Duolingo Privacy Policy

This document is Duolingo's global Privacy Policy, governing the collection, use, storage, and disclosure of personal data by Duolingo, Inc. across its language-learning applications, website, and related services. The policy states that Duolingo collects account registration data (name, email, age), usage and activity data (lessons completed, streaks, performance), device identifiers, IP addresses, approximate location, payment information, communications content, and data from third-party integrations such as Google and Facebook sign-in; the policy authorizes use of this data for service delivery, personalization, advertising, analytics, and research. The policy discloses sharing of personal data with advertising partners, analytics providers, and other third parties, and reserves the right to share data in connection with corporate transactions such as mergers or acquisitions; the policy also states that data may be processed in the United States and other countries with different privacy standards than a user's home jurisdiction. The policy engages GDPR and UK GDPR for EU and UK users respectively, CCPA and CPRA for California residents, and COPPA and related frameworks for users under 13; Duolingo states it does not knowingly collect personal data from children under 13 without verified parental consent, though the app's broad global user base and engagement with minors creates heightened compliance exposure across multiple jurisdictions. Material compliance considerations include the policy's treatment of age verification mechanisms, the scope of advertising data sharing with platforms such as Meta and Google (as evidenced by the tracking infrastructure embedded in the page), and the adequacy of consent mechanisms for users in GDPR-covered jurisdictions.