Lingua Sacra is an educational app for learning Ecclesiastical Latin in the context of the Catholic tradition. Your privacy is important to us. The native app is designed with an offline-friendly core, and all online features are optional.
By default, Lingua Sacra operates entirely on your device. All lesson progress, quiz scores, vocabulary review schedules, recordings made in Speaking Practice, photos taken in Latin Lens, and your settings are stored locally on your device. In this mode the app does not communicate with any servers other than its own update channel for app and content updates.
Some features ask for system permissions:
If you choose to create an account, the following data is collected and stored on our servers:
You may use the app without creating an account. Cloud features are opt-in and you can sign out or delete your account at any time from Settings → Account.
Online data is stored using Supabase, hosted on Amazon Web Services (AWS) in the United States. All traffic is encrypted in transit using HTTPS/TLS. Database access is restricted by Row Level Security so that you can only read and modify your own data (and the shared leaderboard rows for groups you belong to).
On your device, your Supabase authentication token is stored in the platform secure enclave (iOS Keychain / Android EncryptedSharedPreferences). Other local data is stored in app-private storage that other apps cannot read.
In production builds, Lingua Sacra uses Sentry to receive anonymous crash and error reports so we can fix bugs. Reports include technical information such as a stack trace, the device model, the operating system version, and the screen you were on when the crash happened. We disable IP collection (sendDefaultPii: false), strip email and IP from any user context, scrub email-shaped strings and long digit runs from messages and stack traces before sending, and never enable Sentry's session replay. You can turn crash reporting off in Settings → Privacy → Crash Reporting.
In production builds, Lingua Sacra uses PostHog to count aggregate usage events such as "lesson completed" or "screen viewed". Events are sent with an anonymous random ID; once you sign in, the anonymous ID is aliased to your user ID so we can see retention without exposing your identity to the service. We disable PostHog's IP-based geolocation enrichment by sending $ip = "" and $geoip_disable = true on every event. We do not send your name, email address, IP address, or photos/recordings. You can turn analytics off in Settings → Privacy → Share anonymous usage data.
The marketing site (applinguasacra.com) sends a similar anonymous page-view ping using a random ID stored in your browser's localStorage. No advertising, retargeting, or social-media tracking pixels are loaded.
Lingua Sacra does not currently send your typed input or photos to any third-party AI service. If we add cloud-based AI tutoring in the future, the relevant text will be processed by a sub-processor disclosed in this policy and will not include your name, email, or progress data.
If you purchase Lingua Sacra on the web, payment is processed by Lemon Squeezy. Lemon Squeezy receives the information needed to take payment (card details, billing address as required by law, the amount, and your email). We receive only the resulting receipt: your email, the transaction identifier, the amount, the currency, and the product purchased. We do not see or store your card number. Receipts are retained for the period required by tax and accounting law.
In-app purchases on iOS and Android are handled by Apple and Google respectively under their own privacy policies; we receive only the resulting entitlement (whether you have full access).
Lingua Sacra uses the following third-party services. Each is engaged only for the purpose described.
Lingua Sacra does not integrate any advertising networks or social-media tracking services.
Lingua Sacra is suitable for all ages and can be used in offline mode without an account or online profile. We do not knowingly collect personal information from children under 13. Account creation is optional, and we recommend parents help any child under 13 use the app in offline mode (no account). If you become aware that a child under 13 has created an account without verifiable parental consent, please contact us and we will promptly delete the account and associated data.
You have the right to access, correct, delete, export, and object to processing of your personal data. You can exercise these rights yourself from inside the app:
You can also email us at privacy [at] linguasacra.app for any of the above. We respond within 30 days.
We retain account data only as long as your account exists. After you delete your account, your rows are removed from our active database immediately, and from backups within 30 days. Anonymous analytics events are retained for up to 12 months. Crash reports are retained for up to 90 days. Payment records are retained for up to 7 years to comply with tax and accounting obligations, with the link to your user account severed once you delete the account.
Our servers are located in the United States. If you access Lingua Sacra from outside the United States, you understand that your data is transferred to and processed in the United States. We rely on appropriate safeguards (such as the EU Standard Contractual Clauses, where applicable) for transfers from the EEA, UK, and Switzerland.
If we update this privacy policy, the revised version will be posted at this URL with an updated effective date. Material changes will be announced in-app the next time you open the app.
If you have questions about this privacy policy or wish to exercise your rights, you may contact us at: privacy [at] linguasacra.app