC, a company based in Massachusetts, USA ("we", "us"). We are the controller of the personal information described in this policy.
- Postal address: 240 Elm St, 2nd and 3rd Floor, Somerville, Massachusetts, 02144, USA
- Email: [email protected]
2. Information we collect
Information you give us
- Account information. Your email address, username, and password (stored only as a secure hash). If you sign in with Google or Apple, we receive your account identifier and the email and name they share with us.
- Profile and settings. Optional profile details such as your name, location, bio, and country, plus your timezone, app language, language choices, and notification preferences.
- Content you create. Collections and sentences you add, files and texts you upload or paste in to practice with, words and phrases you save with Quick Capture, image challenge answers, translation look-ups, comments and forum posts, and who you follow.
- Text you enter in AI features. See section 5.
- Speaking practice. In our mobile apps, your device's speech recognition turns what you say into text, and we receive only the text. Your device maker (such as Apple or Google) may process the audio under its own terms.
- Surveys, feedback, and other forms you send to us. Answers to onboarding questions and in-app surveys, feedback you send, and your messages to our support team.
- Gifts. If you buy Clozemaster Pro as a gift, the recipient's name and email address and your message to them. Please only give us someone's details if you're sure they'd be happy for you to.
- Privacy requests. The details you give us when you make a privacy request (see section 8).
Information we collect automatically
- Learning activity. The sentences you play, your answers, scores, streaks, review levels, daily stats, and other progress ("Activity Data"), and when you sign in and last used the Service.
- Device and technical information. Your IP address, browser type, device model and maker, operating system, app version, and error and crash reports.
- Usage and analytics. How you use the Service, recorded with a pseudonymous ID through our analytics tools (see section 4).
- Marketing attribution and experiments. Before and after you sign up, we may record the website that referred you, the page you arrived on, which of our own links or campaigns brought you to Clozemaster, and which version of a feature you see when we test changes.
- Push notification tokens, if you allow notifications.
Information from other sources
- Payment providers (see section 4) tell us about your purchases and subscription status. We never receive or store your full card number.
- Google and Apple send us your account details if you sign in with them.
- Gift buyers may give us your name and email if they buy you a gift.
Information we infer
We may label accounts based on how they use the Service, for example to decide who sees an onboarding tip or a discount offer, or to flag a username for moderation. Our staff may also keep notes about support or outreach conversations with you.
What we don't collect
We don't collect your precise or approximate location from your device, your date of birth, advertising identifiers (such as Apple's IDFA), biometric data, or your photo.
3. How we use your data, and our legal bases
The table shows each use and, for users in the EU, UK, and similar places, the legal basis we rely on.
| What we use it for | Information used | Legal basis (EU/UK) |
|---|---|---|
| Running your account and the features you use, including AI features, translations, audio, and speaking practice | Account, profile, content, activity, AI text | Contract: needed to provide the Service you signed up for |
| Personalizing your learning, such as which sentences and reviews you see | Activity Data, language choices | Contract |
| Processing payments, subscriptions, and gifts | Payment and purchase details, gift details | Contract; legal obligation for tax and accounting records |
| Service messages, such as password resets, receipts, and account notices | Email, account details | Contract |
| News and offers by email | Email, preferences | Legitimate interests |
| Push notifications | Push token, preferences | Consent, which you give in your device settings |
| Support and answering your messages | Messages, account and subscription details | Contract; legitimate interests in helping users |
| Understanding and improving the Service, including analytics, surveys, and testing changes | Usage data, device information, survey answers, experiment groups | Legitimate interests in improving Clozemaster; consent where the law requires it for cookies (section 10) |
| Measuring which of our own links and campaigns bring people to Clozemaster | Attribution data | Consent, which you give by accepting measurement cookies |
| Deciding who sees tips or offers in the app | Activity Data, inferred labels | Legitimate interests |
| Keeping the Service safe: preventing fraud, spam, and abuse, moderating content, and applying usage limits | IP address, device information, content, usernames, AI usage records | Legitimate interests in a safe, reliable service |
| Community features: forum, comments, follows, and public profiles | Username, profile, posts | Contract |
| Handling privacy requests and keeping records of consent | Request details, consent records | Legal obligation |
| Complying with the law, enforcing our Terms, and responding to legal claims | Any relevant information | Legal obligation; legitimate interests |
When we rely on legitimate interests, we have balanced them against your rights. You can object at any time (see section 8). When we rely on consent, you can withdraw it at any time. Withdrawing consent doesn't affect anything we did with your information before you withdrew it.
