Last Updated: May 6, 2026 Effective Date: May 6, 2026
Privacy Policy
This Privacy Policy explains how Kreatifart – Can Demirel (“LangoAI”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when you use any of our products and services:
| Product | Platform |
|---|---|
| LangoAI iOS App | Apple App Store |
| LangoAI for Adobe (InDesign, Photoshop, Illustrator) | Adobe Exchange |
| LangoAI for WordPress | WordPress.org / Direct download |
| LangoAI Website | langoai.co |
We are committed to protecting your privacy in compliance with:
- Apple App Store Review Guidelines
- Adobe Developer Terms of Use
- General Data Protection Regulation (EU) 2016/679 (GDPR)
- UK GDPR
- Turkish Personal Data Protection Law (KVKK)
- California Consumer Privacy Act (CCPA)
- EU Digital Services Act (DSA)
1. Data Controller
Kreatifart – Can Demirel Halaskargazi Cd. No: 38-66, 34371 Lotus Nişantaşı Şişli / İstanbul, Turkey
📧 Email: support@langoai.co 🌐 Website: https://langoai.co 📋 Terms of Use: langoai.co/terms
2. Data We Collect
2.1 Data You Provide Directly (All Products)
| Data Type | Purpose |
|---|---|
| Email address (if provided) | Account creation, support |
| Preferred language settings | Personalizing translation |
| Support messages | Customer assistance |
2.2 Data Collected Per Product
iOS App Only
| Data Type | Purpose |
|---|---|
| Voice/audio recordings | Speech-to-text translation (sent to OpenAI) |
| Camera images / live frames | Camera-based and AR translation (sent to OpenAI) |
| Photos from library | Photo translation (sent to OpenAI) |
| Text input | Translation (sent to OpenAI) |
| Subscription/purchase status | Verifying Pro access (RevenueCat) |
| Apple ID anonymized token | Linking subscription to account |
| Device model, OS version | Crash reporting (Sentry) |
| Crash logs | Debugging (Sentry) |
| App version | Compatibility and performance |
| Session and usage data | App performance analytics |
| Approximate location (optional) | Localized language suggestions |
Adobe Plugins Only (InDesign, Photoshop, Illustrator)
| Data Type | Purpose |
|---|---|
| Document text content | Translation processing (sent to OpenAI) |
| Selected text / layers | Translation of selected content (sent to OpenAI) |
| Plugin settings and preferences | Persisting user configuration |
| License/subscription status | Verifying paid access |
| Usage metadata (feature used, timestamp) | Product analytics and billing |
| Device/OS information | Crash reporting and compatibility |
Important: LangoAI for Adobe does not access, store, or transmit full document files. Only the specific text or content selected for translation is processed.
WordPress Plugin Only
| Data Type | Purpose |
|---|---|
| Post/page text content | Translation of website content (sent to OpenAI) |
| API key | Authenticating requests to LangoAI API |
| WordPress version and site URL (anonymized) | Compatibility monitoring |
| Plugin settings | Persisting translation preferences |
| Usage statistics (character count, languages) | Billing and quota management |
Important: LangoAI for WordPress processes only the content you explicitly select for translation. It does not collect visitor data from your website, passwords, or any other site content.
Site owners are responsible for updating their own website’s Privacy Policy to disclose LangoAI as a data processor.
2.3 Website (langoai.co)
| Data Type | Purpose |
|---|---|
| IP address | Security, analytics |
| Browser type and OS | Technical compatibility |
| Pages visited | Website analytics |
| Form submissions | Contact and support |
| Cookies | Session management, analytics (see Section 14) |
3. How We Use Your Data
We use your data only for the following purposes:
- Providing translation services — Processing your text, audio, images, or documents through OpenAI’s API to deliver translations
- Managing subscriptions and billing — Verifying access, processing payments via Paddle, FastSpring, or Apple
- Customer support — Responding to inquiries and resolving issues
- Improving our products — Analyzing anonymized crash reports (Sentry) and usage patterns to fix bugs and improve performance
- Security and fraud prevention — Detecting and preventing unauthorized access
- Legal compliance — Meeting obligations under applicable laws
We do not use your data for advertising, sell it to third parties, or use it for any purpose beyond what is described in this Policy.
