lingobab.com  |  Last updated: 06/03/2026

1. About Us

Lingobab AI Limited (“Lingobab”, “we”, “us”) operates an online Arabic language learning platform at lingobab.com (the “Platform”). We are registered in the Dubai International Financial Centre (“DIFC”).

Registered address: Level 3, DIFC Innovation Hub, DIFC Dubai, Office no. IH-00-01-03-OF-05, United Arab Emirates. Contact email: info@lingobab.com

Data Protection Contact: info@lingobab.com, +974 9876 5432.

Governing law/Applicable Law: As a DIFC-registered entity, we are primarily subject to the Data Protection Law, DIFC Law No. 5 of 2020 (as amended). UAE Federal Personal Data Protection Law (Federal Decree-Law No. 45/2021) and the Child Digital Safety Law (Federal Decree-Law No. 26/2025) may also apply where relevant.

We do not sell, rent, or trade your personal data to third parties.

2. Data We Collect

“Personal data” means any data referring to an identified or identifiable natural person, as defined in the DIFC DP Law. We do not collect special categories of personal data (such as data relating to race, religion, health, or political opinions).

Category	Data collected
Personal data	First and last name, email address, phone number (if provided), country of residence, profile information.
Account and learning data	Login credentials, subscription information, learning progress, completed steps, test results, activity within courses.
Technical data	IP address, device and browser type, time zone, operating system, general usage and interaction logs.
AI/ML Platform data	interaction data used to personalise learning and improve our AI models, analytics and competency assessments, and voice/speech data where you use voice features.

We collect this data when you register an account, subscribe to a plan, make a payment, contact support, or use the Platform, and through automated technologies (cookies and analytics).

3. How and Why We Use Your Data

We process your personal data only where we have a lawful basis under the DIFC DP Law. The table below sets out our processing purposes and the corresponding legal basis.

Purpose	Lawful basis
Providing access to courses, managing your account, processing payments (via Stripe), delivering subscriptions.	Performance of our contract with you.
Operating and improving the AI-powered Platform, including adaptive content delivery, learning analytics, automated assessments, and speech/voice processing.	Performance of contract; legitimate interests in product improvement.
Training and improving AI/ML models using aggregated or pseudonymised interaction data.	Legitimate interests in innovation, with data minimisation safeguards.
Providing technical support; responding to queries and complaints.	Performance of contract; legitimate interests.
Website performance monitoring, security, and analytics.	Legitimate interests in network security and website optimisation.
Sending marketing communications (course updates, new features, offers).	Your consent. You may withdraw at any time via the unsubscribe link or by emailing info@lingobab.com.
Sending service notifications (payment confirmations, changes to terms).	Performance of contract; compliance with Applicable Law.
Compiling usage statistics; fraud prevention; protecting our economic interests.	Legitimate interests.
Complying with legal and regulatory obligations.	Compliance with Applicable Law.

Where we rely on legitimate interests, we have confirmed through a balancing assessment that our interests do not override your rights. You may request details by contacting us.

We rely on the lawful bases set out in the DIFC DP Law, including performance of contract, compliance with legal obligations, consent, and our legitimate interests, after carrying out a balancing test where required.

4. Cookies and Analytics

When you first visit our website, you can choose which cookie categories to allow. Only strictly necessary cookies are set without your consent; all other cookies (performance, functional, advertising) require your opt-in and can be changed at any time.

We use the following third-party analytics services, which collect anonymised data about website interaction: Google Analytics, Google Search Console, Semrush, Ahrefs, and Zoho.

5. Who We Share Data With

We may share your data with the following categories of recipients, each bound by contractual confidentiality obligations:

• Payment providers (e.g., Stripe): to process subscription payments;
• Hosting and cloud providers: for data storage and Platform infrastructure;
• Analytics providers (see Section 4): for website and Platform improvement;
• Technical contractors: for IT support and maintenance;
• Professional advisers: for legal, compliance, and audit purposes;
• Public authorities: where required by law or enforceable order.

