1. Introduction
Welcome to ThaiLang
This Privacy Policy explains how we collect, use, and protect your information when you use our websites and apps (together the “Services”). This privacy policy should be read alongside our Terms which set out the terms applicable to use of our Services.
ThaiLang is operated by GCH TECHNOLOGY LTD in the United Kingdom, with its registered address at International House, 10 Beaufort Court, Admirals Way, London, E14 9XL.
The Data Controller for the Services is GCH TECHNOLOGY LTD.
Throughout this Privacy Policy, the terms "ThaiLang", "we", "our", "us" and "platform" refer to GCH TECHNOLOGY LTD.
By using ThaiLang, you agree to the collection and use of information in accordance with this Privacy Policy.
This Privacy Policy may be updated from time to time. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed. The “Last updated” date at the top of this page indicates when this policy was last updated.
2. Information We Collect
We collect personal information that you voluntarily provide to us, as well as certain information automatically when you use the Services. The types of data we collect depend on how you interact with ThaiLang.
2.1 Information You Provide to Us
For a better experience while using our Service, we may require you to provide certain personally identifiable information, including but not limited to:
- Name
- Email address
- Username
- Date of birth
- Country
- Profile information (such as profile picture)
We may also collect information when you:
- Create an account
- Contact us for support
- Communicate with us directly
This information is retained and used as described in this Privacy Policy.
2.2 Usage and Product Data
As part of our normal business operations, we collect and use data related to how you interact with the app, including but not limited to:
- Words and phrases learned
- Learning progress and activity
- Streaks and engagement behavior
- Features you use and interactions within the app
This data is used for:
- Product experience and improvement
- Feature development and optimization
2.3 Automatically Collected Information
We may automatically collect certain information when you use the Services, including but not limited to:
- IP address
- Device type and identifiers
- Operating system and app version
- Browser type and language
- Mobile carrier
- General location data
- Usage patterns, pages viewed, and interactions
This information helps us:
- Maintain and improve the app
- Diagnose technical issues
- Analyze usage and performance
2.4 Information from Third Parties
We may receive information about you from third-party services, including but not limited to:
- Google Sign-In
- Apple Sign-In
- App stores or platform providers
This may include information such as your name, email address, profile picture, and account identifiers, depending on your privacy settings with those services.
We use this information to:
- Maintain and improve the app
- Diagnose technical issues
- Analyze usage and performance
2.5 Analytics and Third-Party Services
The app uses third-party services that may collect information used to identify you, including:
- PostHog (analytics)
- Sentry (error tracking)
These services help us understand usage, monitor performance, and improve the app.
2.6 Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to collect information about your interactions with the Services. This includes tracking for analytics and advertising purposes.
3. How We Use Your Information
We acquire, hold, and process personal information for a variety of business purposes, including but not limited to the following:
3.1 Providing and Maintaining the Services
We use your information to:
- Create and manage your account
- Provide access to app features and functionality
- Track learning progress and activity
- Respond to questions, support requests, and feedback
3.2 Administrative and Operational Purposes
We may use your information to:
- Monitor and improve the performance of the Services
- Develop new features and functionality
- Verify user identity
- Communicate with you about your account, updates, or changes to our policies
- Process transactions and manage subscriptions
- Prevent fraud, abuse, or illegal activity
- Enforce our Terms and policies
3.3 Analytics and Product Improvement
We use data (including aggregated and anonymized data) to:
- Understand how users interact with the Services
- Improve user experience and feature design
- Conduct internal research and analysis
- Measure the effectiveness of features and updates
3.4 Marketing and Communications
Where permitted by applicable law, we may use your information to:
- Send updates, offers, or relevant information about the Services
- Provide content, features, or promotions that may be of interest
You may opt out of marketing communications at any time by contacting us or using available unsubscribe options.
3.5 Research and Development
We may use personal information to create anonymized and aggregated data that does not identify you. This data may be used to:
- Improve existing features
- Develop new products and services
- Conduct research and analysis
3.6 Mobile Device Data
When you use the app on a mobile device, we may collect and use information such as:
- Device identifiers
- Operating system and settings
- General location data
This information may be associated with your account and used to improve app functionality and performance.
3.7 Legal and Security Purposes
We may use your information where necessary to:
- Comply with legal obligations
- Respond to lawful requests from authorities
- Protect our rights, users, and the integrity of the Services
3.8 Other Uses
We may use your information for other purposes disclosed to you at the time of collection or with your consent.
4. Data Retention
ThaiLang retains the personal information we collect as described in this Privacy Policy for as long as you use the Services or as necessary to fulfill the purposes for which it was collected, including to provide the Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business interests, enforce our agreements, and comply with applicable laws.
