Legal

Privacy Policy

Last updated: September 7, 2026

Lenton ("Lenton", "we", "us") is operated by Sahand Khademi as an individual. This policy explains what personal data Lenton collects, why, and what control you have over it. Contact [email protected] for anything about your data or this policy.

What we collect

Creating an account requires an email address, a display name, and a password (stored as a salted hash, never in plain text). Using Lenton also creates learning data tied to your account: saved vocabulary, watch and reading history, practice answers, and preferences you set.

If you connect a licensed music provider (Apple Music or Spotify), that connection is made directly between your browser and the provider using your own account — Lenton does not see or store your provider password, and does not download or proxy the audio itself.

We do not run analytics, advertising, or tracking scripts of any kind. We do not know how you use the app beyond what's necessary to run it — there is no third-party tracker on this site.

Why we collect it

• To create and secure your account (email, password hash).
• To provide the features you use — vocabulary lookup, reading, watch history, and practice tracking are the product itself, not a byproduct.
• To send account-related email only (e.g. verifying an address or a password reset), when that feature is enabled — never marketing.

Who else sees it

Your learning data is stored in a private, per-account database — other accounts on Lenton cannot see it, including other members of the same Lenton deployment. Some features call external services to do their job, using only what's needed for that request (not your account identity):

• Wiktionary/Wikipedia — word definitions.
• LRCLIB — song lyrics, when you use the Listen feature.
• Apple Music / Spotify — only if you connect your own account to stream a song you choose.
• Google Gemini / ElevenLabs — only where AI-assisted translation or pronunciation audio is used, sending the text needed for that one request.

We never sell your data, and never share it for advertising purposes.

How long we keep it

We keep your account and learning data for as long as your account exists. You can export a full copy of your data at any time from Settings, and request account deletion by contacting us — deletion removes your account's data from active storage. Backups made before a deletion request may persist for a limited period before being cleared in the ordinary backup rotation.

Your rights

If you're in the EU/EEA or UK, you have rights under the GDPR (and equivalent protections elsewhere), including the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at the address above to exercise any of these — we'll respond as quickly as we can.

Where data is stored

Lenton's servers are currently hosted in the United States via our infrastructure provider. If you're in the EU/EEA, this means your data is transferred outside the EU/EEA to be stored; we take reasonable care to use providers with appropriate safeguards.

Changes to this policy

If this policy changes in a way that matters, we'll update the date above and, where required, let you know directly.