Do you have to give us this information? You need to give us an email address and password, or sign in with Google or Apple, to create an account. Everything else is optional, but some features won't work without it.
Automated decisions. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share data with
We don't sell your personal information or share it for targeted advertising. We share it only as described here.
Service providers
These companies process personal information on our behalf, under contracts that limit how they may use it. The types of provider we use, what we share with them and why, are below. For a full, current list, email [email protected].
- Hosting, databases, and storage: any of the information in section 2, to store your account and run the Service. For example, Amazon Web Services.
- AI, translation, and audio: text you enter or select, and for AI features a pseudonymous ID, to power AI explanations and feedback, translations, and text-to-speech audio (see section 5). For example, OpenAI.
- Customer support: your messages, email address, and account and subscription details, to answer your questions and fix problems.
- Analytics and crash reports: a pseudonymous ID, how you use the Service, device information, and crash reports, to understand how Clozemaster is used, fix bugs, and test improvements.
- Email: your email address, username, and the message we're sending, to send service messages and, unless you opt out, news and offers.
- Push notifications: your device's push token and the notification, to send the notifications you've turned on.
- Network delivery and security: IP address, browser and device information, and your requests to our site, to deliver the Service quickly and block bots, spam, and attacks.
- Content moderation: comments, posts, usernames, and other content you add, to screen for offensive or abusive content.
- Content tools: content you choose to turn into a worksheet or image challenge, to create PDF worksheets and label images.
- Cookie consent: your cookie choices and a record of when you made them, to record and honor those choices.
- Internal tools: information in error alerts, admin reports, and scheduled calls, so our team can monitor the Service, run reports, and schedule calls with you.
Crash reports sent to our crash-reporting provider include your user ID so we can help you if something goes wrong.
Payment providers
Paddle, RevenueCat, the Apple App Store, and Google Play process your payments. Paddle (UK) acts as the seller of record for some purchases, and Apple, Google, and Paddle handle your payment details under their own privacy policies.
Sign-in providers
If you sign in with Google or Apple, they process your sign-in under their own privacy policies.
Other users
Some features are designed to share:
- Your username and public profile, comments, activity, and who you follow are visible to other users.
- Forum posts are public. Our forum runs on Discourse, which we host ourselves; when you use it, we pass it your username, name, email, bio, and avatar.
- Collections you choose to share.
- If you use Clozemaster with your teacher, your teacher sees your results.
Legal reasons and safety
We may share information when we believe in good faith that the law requires it, such as a court order, or to protect the rights, safety, or property of our users, the public, or Clozemaster. This includes reporting illegal content to the authorities where the law requires it.
Business transfers
If our business changes hands, such as in a merger or sale, your information may be transferred as part of it, and this policy will continue to apply to it.
5. AI features
Some features use artificial intelligence to help you learn, for example explaining a sentence, checking and correcting what you write, answering grammar questions, suggesting writing prompts, generating example sentences, and translating words and phrases. When you use them, the text you enter or select is sent to the provider that powers them, so that it can generate a response.
We currently use OpenAI for these features, under a data processing agreement. Along with your text we may send a pseudonymous identifier derived from your account, not your name or email address, which lets OpenAI detect misuse of its service. Anything you type yourself is sent as you wrote it.
Text you add may also go to our translation, text-to-speech, and moderation providers (section 4) so we can translate it, create audio for it, or screen it for offensive content.
Some AI features save what you enter so you can come back to it, such as Quick Capture entries and follow-up questions about explanations. Others, such as Free Type Feedback, don't save your writing. When you ask for a grammar exercise to be created, we keep what you asked for, to help us decide what content to make next. We record how much you use AI features, to apply usage limits and prevent abuse. Section 7 says how long we keep these.
