Lantern Privacy Policy

Last updated: August 1, 2026

Lantern ("Lantern," "we," "our," or "us") provides language-learning services through our Android and iOS applications, browser extension, websites, and related services (collectively, the Services).

This Privacy Policy explains what information we collect, how we use and disclose it, how long we retain it, and the choices available to you. The information processed can vary depending on which Lantern product and features you use. Lantern is the operator of the Services and the entity responsible for the processing described in this Policy.

Information We Collect

Account and identity information

• Automatically created account identifiers. The mobile apps may automatically


create an anonymous or guest Supabase authentication account, an authentication
identifier, and a persistent Lantern user ID when you first use the app. This allows
the app to work before you choose to sign in and enables synchronization and account
recovery features.

• Sign-in information. If you sign in with Google, we receive information that


Google makes available to us, such as your email address, Google account identifier,
and basic profile information. We do not receive your Google password.

• Account metadata. We may store an account creation date, username or display name,


authentication status, and information needed to associate your sign-in credential
with your Lantern user ID.

Learning and app data

Depending on the features you use, we may collect and store:

• Saved vocabulary, translations, definitions, source and context sentences, word


collections, and review history

• Learning progress, exercise results, streak and activity information, reading goals,


and language proficiency level

• Language choices, accessibility and appearance preferences, reader settings, and


other app or extension settings

• Saved reading content, notes, quotes, books, conversation history, corrections, or


similar content when a feature saves or synchronizes that content to Lantern

In the current mobile apps, saved vocabulary, word collections, selected settings, and streak or activity information can be synchronized with Lantern's servers, including for an anonymous account. Some information, such as certain notes, saved books, quotes, reader preferences, lesson progress, and caches, may be stored only on your device unless the app identifies it as synchronized. Data stored only on your device is not available to Lantern and is normally removed when you clear the app's data or uninstall the app, subject to your device's backup behavior.

Content you submit for processing

When you ask Lantern to translate, simplify, define, analyze, or discuss text, we process the text and related inputs you choose to submit, such as the source and target languages, proficiency level, and relevant saved vocabulary. This content is sent through Lantern's API infrastructure and may be sent to the language-processing provider needed to return the result.

Lantern does not add submitted text to your account as a permanent history unless the feature tells you that the content will be saved, you choose to save it, or collection is expressly enabled in a clearly identified diagnostic or pre-release environment. Service providers may process request content under their own retention and security terms.

Browser-extension context

When you actively use the browser extension on a webpage, Lantern may process the page URL, page content or selected text needed for the requested feature, and the resulting translation or simplification. The extension does not collect your general browsing history or monitor pages on which you do not use a Lantern feature.

Website data and cookies

When you visit a Lantern website, we may use cookies and similar local-storage technologies to operate the site, remember choices, measure traffic, and understand how you first found Lantern. Our first-touch cookie may contain a randomly generated Lantern ID, the first landing-page URL and timestamp, UTM campaign parameters, a Google Ads click identifier (`gclid`) if present in the URL, and a Google Analytics client ID if one is available. The Lantern first-touch cookie is configured to expire after approximately 90 days.

Lantern websites may also use Google Analytics and Google Tag Manager, which can set or read their own identifiers and collect page-view, device, referral, and interaction information. Local storage may remember non-sensitive choices such as a selected language. You can remove or block cookies and local storage using your browser settings, although doing so may reset saved choices or affect some site functionality.

Technical, security, and diagnostic information

We and our infrastructure providers may automatically process:

• IP address and an approximate region derived from it
• Device or browser type, operating system, app or extension version, language, and


time zone

• Lantern user ID, analytics or session identifiers, request timestamps, and API request


metadata

• Crash, error, performance, security, and diagnostic information, which may include


the page URL or feature context where an error occurred

The current mobile release does not remotely transmit the app's console logs. Our API and hosting providers may still generate ordinary network, security, and server logs when the mobile app communicates with the Services.

Analytics information

We may collect product analytics such as feature interactions, user flows, session and app-version information, language settings, text length, processing duration, and whether a result was served from a cache. Analytics may be associated with a Lantern user ID, session identifier, or analytics identifier so we can understand use across sessions.

The Lantern websites may send analytics to Google Analytics, and the browser extension may send analytics to Lantern, PostHog, and Google Analytics. The current mobile builds do not send product analytics through Firebase Analytics.

Production analytics are designed to use event and aggregate metadata rather than the text you submit. In diagnostic alpha or pre-release builds, an expressly enabled debug event may include original and processed text to investigate output quality. Such a build must clearly disclose that behavior before collection. Content-bearing debug analytics are not part of production analytics.

Communications and deletion requests

If you contact us, request support, or ask us to delete an account, we collect the information in your message and any information reasonably needed to verify ownership and complete the request. Do not send us passwords or authentication codes.

Information We Do Not Intentionally Collect

Lantern does not intentionally collect:

• Payment-card or bank-account information; Lantern currently has no paid


subscriptions

• Contacts, precise location, health data, photos, microphone recordings, or camera


data

• Personal documents, emails, or messages that you have not selected or submitted to a


Lantern feature

Please do not submit sensitive personal information unless it is necessary for the feature you have chosen to use.

