Privacy Policy

Last Updated: October 7, 2026

MyFluentFox is a reading companion for language learners operated by MyFluentFox Ltd. MyFluentFox Ltd is the controller responsible for the personal information described in this policy. Contact us at privacy@myfluentfox.com.

1. Information we collect

The information we collect depends on how you use the service:

• Account and access: account and authentication identifiers, email address and display name where available, access requests, onboarding status, and learning preferences such as languages and level. Microsoft Entra External ID handles registration and sign-in.
• Learning activity: reading topics, generated readings and audio, reading references, language, level, completion and progress, saved and known words or phrases, translations and explanations, selected text and surrounding context, and timestamps.
• Usage and moderation: generation and provider usage records, request identifiers, counts, processing status and errors, and reports about readings, including the reporter and reading-owner account links used for review.
• Access requests: your account ID and email address, request dates, approval status and related timestamps. We also store hashed versions of the request's IP address and browser information where available.
• Billing: Stripe customer and subscription identifiers, plan and subscription status, billing period, cancellation state, invoice references, and payment-event records needed to provide paid access. We send Stripe your available account name and email and account references for checkout and billing. Stripe collects payment information through its hosted services; MyFluentFox does not directly collect or store full payment-card details.
• Support and privacy requests: the messages and attachments you send us and information needed to verify, answer and complete your request.
• Technical information: our hosting and backend services process request and diagnostic information, which may include IP address, browser/device information, timestamps, account or reading identifiers, usage and error details, and limited topic or word-help content. This supports security, troubleshooting and reliability. Server diagnostics are separate from browser tracking cookies.

AI content and audio

Reading generation and word or phrase help send the relevant topic, selected text, reading context, languages, level and any answer being corrected to Microsoft Azure AI. Narration and pronunciation send reading text or selected words and phrases to Microsoft Azure Text to Speech. We store generated results and cache content, word help and audio for reuse; some records are linked to an account or reading.

Please do not include personal information about yourself or anyone else in reading topics.

Microsoft's AI services may process content outside the UK and may retain or review flagged prompts and results for abuse prevention under their service terms. We do not promise UK-only processing or immediate deletion from provider systems. Read Microsoft's AI data privacy information.

Community Library

Readings are private by default. If you share a reading, its content and basic metadata, such as title, topic, language, level and word count, become available to other learners. Reports can temporarily hide shared readings pending admin review. When the owner's account is deleted, a shared reading and its audio may remain with the owner shown as Deleted User. Reports remain for moderation, with links to any deleted account removed. Contact us if a privacy request concerns personal information in shared content.

Cookies and browser storage used by the site are described in our Cookie Policy.

2. Why we use information and our lawful bases

• Contract: information necessary to register and authenticate your account, provide learning features and paid access, and answer service or billing requests.
• Legitimate interests: protecting the service and its users, preventing abuse, reviewing reported content, diagnosing faults, monitoring reliability, and keeping limited evidence of completed requests. We consider the necessity of these uses and their effect on your rights.
• Consent: optional launch updates or marketing messages where you have opted in. You can withdraw consent at any time by emailing us; withdrawal does not affect processing already carried out lawfully.

Where a specific legal duty requires us to retain or disclose information, we rely on that legal obligation for that processing.

Account and authentication information is needed to provide an account. Billing information is needed for paid access. Community Library sharing and opting in to launch updates or marketing messages are optional.

3. Providers and international processing

We use Microsoft Azure for hosting, authentication, databases, storage, AI processing, text-to-speech and diagnostics, and Microsoft 365 for support and privacy correspondence. Microsoft processes service data under its applicable data protection terms, with separate purposes where those terms provide for them.

We use Stripe for hosted checkout, subscriptions, billing and the Customer Portal. Stripe also processes information for payment security, fraud prevention and legal obligations. Depending on the purpose, Stripe acts as our processor or as an independent controller under its own privacy terms.

These providers may process information outside the UK. Our direct business subscriptions use their standard data protection terms. Microsoft's contractual safeguards include standard contractual clauses. Stripe's transfer terms provide for applicable adequacy arrangements, with standard contractual clauses and the UK transfer addendum as applicable alternatives. You can read the linked safeguards or contact us for a copy or more information:

• Microsoft data protection terms
• Microsoft transfer safeguards
• Stripe Privacy Policy
• Stripe Data Transfers Addendum

4. Your choices and rights

You can update learning preferences, manage saved vocabulary, and choose whether to share an owned reading. You can request account or data deletion, or request an export of the account data MyFluentFox controls, by emailing privacy@myfluentfox.com. We may need to verify your identity before providing or changing account data.

Depending on the circumstances, you have rights to access your personal information, correct it, request erasure, restrict its use, and receive a portable copy. We will normally respond within one month and explain any lawful extension or exception.

Your right to object

You can object to processing based on legitimate interests and to direct marketing at any time by contacting us.

You can raise a concern with us or complain to the ICO.

5. Retention and account deletion

We retain account, learning and account-linked usage data while needed to provide your account and service. Access-request records are kept while needed to manage account access. When completing a deletion request, we remove account-linked records, private readings and associated private content/audio, and delete the Microsoft sign-in identity, subject to any applicable legal exception. An incomplete request remains open until required work is resolved.

When the owner's account is deleted, shared readings and associated generated content/audio may remain for the Community Library and moderation history, with links to the deleted owner removed and the owner shown as Deleted User. Reports remain for moderation history, with links to any deleted account removed. Reusable generated content and global caches without account links may also remain to support reuse and playback. Retained content can still contain personal information; tell us if your request concerns personal information within it.

MyFluentFox removes account-linked billing history and identifying links from completed payment-event records, while retaining minimal event identifiers for duplicate-payment-event protection. Stripe billing records are handled separately and may be retained for payment, fraud, dispute or legal purposes under Stripe's terms. Account deletion does not automatically erase all provider billing records.

Our retention policy for support/privacy correspondence is 12 months from receipt, and for outgoing replies 12 months from sending. A minimal deletion completion receipt is retained for 12 calendar months and does not contain your email or account ID. Information needed for an unfinished request is retained until it is resolved. We may retain necessary information longer for an ongoing case, dispute, investigation or legal hold. Temporary exports and unneeded attachments are removed after the request is completed.

Technical logs are retained as needed for diagnosis, reliability, security and abuse investigation. Backup and recovery copies can remain after deletion from live systems until their configured recovery periods expire. Provider records and browser storage follow separate processes; account deletion is not immediate erasure from every copy. For information about retained data in your request, contact us.

6. Children

MyFluentFox is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided personal information to us, please contact us so we can review and remove it where appropriate.

Contact us

MyFluentFox Ltd. For privacy questions, a data export request, or a data deletion request, email privacy@myfluentfox.com.