Privacy Notice

1. Who is responsible for your data

Celsius BI operates LearnMizo at learnmizo.com. Celsius BI is the data controller for the personal data we process to provide the learning service: we determine why and how that data is used.

For privacy questions or to exercise your rights, email hello@mizolanguage.com, addressing your request to Celsius BI.

2. Personal data, purposes and legal bases

• Account information: email address, a securely hashed password where password login is used, and an optional display name. We use these to create your account, sign you in and recover access. Legal basis: performance of our contract with you.
• Learning activity: lesson completion, progress and learning statistics, such as XP, streaks and study time where recorded. We use these to save and display your learning progress. Legal basis: performance of our contract with you.
• Purchase and access records: your account identifier, purchased package, transaction references, purchase date and refund/access status. We use these to unlock the correct lessons, manage access and resolve purchase enquiries. Legal bases: contract performance and legal obligations for records we must retain.
• Phrase-sheet and update requests: your email address and signup source. We use these to provide the material you request and, where you have opted in, send updates. Legal basis: consent. You can withdraw consent or request removal at any time.
• Support and service emails: messages you send us, your contact details, and email delivery, bounce and unsubscribe records. We use these to answer enquiries, send account messages, troubleshoot delivery and respect your preferences. Legal bases: contract performance for account support; legitimate interests in reliable communication and preventing unwanted email; legal obligations where applicable.
• Technical and security information: IP addresses, device/browser information and service logs processed when you use the site. We use these to operate the service, diagnose problems and prevent abuse or fraud. Legal basis: legitimate interests in a safe, reliable service, balanced against your rights.
• Analytics: Google Analytics processes pages visited, usage events, browser/device information, online identifiers and approximate location. We use this to understand usage and improve the site. You can block analytics cookies with your browser settings.
• Advertising measurement: Google Ads measures whether a visit or purchase followed one of our ads, using pages visited, purchase value and online identifiers. In regions that require consent (the EEA, UK, Switzerland and Quebec) this measurement runs only after you accept via “Cookie settings” in the footer; you can change your choice anytime in the same place. See Google's Business Data Responsibility information for how Google handles this data.

We do not receive or store your full payment card details. Paddle handles payment information under its own privacy notice.

3. Who we share data with

We do not sell your personal data. We share only what is needed for the purposes described in this notice with:

• Service providers: Lovable Cloud and its subprocessors for hosting, database, account authentication and email delivery, and Google for site analytics. These providers process data to support the service.
• Paddle, our Merchant of Record: for the sale of the course, purchase and access management, payments, refunds, tax compliance and invoicing. Our products are one-time purchases, not subscriptions. Paddle acts as an independent controller for its own payment and legal-compliance processing. See Paddle’s Privacy Policy.
• Professional advisers: legal and accounting advisers where necessary for advice, recordkeeping or resolving disputes.
• Authorities: regulators, courts or law enforcement when disclosure is legally required.

4. International transfers

Our providers may process data outside your country, including outside the European Economic Area or United Kingdom. Where European or UK data-protection law applies, transfers must use an applicable adequacy decision or appropriate safeguards, such as European Commission Standard Contractual Clauses and, for UK transfers, the UK Addendum or International Data Transfer Agreement, with additional measures where required. Contact Celsius BI for information about the safeguards applicable to your data.

5. How long we retain data

We retain personal data only for as long as needed for the purpose for which it was collected, including applicable legal obligations and resolving disputes. When no longer needed, it is deleted or anonymised. Retention is determined as follows:

• Account, profile and lesson-progress data are retained while your account exists and removed when you delete it.
• Phrase-sheet and update signup data are kept while needed to fulfil your request or while your consent remains valid. You can unsubscribe or request deletion.
• Support correspondence and delivery/security logs are kept only while needed to resolve the enquiry, troubleshoot delivery, protect the service or deal with a related dispute.
• Minimal bounce and unsubscribe records may be retained while needed to avoid sending unwanted emails.
• Purchase and invoice records are retained for the period required by applicable tax/accounting law and where necessary for refunds or legal claims. Paddle retains its own records under its privacy notice.
• Analytics data are subject to Google Analytics retention settings and are kept only as needed for usage analysis; you may request deletion of personal data that can be identified as yours.

6. Account deletion and your rights

You can delete your account using “Delete account” in your dashboard, or request deletion by email. Account deletion removes your login, profile, lesson progress and the phrase-sheet/waitlist signup associated with your email. Records required for legal compliance, disputes or respecting unsubscribe preferences may be retained as described above. Deleting your account does not itself request a payment refund.

Depending on applicable law, you may have rights to access, correct or erase your data, restrict processing, receive a portable copy, object to processing based on legitimate interests and withdraw consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

For EEA and UK users, these include the rights provided by the GDPR and UK GDPR. Contact Celsius BI at hello@mizolanguage.com. We respond within one month; if a lawful extension is necessary because a request is complex or numerous, we will explain it within that month. We may need proportionate identity verification to protect your data.

You can complain to your local supervisory authority. EEA authorities are listed by the European Data Protection Board; UK users can contact the Information Commissioner’s Office.

7. Cookies and browser storage

Essential cookies and browser storage support sign-in and learning preferences. Google Analytics cookies are loaded to measure site usage. Google Ads cookies measure whether our ads lead to visits and purchases; in regions that require consent they load only after you accept via “Cookie settings” in the footer.

You can revisit your choice using “Cookie settings” in the footer. To stop analytics after previously accepting, select Decline and reload the page. You can also remove existing cookies using your browser settings; blocking essential storage may prevent sign-in or saved preferences.

8. Security

We use appropriate technical and organisational measures, including encrypted connections, securely hashed passwords and access controls that restrict access to account and learning records. No system is completely secure. We will handle and notify affected users of personal-data breaches as required by law.

9. Children

If you are below the age at which you can consent to data processing or enter a contract in your country, involve a parent or guardian before creating an account or buying the course. If you believe a child has provided personal data without the required permission, contact Celsius BI so we can investigate and remove it where appropriate.

10. Updates and related terms

We will update the date on this notice when it changes and give appropriate notice of material changes. For purchase and refund information, see our Terms of Service and Refund Policy.