How We Use Information

We use information to:

• Create, authenticate, secure, and administer anonymous and signed-in accounts
• Provide translations, simplifications, dictionary results, exercises, reading tools,


synchronization, and other requested features

• Save and synchronize vocabulary, settings, and learning progress
• Maintain, troubleshoot, secure, and improve the Services
• Measure feature performance and understand product usage where analytics is enabled
• Detect fraud, abuse, security incidents, and violations of our terms
• Respond to support, privacy, access, correction, export, and deletion requests
• Comply with legal obligations and enforce our legal rights

Where applicable law requires a legal basis, we process information as necessary to provide the Services you request, based on our legitimate interests in operating and securing Lantern, with your consent where required, or to comply with law. You may withdraw consent at any time, but withdrawal does not affect processing already carried out lawfully.

How We Disclose Information

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising, and Lantern does not display third-party ads.

We may disclose information in the following limited circumstances:

• Service providers. Vendors process information on our behalf to provide hosting,


authentication, language processing, analytics, software delivery, and related
infrastructure.

• Legal and safety reasons. We may disclose information when reasonably necessary


to comply with law or valid legal process, protect users or the public, investigate
abuse, or defend legal rights.

• Business transfers. Information may be transferred as part of a merger,


financing, acquisition, reorganization, or sale of assets, subject to appropriate
notice and safeguards required by law.

• At your direction. We may disclose information when you ask us to or intentionally


use a feature that sends content to another service.

We require service providers that process personal information on our behalf to protect it to a standard at least equivalent to the protections described in this Policy, use it only for the services they provide to Lantern, and comply with applicable privacy and security law.

Service Providers

The providers used can vary by product, platform, build, location, and feature.

Links above lead to third-party policies. Those policies describe the providers' own practices and may change independently of this Policy.

Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy:

• Account and synchronized learning data are generally retained while your account


remains active. After a verified account-deletion request, we delete or de-identify
the account and associated personal data within 30 calendar days, except for limited
information that must be retained as described below.

• Locally stored mobile data remains on your device until you delete it, clear the


app's storage, or uninstall the app, subject to operating-system or device backups.

• Website cookies and local storage remain until their stated expiration, until you


remove them using browser controls, or until they are replaced. The Lantern
first-touch cookie is configured for approximately 90 days; third-party cookies are
retained according to the relevant provider's settings and policy.

• Feature inputs and outputs are processed for the time needed to complete the


request. They are retained longer only if you save them, a feature is designed to
maintain history, or an expressly disclosed diagnostic environment records them.

• Analytics, diagnostic, network, and security records are retained only for the


period reasonably necessary to analyze product performance, troubleshoot problems,
secure the Services, and prevent abuse. Identifiable records are deleted or
de-identified when no longer needed for those purposes.

• Support and deletion correspondence may be retained as long as reasonably needed


to resolve the request, demonstrate compliance, prevent fraud, or meet legal
obligations.

We may retain limited information when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or enforcement of legal rights. Data may remain for a limited period in encrypted or access-controlled backups until those backups are overwritten through the ordinary backup cycle. Aggregated or de-identified information that can no longer reasonably identify you may be retained longer.

Account and Data Deletion

Deleting the Lantern app or browser extension does not by itself delete data already synchronized with Lantern.

You can request account deletion in either of these ways:

• In the current Android app, open Settings → Account → Delete Account. This opens


the public deletion-request page described below.

• If you no longer have access to the app, visit


withlantern.ai/account-deletion or email
support@withlantern.ai with the subject
Lantern Account Deletion Request.

We may take reasonable steps to verify that you control the account. Account deletion removes the account rather than merely deactivating it and includes associated identifiers, authentication records, synchronized vocabulary, collections, settings, learning progress, saved content, and other account-linked personal data, except for limited retention described in the Data Retention section. We will confirm completion or contact you if more information is required.

Your Choices and Privacy Rights

Depending on where you live, you may have the right to:

• Know whether we process your personal information and obtain access to it
• Correct inaccurate personal information
• Request a portable copy of information you provided
• Request deletion of your account and associated personal information
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent
• Appeal a decision we make about a privacy request, where applicable
• Lodge a complaint with your local data-protection authority
• Exercise your rights without unlawful discrimination

Where a product presents an analytics or privacy control, you can use that control to change your choice. You can also limit website analytics using browser cookie controls or contact us about identifiable analytics data. The current mobile builds do not send product analytics through Firebase Analytics.

To exercise another privacy right, contact support@withlantern.ai. We may need to verify your identity and may deny or limit a request when permitted by applicable law.

Security

We use technical and organizational measures designed to protect information, including HTTPS/TLS for data in transit, access controls, authenticated requests for account-linked operations, and restricted access to production systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International Data Transfers

Lantern and its service providers may process information in countries other than the one where you live. Where required, we use recognized transfer mechanisms and appropriate safeguards for international transfers. You can contact us for more information about safeguards applicable to your information.

Children's Privacy

Lantern is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires parental consent at a higher age, you must meet that requirement before using the Services. If you believe a child has provided personal information without the required consent, contact us so we can investigate and delete it where appropriate.

Changes to This Policy

We may update this Privacy Policy to reflect changes to the Services, our data practices, or applicable law. We will update the Last updated date and provide additional notice in the app, extension, website, or by email when required or when a change materially affects your privacy rights. We will request consent again when required by law.

Contact Us

For privacy questions, requests, or complaints, contact Lantern at:

• Email: support@withlantern.ai
• Account deletion:


withlantern.ai/account-deletion