All recipients process data in accordance with applicable laws. We do not share your data for third-party marketing purposes.

6. International Data Transfers

Your data is primarily stored in the DIFC, Dubai. If we transfer personal data outside the DIFC, we use appropriate safeguards under the DIFC DP Law, such as adequacy decisions, standard contractual clauses, binding corporate rules, or other permitted mechanisms.

​We document transfers and you can request details of the safeguards we use by contacting us.

7. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure in line with the DIFC DP Law. Payment transactions are encrypted via our payment providers.

You are responsible for maintaining the confidentiality of your account login credentials. If you suspect your data is no longer secure, please contact us immediately at info@lingobab.com.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected (Article 9(1)(h), DIFC DP Law):

Data category	Retention period
Account and profile data	Duration of your account. Upon request, your account and personal data will be deleted unless retention is required by law.
Learning and interaction data	Duration of your account. Aggregated/anonymised data may be retained longer for AI model improvement.
Marketing data	Until you withdraw consent or unsubscribe.
Log files and technical data	Short-term retention for security purposes; extended only where required for incident investigation.
Payment and transactional records	As required by applicable accounting and regulatory obligations.

We may deactivate accounts that have been inactive for more than one (1) year where there is no active subscription. Users will be notified in advance. When data is no longer needed, we securely delete, anonymise, or put it beyond further use (Article 22, DIFC DP Law).

9. Children’s Data

We do not knowingly collect personal data from children under thirteen (13) without explicit, documented consent from a parent or legal guardian, as required by the Child Digital Safety Law.

​For users aged 13–17, we apply enhanced default privacy settings and appropriate age-verification measures and do not use their data for targeted advertising or other commercial purposes beyond the authorised educational use.

If you believe we have collected data from a child without proper consent, please contact us immediately at info@lingobab.com.

10. Your Rights

Under the DIFC DP Law, you have the following rights (subject to conditions and exemptions set out in the law): 

• Access: request a copy of the personal data we hold about you;
• Rectification: correct inaccurate or incomplete data;
• Erasure: request deletion of your data where it is no longer needed or where you withdraw consent;
• Objection: object to processing based on legitimate interests or for direct marketing;
• Restriction: request that we limit processing in certain circumstances;
• Portability: receive your data in a structured, machine-readable format or request transfer to another controller;
• Withdraw consent: at any time, as easily as it was given; withdrawal does not affect prior lawful processing;
• Automated decisions: not be subject to decisions based solely on automated processing that significantly affect you, and request human review of such decisions;
• Non-discrimination: we will not deny you services or treat you differently for exercising your rights.

To exercise any right, contact us at info@lingobab.com. We will respond within one (1) month (extendable by up to two further months for complex requests, with notice to you).

11. Complaints

If you believe we have not complied with the DIFC DP Law, you may file a complaint with the DIFC Commissioner of Data Protection or bring proceedings before the DIFC Courts:

We encourage you to contact us first, but your right to complain to the Commissioner or bring court proceedings is not conditional upon doing so.

12. Data Breach Notification

If we become aware of a personal data breach, we will: (a) notify the DIFC Commissioner without undue delay (Article 41); and (b) notify you directly where the breach is likely to result in a high risk to your rights or security (Article 42), unless technical safeguards (such as encryption) have rendered the data unintelligible.

13. Third-Party Websites

Our website may contain links to third-party websites with their own privacy policies. We are not responsible for those policies and recommend you review them before submitting personal data.

14. Changes to This Policy

We may update this Policy from time to time. The latest version will always be published at lingobab.com/privacy-policy with the date of the last update. We will notify you of material changes via our website and, where appropriate, by direct communication.

15. Contact Us

Lingobab AI Limited Level 3, DIFC Innovation Hub, DIFC Dubai, Office no. IH-00-01-03-OF-05 United Arab Emirates Email: info@lingobab.com