Privacy Policy for Muntlig
Effective Date: July 5, 2025
Last Updated: April 20, 2026
Muntlig was acquired by Lingu AS in April 2026 from its original creator, Cansu Akarsu. Lingu AS is now the data controller for Muntlig. This page describes how personal data is handled on the Muntlig platform specifically; for Lingu's broader privacy practices, please see the Lingu Privacy Policy.
Who We Are
Muntlig is an online platform that helps users improve their language and speaking skills. Our website is accessible at https://muntlig.com.
Muntlig is operated by Lingu AS ( lingu.no), which is the data controller for any personal information collected through this website in accordance with the EU General Data Protection Regulation (GDPR). Where this policy and the Lingu Privacy Policy overlap, the Lingu Privacy Policy at lingu.no/personvern applies.
What Data We Collect
When you use our platform — particularly when logging in via third-party authentication — we may collect the following information:
Email address
Collected during login, payment, and lead generation. Stored in Auth0 (authentication), Stripe (payments), Brevo (email communication), and Meta (lead generation).
Name
Optionally provided by customers during payment via Stripe or through Meta Ads forms. Names are stored within the respective platforms.
Authentication token
Used to authenticate user sessions. Issued by Auth0 and also processed by Muntlig to manage platform access.
IP address
Collected for security and performance purposes. May be processed by Auth0 and Eleven Labs.
Browser or device information
Used to optimize compatibility and troubleshoot issues. May be logged by Auth0.
Audio recordings and transcripts
Collected when users interact with the AI tutor. Stored in Eleven Labs for up to 10 days to improve conversational quality. All recordings are automatically deleted and are not used for identification or profiling.
We do not collect passwords or sensitive financial information.
How and Why We Use Your Data
We use your personal data to operate and improve the Muntlig platform. Under the GDPR, we must have a valid legal basis for each type of data processing. Here's how and why we use your data:
To log you in and manage your account
We use Auth0 to let you sign in securely.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
To personalize your learning experience
We use your usage patterns to tailor content, suggestions, or feedback.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
To analyze usage and improve our service
We collect usage data (e.g., page views, device type) to improve performance and user experience.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
To respond to your support requests
When you contact us, we use your information to help resolve your issue.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
To comply with legal requirements
We may retain certain data if required by tax, fraud, or data protection laws.
Legal basis: Legal obligation (Article 6(1)(c) GDPR)
To support business development
We may share the minimum personal data necessary in connection with a potential or completed partnership, merger, acquisition, financing, sale of assets, or similar corporate transaction, solely to evaluate or complete such a transaction and subject to appropriate confidentiality and data protection obligations.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
Data Retention
Muntlig stores only the minimum data necessary to operate the platform. Key user data such as login credentials, payment details, and contact information is held securely within third-party services like Auth0, Stripe, and others, according to their respective retention policies.
If you delete your account or request data deletion, we will remove any data under our direct control within 30 days and, where applicable, request its removal from our service providers.
Cookies and Analytics
We use Auth0 for secure authentication. Auth0 may set essential cookies to maintain session integrity and enable secure login flows. These cookies are necessary for the functioning of our platform and cannot be disabled.
Third-Party Services
We use third-party services to facilitate authentication, analytics, payments, communication, and conversational AI. These services process data on our behalf in accordance with their respective privacy policies and are committed to GDPR compliance. These services have indicated that they operate in accordance with GDPR requirements or equivalent safeguards, and we select them based on their compliance with applicable data protection standards:
Auth0 (Authentication Provider)
Used to authenticate user accounts securely. Shared data includes your email address and authentication token.
Eleven Labs (Conversational AI)
Used to power speech and conversation features. Audio and transcripts of conversations are stored within the Eleven Labs platform for up to 10 days for the legitimate interest of improving product performance and conversational quality. These recordings are not used for user identification or profiling. After this period, all data is automatically deleted. Eleven Labs may use large language models provided by sub-processors to generate conversational responses. These models are integrated through Eleven Labs and subject to its GDPR-compliant data protection controls.
For the A1–A2 Level Oppgave A activity ("Kan du fortelle litt om deg selv?"), recordings and transcripts are processed in real time and not stored thereafter, ensuring that user responses are not retained on the Eleven Labs platform
Stripe (Payment Processing)
Used to securely process payments. Shared data may include billing information, payment method, name, and email address, depending on how Stripe processes payments.
Meta (Lead Generation)
Muntlig uses Meta for lead generation. Users who engage with Muntlig ads on Facebook or Instagram may optionally submit their name, email address, and, in some cases, information about their intended level of Norwegian and estimated exam date, along with their consent to receive communications from Muntlig. This information remains within the Meta platform and may be used by Meta to segment audiences and personalize advertising in accordance with Meta's own privacy practices. Where applicable, we rely on Standard Contractual Clauses or other safeguards to ensure GDPR-compliant processing.
Brevo (Email Communication)
Muntlig uses Brevo to manage and send both transactional and marketing emails to users who have opted in. Only contact email addresses are stored within the Brevo platform for communication purposes. Brevo processes this data on behalf of Muntlig in accordance with GDPR-compliant data protection practices.
International Data Transfers
Some of the third-party services we use — such as Auth0, Stripe, and Eleven Labs — may process your data outside the European Economic Area (EEA), including in the United States.
We rely on Standard Contractual Clauses or participation in data protection frameworks, where applicable, to ensure such transfers are compliant with GDPR requirements.
Your Rights Under GDPR
You have the right to:
To protect your privacy and security, we may request verification of your identity before processing certain data requests.
To exercise any of these rights, contact us at [email protected].
Children's Privacy
Our service is not intended for children under the age of 13, or the minimum age required by your country's laws for digital consent. We do not knowingly collect data from children without parental consent.
Changes to This Policy
We may update this policy from time to time. All changes will be posted at:
We encourage you to review it regularly.
Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact Muntlig support at:
For data requests directed to Lingu AS, or questions about Lingu's broader privacy practices, please visit lingu.no/contact-us.