AI training. We don't use your personal information, including what you write in AI features, to train AI models, including large language models. If that changes, we will update this policy and tell you before it applies to what you write.
Please don't enter sensitive personal information, such as health information or other people's personal details, into AI features or other content you add. AI can make mistakes.
6. International transfers
We are based in the United States, and our main systems are in the US. If you use Clozemaster from outside the US, your information is transferred to and processed in the US. Some providers process it elsewhere: DeepL in Germany, iubenda in Italy, Paddle in the UK, and our outsourced support team in Ecuador and Bosnia and Herzegovina. Some providers operate globally.
Where the law requires it, we protect these transfers with:
- the EU-US Data Privacy Framework, its UK Extension, and the Swiss-US Data Privacy Framework, for US providers certified under it
- the European Commission's Standard Contractual Clauses, with the UK Addendum for UK data and the amendments Switzerland requires for Swiss data, for providers that aren't certified
- adequacy decisions, where the destination country has one (for example, the UK for EU data, and the EU for UK data).
You can ask us for more information about these safeguards using the contact details in section 14.
7. How long we keep your data
We keep personal information only as long as we need it for the purposes in section 3. Most of it is kept until you delete your account; the exceptions are below.
| Information | How long we keep it |
|---|---|
| Account, profile, learning activity, content you create, support messages, and survey answers | Until you delete it or your account |
| Comments and forum posts | After you delete your account, your comments and forum posts will remain visible |
| Payment and purchase records | 6 years, for tax and accounting |
| Records that show we met legal obligations, such as consent and privacy requests | Up to 6 years |
| IP addresses and device information | Up to 1 year |
| Pre-signup, attribution, and experiment identifiers | 13 months |
| Anonymized or aggregated data that doesn't identify you | Indefinitely |
When you delete your account, we delete your personal information within 10 days, except the records above and anything the law requires us to keep longer.
8. Your rights and choices
Depending on where you live, you have some or all of these rights:
- Access: ask what information we hold about you and get a copy.
- Portability: get your information in a format you can take elsewhere.
- Correction: ask us to fix information that's wrong or incomplete. You can also edit most details in your account settings.
- Deletion: delete your account in your account settings, or ask us to delete your information.
- Objection and restriction: ask us to stop or limit certain uses, including any use based on legitimate interests. You can always object to direct marketing.
- Withdraw consent: change your cookie choices with "Your Privacy Choices" in the footer, unsubscribe using the link in any marketing email, or turn off notifications in your device settings.
How to make a request. Use this form or email [email protected]. To protect your account, we check that the request comes from the email address on the account, and may ask for more information if we can't tell. We reply within one month. If a request is complex, we may need up to two more months, and we'll tell you why.
Requests are free. If someone sends more than two requests of the same type in 12 months, or a request is clearly unfounded or excessive, we may charge a reasonable fee or decline, and we'll explain why in writing.
Complaints. If you're unhappy with how we handle your information, please tell us first at [email protected] or through this form. We'll acknowledge your complaint within 30 days and tell you what we're doing about it. You can also complain to your local data protection authority. In the UK, that's the Information Commissioner's Office; in the EU, it's the authority in your country; in Switzerland, it's the Federal Data Protection and Information Commissioner (FDPIC).
9. Additional rights by region
United States
If you live in California, Colorado, Connecticut, Virginia, or another US state with a consumer privacy law, you have the rights in section 8, plus the rights below.
- Right to know the categories and specific pieces of personal information we hold about you, and how we got, use, and disclose it.
- Right to a list of recipients. Depending on your state (for example Delaware, Maryland, Minnesota, and Oregon), you can ask for the categories of third parties, or the specific third parties, we have disclosed your personal information to. Section 4 lists the categories, and we'll give you the full list on request.
- Right to opt out of the sale of personal information, sharing for targeted advertising, and profiling that produces legal or similarly significant effects. We don't do any of these.
- Right to limit the use of sensitive personal information. We use it only to provide the Service, as the law allows.
- Authorized agents. Someone you authorize can make a request for you. We may ask for proof of the authorization and confirm your identity with you directly.
- Appeals. If we decline your request, you can appeal by replying to our decision or emailing [email protected] with "Appeal" in the subject. We'll respond within 45 days. If you're not satisfied, you can contact your state attorney general.
