Lingua Sacra is an educational app for learning Ecclesiastical Latin in the context of the Catholic tradition. Lingua Sacra is a ministry owned and operated by St. Patrick Priory, Inc., a separately incorporated religious nonprofit. In this policy, “we,” “us,” and “our” refer to St. Patrick Priory, Inc. as the operator and data controller for Lingua Sacra. The native app is designed with an offline-friendly core, and all online features are optional.
On iOS and Android you can use Lingua Sacra without an account, and that is the default. Your lesson progress, quiz scores, vocabulary review schedules, recordings made in pronunciation practice, photos taken in Latin Lens, and your settings are stored on your device. Even without an account, the app makes the following network requests. None of them includes your name, email address, or learning progress:
If you sign in on iOS or Android, the app also checks with RevenueCat whether your account has an active purchase (see Payments below). Nothing else is sent until you opt in to analytics or crash reporting, create an account or sign in, make a purchase, or contact us. As with any internet request, the service that answers can see your device's IP address.
The web app at applinguasacra.com/app is delivered over the internet and asks you to sign in after the welcome screens, so the account sections below apply to it.
Some features ask for system permissions:
If you choose to create an account, the following data is collected and stored on our servers:
You may use the app without creating an account. Cloud features are opt-in and you can sign out or delete your account at any time from Settings → Account.
You can create an account with an email address and password, or sign in with Apple, with Google, or with a passkey where your device supports it:
Online data is stored using Supabase, hosted on Amazon Web Services (AWS) in the United States. All traffic is encrypted in transit using HTTPS/TLS. Database access is restricted by Row Level Security so that you can only read and modify your own data (and the shared leaderboard rows for groups you belong to).
On iOS and Android, your sign-in session is kept in encrypted storage provided by the operating system: the iOS Keychain on iPhone and iPad, and on Android, storage encrypted with a key held in the Android Keystore. In the web app, your sign-in session is kept in this browser's local storage for applinguasacra.com. It is protected there by a strict Content-Security-Policy that limits which scripts can run on our site and where the page can send data, and signing out removes it. Other local data is stored in app-private storage that other apps cannot read, or in the web app, in this browser's storage for applinguasacra.com.
App crash reporting is disabled unless you explicitly opt in from Settings → Privacy → Crash Reporting. If enabled in a production build, Lingua Sacra uses Sentry to receive anonymous crash and error reports so we can fix bugs. Reports include technical information such as a stack trace, the device model, the operating system version, and the screen you were on when the crash happened. We disable IP collection (sendDefaultPii: false), strip email and IP from user context, scrub email-shaped strings and long digit runs from messages and stack traces before sending, and never enable Sentry session replay. Turning crash reporting off stops future reports; reports already sent remain subject to the retention period below.
App analytics is disabled unless you explicitly opt in from Settings → Privacy → Share usage data. No app analytics identifier is created before you opt in. If enabled in a production build, Lingua Sacra uses PostHog to count aggregate usage events such as "lesson completed" or "screen viewed". Events use only a random app analytics ID. Sign-in does not alias that ID or send your internal account ID to PostHog. Versions of the app before 2.5 also saved that ID, and your analytics choice, with your synced progress, so events sent while you were signed in could be connected to your account. Current versions keep the ID and the choice on each device only, and we are removing the copies saved with synced progress. After that, PostHog events can no longer be connected to your account. We disable PostHog IP-based geolocation enrichment by sending $ip = "" and $geoip_disable = true on every event. We do not send your name, email address, IP address, public profile ID, photos, recordings, typed answers, or search terms.
Turning analytics off discards queued events, removes the analytics identifier stored by the app, and stops future app analytics collection. It does not automatically erase events already delivered to PostHog. To request deletion of prior analytics records, contact the privacy desk below; records that cannot reasonably be linked back to you expire under the retention period below.
The marketing site (applinguasacra.com) sends a similar anonymous page-view ping using a random ID stored in your browser's localStorage. No advertising, retargeting, or social-media tracking pixels are loaded.
Lingua Sacra does not currently send your typed input or photos to any third-party AI service. If we add cloud-based AI tutoring in the future, the relevant text will be processed by a sub-processor disclosed in this policy and will not include your name, email, or progress data.
If you purchase Lingua Sacra on the web, checkout is provided through RevenueCat Web Billing and payment is processed by Stripe. Stripe receives the information needed to take payment, including card and billing details; RevenueCat receives the customer, product, purchase, and entitlement information needed to manage access. We receive the resulting transaction and entitlement records, but we do not see or store your full card number. Receipts are retained for the period required by tax and accounting law.
In-app purchases on iOS and Android are handled by Apple and Google respectively under their own privacy policies, and RevenueCat records each purchase so it can be attached to the right Lingua Sacra account. We receive only the resulting entitlement record: whether you have full access, which product, and when access started and ends.
On iOS and Android the app also uses RevenueCat in two other ways. When a screen shows Full Access prices, it looks up current store prices and offers using a random anonymous ID. When you are signed in, it checks whether your account has an active purchase; for that check RevenueCat receives a billing identifier linked to your account. In the web app, your browser contacts RevenueCat only when you start a checkout.
Lingua Sacra uses the following third-party services. Each is engaged only for the purpose described.
Lingua Sacra does not integrate any advertising networks or social-media tracking services.
Lingua Sacra is suitable for all ages and can be used in offline mode without an account or online profile. We do not knowingly collect personal information from children under 13. Account creation is optional, and we recommend parents help any child under 13 use the app in offline mode (no account). If you become aware that a child under 13 has created an account without verifiable parental consent, please contact us and we will promptly delete the account and associated data.
You have the right to access, correct, delete, export, and object to processing of your personal data. You can exercise these rights yourself from inside the app:
You can also email us at privacy [at] linguasacra.app for any of the above. We respond within 30 days.
We retain account data only as long as your account exists. After you delete your account, your rows are removed from our active database immediately, and from backups within 30 days. If you opted in, analytics events are retained for up to 12 months and crash reports for up to 90 days unless a valid deletion request can be fulfilled sooner. Turning telemetry off stops future collection but does not silently claim provider-side deletion of records already sent. Payment records are retained for up to 7 years to comply with tax and accounting obligations, with the link to your user account severed once you delete the account.
Per-review history stored on your device is kept for up to 12 months or 1 MiB per account, whichever limit is reached first. The oldest month is removed first, the current month is never removed, and another account's history on the same device is never touched. Before the first removal the app offers you a backup once; portable backups include this history.
Our servers are located in the United States. If you access Lingua Sacra from outside the United States, you understand that your data is transferred to and processed in the United States. We rely on appropriate safeguards (such as the EU Standard Contractual Clauses, where applicable) for transfers from the EEA, UK, and Switzerland.
If we update this privacy policy, the revised version will be posted at this URL with an updated effective date. Material changes will be announced in the app with a one-time notice that links to the updated policy.
St. Patrick Priory, Inc. is the owner, operator, and data controller for Lingua Sacra. Mailing address: St. Patrick Priory, Inc., 280 North Grant Avenue, Columbus, OH 43215. If you have questions about this privacy policy or wish to exercise your rights, contact the Lingua Sacra privacy desk at: privacy [at] linguasacra.app