4. Sensitive Permissions (iOS App Only)
The iOS App requests the following device permissions. You may grant or deny each independently.
| Permission | Why It’s Needed | What We Do With It |
|---|---|---|
| Camera | Real-time camera translation and AR mode | Live frames are processed locally and/or sent to OpenAI for text recognition. Not stored. |
| Microphone | Speech-to-text translation | Audio is converted and sent to OpenAI for transcription. Not stored on our servers. |
| Photo Library | Translating images from your photos | Selected images are sent to OpenAI for OCR and translation. Not stored. |
| Location (Optional) | Localized language suggestions | Approximate location may be used to suggest languages. Not shared with third parties without consent. |
5. Third-Party Services and Data Processors
We share data only with trusted processors under strict data processing agreements. Each has their own privacy policy.
5.1 OpenAI (All products)
Role: AI translation, speech recognition, image analysis Data sent: Text inputs, audio, camera/library images (iOS), document text (Adobe), website content (WordPress) ⚠️ Important: Your content is sent to OpenAI’s servers for processing. OpenAI’s API usage policies apply. By using AI features, you consent to this processing. Privacy Policy: openai.com/policies/privacy-policy
5.2 RevenueCat (iOS App only)
Role: Subscription and in-app purchase management Data shared: Subscription status, purchase history, anonymized Apple ID token Privacy Policy: revenuecat.com/privacy
5.3 Sentry (iOS App + Adobe Plugins)
Role: Crash reporting and error monitoring Data shared: Device model, OS version, app version, anonymized error traces Privacy Policy: sentry.io/privacy
5.4 Supabase (Backend — All products)
Role: Secure backend database and API infrastructure Data stored: Account data, API keys (hashed), usage records Privacy Policy: supabase.com/privacy
5.5 Paddle (WordPress Plugin subscriptions)
Role: Payment processing — Merchant of Record Data shared: Name, email, billing details (collected and held by Paddle) Privacy Policy: paddle.com/legal/privacy
5.6 FastSpring (Adobe Plugin subscriptions)
Role: Payment processing — Merchant of Record (Adobe Exchange partner) Data shared: Name, email, billing details (collected and held by FastSpring) Privacy Policy: fastspring.com/privacy
5.7 Expo / EAS (iOS App)
Role: App build delivery and OTA updates Data: Device tokens for update delivery Privacy Policy: expo.dev/privacy
5.8 Apple App Store / StoreKit (iOS App)
Role: In-app purchase processing Data: Managed exclusively by Apple Privacy Policy: apple.com/legal/privacy
6. Legal Basis for Processing (GDPR)
| Processing Activity | Legal Basis | GDPR Article |
|---|---|---|
| Providing translation services | Performance of contract | Art. 6(1)(b) |
| Subscription and billing management | Performance of contract | Art. 6(1)(b) |
| Sending data to OpenAI | Consent | Art. 6(1)(a) |
| Crash reporting (Sentry) | Legitimate interests | Art. 6(1)(f) |
| Security and fraud prevention | Legitimate interests | Art. 6(1)(f) |
| Legal compliance | Legal obligation | Art. 6(1)(c) |
| Marketing communications (if opted in) | Consent | Art. 6(1)(a) |
7. Data Storage and Retention
| Data Type | Retention Period |
|---|---|
| Translation inputs (text, audio, images, documents) | Not stored — processed and discarded immediately |
| Subscription and billing records | Duration of subscription + 5 years (legal/tax requirement) |
| API usage logs (character count, timestamps) | 12 months (for billing reconciliation) |
| Crash reports (Sentry) | 90 days |
| Support communications | 2 years after last contact |
| Account data | Until account deletion + 30 days |
| Website analytics | 14 months (anonymized after 30 days) |
8. Data Sharing
We do not sell your personal data.