6. Third-Party Services
The Services may contain links to third-party websites, services, or applications that are not owned or controlled by us.
We do not control, endorse, or assume responsibility for the content, privacy policies, or practices of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with.
Your interactions with third-party services are at your own risk, and we are not responsible for how such third parties collect, use, or share your information.
6.1 Third-Party Integrations
ThaiLang may integrate with third-party services such as Google Sign-In, Apple Sign-In, analytics providers, and advertising partners.
These services may collect information in accordance with their own privacy policies. This may include setting cookies or similar tracking technologies on your device.
If you choose to interact with third-party features or services, you acknowledge that your information may be shared with those third parties as necessary to provide the functionality.
6.2 Public and Shared Content
Any information you voluntarily share in public areas or through third-party platforms may be visible to others and can be collected or used by third parties without restriction.
We are not responsible for how such information is used by others once it has been shared publicly or with third-party services.
6.3 Third-Party Payment Processing
We offer subscriptions and in-app purchases through third-party platforms, including the Apple App Store and Google Play.
These providers may collect certain information to process transactions, including billing and account details.
We do not collect or store your full payment or billing information. Your use of these payment services is subject to the terms and privacy policies of the respective providers.
7. Tracking & Advertising
We may use tracking technologies for:
- Analytics
- Advertising and marketing purposes
This may include collecting data across sessions and devices to improve our services and show relevant content.
8. Children’s Privacy
ThaiLang is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that such data has been collected, we will delete it promptly.
9. Security
We take reasonable administrative, technical, and organizational measures to protect your personal data.
We use industry-standard security technologies, including encryption in transit (such as Secure Sockets Layer (SSL)), to help protect information transmitted through the Services from unauthorized access or interception.
We restrict access to personal data to authorized personnel and service providers who need that information to operate, develop, or improve the Services.
We follow generally accepted industry standards to protect the personal data submitted to us, both during transmission and once it is received and stored.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate steps in accordance with applicable laws, including notifying relevant authorities and, where required, affected users.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed. The “Last updated” date at the top of this page indicates when this policy was last updated.
11. Data Deletion Requests
You may request deletion of your personal data at any time by:
- Using in-app account deletion features, or
- Contacting us directly at support@gchtechnology.com
We will process such requests in accordance with applicable laws.
12. Legal Basis for Processing
If you are located in the United Kingdom or the European Economic Area, we process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR).
We only process your personal data where we have a lawful basis to do so. These are:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account, providing app features, saving your learning progress and reviews | Performance of a contract |
| Processing and managing subscriptions and in-app purchases | Performance of a contract |
| Responding to support requests and communicating with you about your account | Performance of a contract; legitimate interests |
| Analytics, error tracking and product improvement (including PostHog and Sentry) | Legitimate interests |
| Keeping the Services secure and preventing fraud, abuse or illegal activity | Legitimate interests |
| Sending marketing communications | Consent |
| Non-essential cookies and tracking technologies, including for advertising | Consent |
| Complying with legal obligations and responding to lawful requests | Legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms. Our legitimate interests include understanding how the Services are used, fixing problems, improving our product, and keeping the Services and our users safe.
Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
13. Your Data Protection Rights
If you are located in the United Kingdom or the European Economic Area, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete personal data.
- Right to erasure: to ask us to delete your personal data in certain circumstances (see section 11).
- Right to restrict processing: to ask us to limit how we use your personal data in certain circumstances.
- Right to data portability: to receive personal data you have provided to us in a structured, commonly used and machine-readable format, and to ask us to transfer it to another organisation where technically feasible.
- Right to object: to object to processing based on our legitimate interests. You can object to direct marketing at any time, and we will stop.
- Right to withdraw consent: where we rely on your consent, to withdraw it at any time.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our spaced repetition system schedules your reviews automatically, but this only affects when words appear in your lessons.
To exercise any of these rights, contact us at support@gchtechnology.com. We may need to verify your identity before responding. We will respond within one month of receiving your request, although this may be extended by up to two further months for complex or numerous requests, in which case we will let you know. Exercising your rights is free of charge in most cases.
13.1 Right to Complain
If you are unhappy with how we have handled your personal data, we would appreciate the chance to address your concerns first, so please contact us. You also have the right to lodge a complaint with a data protection supervisory authority.
In the United Kingdom, this is the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
If you are located in the European Economic Area, you may contact the data protection authority in your country of residence.
14. Contact Us
If you have any questions about this Privacy Policy, you can contact us at: support@gchtechnology.com.