Privacy Policy for LootLingo

Effective Date: May 27, 2026

LootLingo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, LootLingo (the "Application"), available on the Google Play Store and Apple App Store.

Please read this Privacy Policy carefully. By downloading, installing, or using the Application, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

A. Personal Data

When you register or log in, we collect information that can be used to uniquely identify you:

• Account Information: Name, Email Address, and profile picture (retrieved via Google Sign-In or Sign in with Apple during registration).
• Friend Codes: A randomly generated alphanumeric identifier (e.g. LT-XXXX) to allow friends to connect with you.

B. Usage and Progress Data

To manage gamified challenges, we collect:

• Weekly and Lifetime XP: Aggregated points earned by completing spaced repetition vocabulary reviews.
• Unlocked Words List: English vocabulary cards added to your personal library, including mastery levels and review schedules.
• Leaderboards & Group Activity: Usernames, weekly scores, and group memberships which are visible to mutual friends or group members.

C. Device Permissions

• Camera Access (Local Only):

  [!IMPORTANT] LootLingo requests access to your device's camera to scan printed words using Optical Character Recognition (OCR). All image processing is performed entirely on your local device using Google ML Kit. No photos, videos, or image files are uploaded, saved, or sent to our servers or any third parties.

• Photo Library Access (Local Only):

  You may optionally grant permission to pick screenshots or photos from your gallery to recognize text. These photos are processed locally on-device and are never uploaded or saved.

• Network & Connection Status: Used to detect online/offline status to serve local dictionary caches and manage Cloud Function requests.