We share data only:
- With authorized data processors listed in Section 5 (under contract, for specific purposes only)
- With Apple / Paddle / FastSpring as the payment Merchant of Record for billing
- When required by law (e.g., court orders, regulatory requests)
- In connection with a merger, acquisition, or asset sale (users will be notified in advance)
All data processors are bound by GDPR-compliant Data Processing Agreements (DPAs).
9. International Data Transfers
Some service providers (OpenAI, Sentry, RevenueCat, Expo, FastSpring) are based in the United States. Transfers outside the European Economic Area (EEA) are protected by:
- Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46 GDPR)
- Data Processing Agreements (DPAs) in place with all US-based processors
10. Children’s Privacy
LangoAI products are not directed to children under 13 (or under 16 in EU jurisdictions where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact support@langoai.co and we will promptly delete such information.
11. Your Privacy Rights
Depending on your jurisdiction, you may exercise the following rights:
EU / UK GDPR Rights
| Right | Description |
|---|---|
| ✅ Access | Obtain a copy of your personal data |
| ✅ Rectification | Correct inaccurate or incomplete data |
| ✅ Erasure | Request deletion (“right to be forgotten”) |
| ✅ Restriction | Limit how we process your data |
| ✅ Portability | Receive your data in machine-readable format |
| ✅ Object | Object to processing based on legitimate interests |
| ✅ Withdraw Consent | At any time (where processing is consent-based) |
| ✅ Complain | Lodge a complaint with your local DPA |
CCPA Rights (California Residents)
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt-out of sale (we do not sell data)
- Right to non-discrimination for exercising rights
KVKK Rights (Turkish Residents)
- Right to be informed about data processing
- Right to access and request correction of data
- Right to request deletion or anonymization
- Right to object to automated decisions
To exercise any rights, contact: support@langoai.co We will respond within 30 days (or as required by law).
12. Managing Your Privacy
iOS App — Device Permissions
Revoke permissions at any time: Settings → Privacy & Security → [Camera / Microphone / Photos / Location]
iOS App — Advertising Identifier
Settings → Privacy & Security → Tracking
WordPress Plugin
- Your site’s administrator can manage LangoAI settings and disable data transmission at any time from the plugin settings panel.
- Removing the plugin stops all data processing by LangoAI.
Adobe Plugins
- Uninstalling the plugin from Adobe Creative Cloud stops all data processing.
- API key revocation can be requested at support@langoai.co.
Delete Your Account
Send a request to support@langoai.co with subject: “Delete My Account” We will process your request within 30 days.
13. Data Security
We implement appropriate technical and organizational security measures:
- Encrypted data transmission (HTTPS/TLS for all API calls)
- Hashed API keys (never stored in plaintext)
- Access controls (role-based, minimum privilege)
- Anonymized crash data (no personally identifiable information in logs)
- Regular security assessments
In the event of a data breach affecting your rights, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR Article 33.
14. Cookies (Website — langoai.co)
The LangoAI website (langoai.co) uses cookies for:
- Essential cookies: Session management, security (no consent required)
- Analytics cookies: Understanding how visitors use the site (consent required)
You can manage cookie preferences through our cookie consent banner or your browser settings.
The iOS App and Adobe/WordPress plugins do not use browser cookies. Equivalent technologies (device identifiers) are disclosed in Section 2.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. For material changes, we will:
- Display a prominent notice in the App or plugin
- Send an email notification (if you have provided one)
- Update the “Last Updated” date at the top of this page
We encourage you to review this policy periodically.
16. Contact and Data Protection Inquiries
For privacy questions, data access requests, or to file a complaint:
Kreatifart – Can Demirel Halaskargazi Cd. No: 38-66, 34371 Lotus Nişantaşı Şişli / İstanbul, Turkey
Email: support@langoai.co Website: https://langoai.co
Supervisory Authorities:
- 🇪🇺 EU: Your national Data Protection Authority
- 🇬🇧 UK: Information Commissioner’s Office (ICO) — ico.org.uk
- 🇹🇷 Turkey: KVKK — kvkk.gov.tr