- No discrimination. We won't treat you differently for using your rights.
What we collected in the last 12 months. The table uses the categories in California law.
| Category | Examples | Source | Disclosed for a business purpose to |
|---|---|---|---|
| Identifiers | Email, username, name, account ID, IP address, device ID | You; your device; Google or Apple sign-in | Hosting, support, email, analytics, and security providers |
| Customer records | Name, email, payment and subscription records | You; payment providers | Payment and support providers |
| Commercial information | Purchases, subscription status, gifts | You; payment providers | Payment, support, and analytics providers |
| Internet or other electronic activity | Learning activity, usage data, crash reports, attribution data | Your device | Analytics, crash reporting, and hosting providers |
| Audio or similar information | Text of what you say in speaking practice. Your device or browser's speech service (for example, Google in Chrome) turns your speech into text, and we receive only the text. | You | Hosting providers |
| Inferences | Labels used to tailor tips and offers | Created by us | Hosting and analytics providers |
| Sensitive personal information | Account login (username or email plus password) | You | Hosting providers |
| Content you create | Sentences, uploads, AI feature text, posts | You | AI, translation, text-to-speech, moderation, and hosting providers |
We don't sell personal information or share it for cross-context behavioral advertising. We don't knowingly sell or share the personal information of anyone under 16.
California "Shine the Light". California residents can ask us once a year, free of charge, which personal information we shared with third parties for their own direct marketing in the previous calendar year. We don't share personal information for that purpose. To ask, email [email protected].
We use the information in this table for the purposes in section 3 and keep it for the periods in section 7.
Canada
If you live in Canada, we handle your information under Canada's federal privacy law (PIPEDA) and, where it applies, Quebec's private-sector privacy law (Law 25). We rely on your consent, which may be express or implied depending on the situation, for the uses in section 3. You can withdraw it at any time, subject to legal or contractual limits, though some features may stop working. You have the access and correction rights in section 8.
The person responsible for privacy at Clozemaster is our CEO, reachable at [email protected]. Your information is stored and processed outside Canada, as described in section 6, where authorities may be able to access it under local law.
If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
Australia and New Zealand
If you live in Australia or New Zealand, you can ask to access or correct your information at any time (section 8). If you don't give us information we need, we may not be able to provide the Service, manage your account, or respond to your requests. We disclose personal information to service providers outside Australia and New Zealand, in the countries listed in section 6.
If you're unhappy with how we handled a complaint, you can contact the Office of the Australian Information Commissioner or New Zealand's Office of the Privacy Commissioner.
10. Cookies and opt-out signals
On our website we use cookies and similar technologies to keep you signed in, remember your settings, protect forms from bots (Google reCAPTCHA), record your cookie choices (iubenda), and, where you allow it, for analytics (Amplitude) and embedded videos (YouTube, from Google). In our apps, analytics run without cookies. We don't use advertising cookies. See our Cookie Policy for details, and use "Your Privacy Choices" in the footer to change your choices.
Some pages embed YouTube videos, which load only after you allow YouTube cookies. YouTube may then set cookies and receive your IP address and viewing activity.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of optional cookies.
Do Not Track. There's no common standard for "Do Not Track" signals, so the Service doesn't respond to them. We honor Global Privacy Control as described above.
11. Security
We use reasonable technical and organizational measures to protect your information. These include encryption in transit and at rest for our main database, and access limited to the staff and support agents who need it. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects your information, we'll tell you and the authorities where the law requires it.
12. Links to other sites
The Service links to sites and services we don't control. For example, dictionary look-ups may open Wiktionary or YouTube in the app, or sites such as DeepL, Forvo, or Tatoeba in your browser, which then receive the word you looked up and your device's IP address. Their own privacy policies apply to them.
13. Changes to this policy
If we make material changes to the policy, we'll tell you before they take effect, for example by email or a notice in the Service. The date at the top shows when it last changed.
14. Contact us
Language Innovation LLC, 240 Elm St 2nd and 3rd Floor, Somerville, MA 02144, USA
Email: [email protected]. Privacy requests and complaints: this form.
Last revised: November 2, 2026