Provision record
Duolingo · Duolingo Privacy Policy · View original document ↗

Duolingo May Refuse Data Subject Rights Requests

High severity Explicit document language Common · 263 of 352 platforms
Stay ahead of the changes
Track Duolingo and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Duolingo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium May 27, 2026

The updated privacy policy no longer contains explicit language stating that Duolingo uses cookies to enhance user experience and analyze performance, or that it shares user information with social media, advertising, and analytics partners. The policy also no longer displays a 'Do Not Sell My Personal Information' button. These removals may affect the transparency of Duolingo's practices as disclosed in the policy document itself, though actual data practices may remain unchanged. Users should review the complete updated privacy policy to understand current disclosures about data collection and sharing.

View change record →
Medium May 27, 2026

The updated policy removes explicit language stating that Android users and website users are not subject to audio collection for product improvement purposes. Previously, the policy authorized audio collection only from iOS users, with an explicit carve-out for Android and web users. The revised language now states that all users may choose not to share audio within app Settings, suggesting audio collection may now occur across all platforms unless the opt-out mechanism is used. The practical operational effect of this change depends on whether Duolingo implements audio collection on Android and web platforms, which the policy change does not explicitly confirm. You can decline audio sharing for product improvement by adjusting the setting within the app.

View change record →
Medium Apr 21, 2026

The updated policy now discloses a new Math Tutor feature that processes audio through Apple for transcription; audio is deleted but text transcripts may be retained and shared with AI vendors. Duolingo also clarified that IP addresses may be retained longer than 30 days for paying subscribers specifically for payment processing and fraud prevention. The policy changed the Video Call feature from 'Duolingo offers' to 'Duolingo may offer', clarifying it is optional. You can disable FullStory and Session Replay activity recording using the Tracking toggle in app Settings.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 1688 other provisions on other platforms.

How other platforms handle this

Baseten Medium

We cannot respond to Your request or provide You with the required information if We cannot: Verify Your identity or authority to make the request And confirm that the personal information relates to You

OpenRouter Medium

While we strive to prioritize the protection of personal data and comply with all applicable laws, we may decline a request from you if we have a lawful reason for doing so.

Microsoft Copilot Medium

Microsoft reserves the right to restrict the export of data that may compromise the security of the services or Microsoft's intellectual property.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
these rights are not absolute and Duolingo may refuse requests to exercise data subject rights if there is a legitimate reason, such as if we cannot authenticate your identity, if the request could violate the rights of a third party or applicable law...

Excerpt from Duolingo's Privacy Policy

Provision details

Document information
Document
Duolingo Privacy Policy
Entity
Duolingo
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-022483
Document ID
CA-D-00084
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
ffd79e13b1f23d8f50cc63af7c7e06fe3d89fe994f3f6c441c5f01a292a571ad
Analysis generated
July 9, 2026 09:23 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Duolingo
Document: Duolingo Privacy Policy
Record ID: CA-P-022483
Captured: 2026-07-09 09:23:37 UTC
SHA-256: ffd79e13b1f23d8f…
URL: https://conductatlas.com/platform/duolingo/duolingo-privacy-policy/provision/CA-P-022483/duolingo-may-refuse-data-subject-rights-requests/
Accessed: Aug. 2, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Duolingo's Duolingo May Refuse Data Subject Rights Requests clause do?

The clause states: “these rights are not absolute and Duolingo may refuse requests to exercise data subject rights if there is a legitimate reason, such as if we cannot authenticate your identity, if the request could violate the rights of a third party or applicable law...”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 263 platforms. See the full comparison.

Is ConductAtlas affiliated with Duolingo?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duolingo.