If you sign into Duolingo using Google, Facebook, or Apple, Duolingo receives some of your account data from those platforms.
This analysis describes what Duolingo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy states that third-party login integrations provide Duolingo with access to data held by platforms such as Google, Facebook, and Apple, which may include data beyond what a user would provide directly during registration.
Interpretive note: The policy does not enumerate the specific data fields received from each third-party login platform, creating ambiguity about the precise scope of data acquired through these integrations.
The updated policy removes explicit language stating that Android users and website users are not subject to audio collection for product improvement purposes. Previously, the policy authorized audio collection only from iOS users, with an explicit carve-out for Android and web users. The revised language now states that all users may choose not to share audio within app Settings, suggesting audio collection may now occur across all platforms unless the opt-out mechanism is used. The practical operational effect of this change depends on whether Duolingo implements audio collection on Android and web platforms, which the policy change does not explicitly confirm. You can decline audio sharing for product improvement by adjusting the setting within the app.
View change record →This provision discloses that Duolingo accesses user data from third-party social login platforms, which is important for users to understand what personal information is shared upon social sign-up.
View full change record →Users who sign in via Google, Facebook, or Apple accounts allow Duolingo to receive profile data from those platforms, the scope of which is determined by the authorization procedures of each platform and the permissions granted at login.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
"If you register or log into your account through a third-party platform (such as Apple, Facebook, or Google), we will have access to some of your information from that platform, such as your name and email address, as provided to us in accordance with the authorization procedures determined by such third-party platform.Excerpt from Duolingo's Privacy Policy
REGULATORY LANDSCAPE: Data received from third-party authentication platforms is personal data subject to the same GDPR, CCPA, and other applicable obligations as directly collected data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy states that third-party login integrations provide Duolingo with access to data held by platforms such as Google, Facebook, and Apple, which may include data beyond what a user would provide directly during registration.
Users who sign in via Google, Facebook, or Apple accounts allow Duolingo to receive profile data from those platforms, the scope of which is determined by the authorization procedures of each platform and the permissions granted at login.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duolingo.