Privacy Policy

Last updated 25 October 2026

This policy explains what Château collects when you use the app or this website, why we collect it, who else processes it, how long we keep it, and how to get rid of it. It covers the Château apps for iPhone and Android, the web app at app.learnchateau.com, and learnchateau.com, all operated by Chateau Languages Inc., a Delaware corporation ("Château", "we", "us"). We are responsible for your personal information under this policy.

What we collect

What	Why we have it	Where it lives
Your email address and password	To create your account, let you sign in on any device, and send the emails your account needs (confirming your address, resetting your password)	Firebase Authentication. We never see your password; Google stores it hashed.
Your name, as you give it at sign-up	To greet you in the app	Firestore
Your learning progress: lessons completed, placement test results, and your results on drills, quizzes and reviews	To decide what you study next, when a topic comes back for review, and where to start you; and to check that the placement test puts people at the right level	Firestore
The days you studied, and on which kind of device (web, iPhone or Android)	To understand how regularly people study, so we can make the course easier to keep up	Firestore
Flashcards you save, and your settings (daily study goal, reminders, appearance)	So your words and choices are there next time you open the app	Firestore, and on your device
How you found us: the kind of device you signed up on, any campaign tags in the link you followed (for example `utm_source`), and the name of the website that sent you (the site's name only, not the page)	To learn which of our announcements and partners actually bring people in. Recorded once, when you sign up.	Firestore
Codes you enter: a group code (for example from a school or community organisation running a competition) or a discount code	To apply the discount, to count your progress toward your group's totals, and to pay the group or the person who gave you the code their share	Firestore
Your subscription: plan, status, renewal and expiry dates, purchase history and amounts paid, and when you first saw the subscription screen	To know whether your access is active, to handle refunds and support, to pay referral fees, and to understand how many people choose to subscribe	Firestore, kept in step with RevenueCat and the store or payment provider that took your payment
Problem reports you send about a drill or passage, including any note you write	To find and fix mistakes in the course	Firestore
Security and technical data: IP address, browser or device type, operating system version, timestamps, and a check that requests come from the genuine app	To keep the service running, find errors, and stop abuse such as automated copying of the course or repeated free trials	Google (Firebase and its App Check service), on Google's standard retention schedule
Your email, if you join the early access list on this website	To tell you when Château opens, and occasionally what is new	Firestore

We also add up learning results across all learners into daily totals, such as how many answers to a given drill were correct. These totals do not identify anyone, and we use them to improve the course.

We do not collect your contacts, photos, microphone, precise location, or anything from other apps. When you pay on the website, the payment provider records your country (and, where tax rules require it, your postal code) to charge the right tax. There is no advertising in Château, no advertising trackers, and we do not sell your personal information or share it for advertising.

Emails

We send the emails your account needs: confirming your address, resetting your password, and important notices about your subscription or about this policy and our terms. We may also send occasional news about Château, such as new courses and features. Every news email has an unsubscribe link, and unsubscribing does not affect your account.

Cookies and storage on your device

The web app keeps information in your browser's storage so that you stay signed in and lessons load quickly. To check that requests come from the genuine app and not from a bot, the web app uses Google's reCAPTCHA, which may set its own cookie and collect information about your browser for that purpose. The phone apps use Apple's App Attest and Google's Play Integrity for the same check. This website loads its fonts from Google Fonts, which means your browser contacts Google. We use no advertising or tracking cookies.

Who else processes it

We use these companies to run Château. Each processes your information only to provide its service to us:

Google (Firebase and Google Cloud): sign-in and account emails, database, file storage, hosting, server functions, logs, and the App Check and reCAPTCHA security checks.
RevenueCat: manages subscriptions on every platform, so a subscription bought in one place works everywhere. It receives a random ID for your account, your email address if you buy on the website, and your purchase history.
Stripe: takes card payments on the website and works out the tax due. It receives your payment details, email address, and billing country or postal code. We never see your full card number.
Apple and Google Play: if you subscribe inside the iPhone or Android app, they take the payment under their own privacy policies. We never see your card details.

We share limited information with others only in these cases:

Groups. If you join with a group code, the group may see its own totals and rankings in a competition. We do not give the group your email address or your individual progress.
Discount codes. We tell whoever gave out a discount code how many people used it and subscribed, not who they are.
The law. We disclose information if the law requires it, or to protect our users, our rights, or the safety of others.
A sale of the business. If Chateau Languages Inc. is sold or merged, your information passes to the new owner under this policy, and we will tell you before that happens.

How we protect it

Everything travels between your device and our servers encrypted (HTTPS). Access rules on our database limit each account to its own information, and anything that affects your access or progress is checked on our servers rather than trusted from the app. Passwords are stored hashed by Google, and card details stay with Stripe, Apple and Google. Access to the stored data is limited to the people who run Château. No system is perfectly secure, so we cannot promise absolute security, but if a breach affects your information we will tell you as the law requires.

Where your information is stored

Château is run from the United States. When you use Château, you send your information directly to us there, and our servers and service providers store it in the United States. Where our service providers handle information from the UK or the European Economic Area, they protect it with safeguards such as the European Commission's Standard Contractual Clauses (and the UK's equivalent) or the EU-U.S. Data Privacy Framework.

Deleting your account

You can delete your account from inside the app, under Settings. If you no longer have the app, use the account deletion page, and we will delete it for you. Deletion cannot be undone.

Deleting removes your sign-in, your account record, name and settings, your learning progress and placement results for every language, your saved flashcards, the days you studied, how you found us, the codes you entered, your problem reports, and our copy of your subscription history.

Deleting your account does not cancel a subscription. If you bought on the website, the app asks you to cancel first. If you bought through the App Store or Google Play, cancel it there.

A few things are kept after deletion, each for one reason:

Free trial record. So the free trial cannot be claimed again and again, we keep a one-way hash of your email address (a scrambled code from which the address cannot be read back) and the date your trial ended. It is used for nothing else.
Payment and tax records. Stripe, RevenueCat, Apple and Google keep records of payments, and we keep the tax records the law requires.
Referral payment records. If you joined with a group or referral code and paid, we keep a record of each payment (the amount, the date, the code, and a random ID no longer linked to any account) so we can account for the fees we pay the group.
Daily totals. The anonymous totals described above, which never identified you.
Backups. Copies in backups disappear on their normal rotation, usually within 30 days, and are never restored into the app.

How long we keep things

Account and learning data are kept for as long as your account exists. Technical logs are kept on Google's standard schedule, usually about 30 days. Payment and tax records are kept for as long as tax and accounting law requires, which can be up to ten years. Early access emails are kept until you ask us to remove yours or unsubscribe.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to from the address on your account, and we will do it.

If you are in the UK or the European Economic Area

Our lawful bases are: contract, for what we need to give you the course and your subscription; legal obligation, for payment and tax records; legitimate interests, for security, preventing abuse and repeated trials, the daily totals, learning how people found us, fixing reported problems, paying referral fees, and occasional news to people with an account (which you can stop at any time); and consent, for reminders and the early access list, which you can withdraw at any time. You also have the right to object to processing based on legitimate interests, to restrict it, to receive your data in a portable form, and to complain to your data protection authority.

If you are in California

You have the right to know what we collect, to delete it, and to correct it, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

Children

Château is for people aged 16 and over. It is not directed at anyone under 16, and we do not knowingly collect personal information from them. If you believe someone under 16 has created an account, write to us and we will delete it.

Changes

If this policy changes in a way that affects you, we will update the date at the top and tell you in the app or by email before the change takes effect.

Contact

Questions about this policy, or about your data: