Privacy Policy
Effective and last updated: 28 July 2026
Konit, LLC is responsible for personal data used to provide Dublo accounts and services. We do not sell personal data. Optional web analytics and advertising technologies are off until you choose them.
1. Controller and contact
Konit, LLC ("Konit", "Dublo", "we", "us") is the controller of personal data described in this Policy. Mailing address: 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. Privacy requests: support@dublolearn.app.
2. Data we collect
Account and profile
Email address, display name if supplied, authentication provider, account identifier, account dates, language, country information you choose to provide and communication preferences. Apple, Google or passwordless email authentication means we do not receive your sign-in password.
Learning and service data
Onboarding answers, placement responses, study goals, lesson progress, answers, review history, streaks, saved preferences, certificates, feedback and support messages.
Tutor applications
If you apply to teach on Dublo: your name, photo, intro video, bio, specialties, lesson price, timezone and weekly availability. Approved tutor profiles are shown to learners. Payout identity and banking details are collected directly by Stripe under its own privacy terms, not by us.
Device, usage and diagnostics
Device and browser type, operating system, app version, language, approximate screen size, timestamps, pages or app screens used, interactions, error and performance information, referrer and campaign parameters. On the web, optional analytics and advertising identifiers are collected only according to your cookie choices.
Payments and subscriptions
Plan, subscription status, price, currency, transaction and customer identifiers, renewal and expiry information, refunds and referral attribution. Where we grant a refund we keep a record of it — the amount, the date, the payment it relates to and the email address it was granted to — because our 14-day refund promise applies once per person and we cannot apply it consistently without one. Stripe, Apple or Google processes payment credentials. We do not receive or store complete card numbers.
Notifications
If you enable notifications, device or push subscription identifiers, notification preferences, delivery and interaction status.
Affiliate and payout information
Affiliate applicant name, email, social profile, audience description, referral code, referrals, commissions, campaign choices and agreement-acceptance record. Stripe collects identity, tax, bank and payout information for Stripe Connect. We receive account and payout status but do not store full bank account details.
Dublo does not currently request contacts, photo library, precise location or microphone recordings. If a future feature requires additional permission, we will ask first and update this Policy.
3. Why we use data and legal bases
| Purpose | Typical legal basis |
|---|---|
| Create accounts, deliver lessons, sync progress and provide paid access | Contract |
| Process payments, refunds, commissions, accounting and tax records | Contract and legal obligation |
| Secure the service, prevent abuse and diagnose failures | Legitimate interests and legal obligation |
| Improve lessons and product usability using first-party service data | Legitimate interests, balanced against user rights |
| Send product marketing or optional reminders | Consent where required; you may opt out at any time |
| Use optional web analytics or advertising measurement | Consent |
| Operate the Affiliate Program | Contract, legitimate interests and legal obligation |
4. Sources
We receive data directly from you, automatically from your device when permitted, from Stripe, Apple, Google and RevenueCat regarding transactions or authentication, and from an affiliate link when you choose to use one.
5. Service providers and recipients
We disclose only what is reasonably needed to providers that help us operate Dublo, including:
- Supabase for authentication, databases and server functions;
- Stripe for web payments, fraud prevention, and affiliate and tutor payouts;
- LiveKit for the real-time audio, video and text-chat connection during live lessons;
- Apple and Google for sign-in, app distribution and store billing;
- RevenueCat for mobile subscription status;
- OneSignal for notifications when enabled;
- Google Analytics and Meta for optional web measurement or advertising when accepted;
- hosting, email, security, development and support providers working under appropriate obligations;
- authorities or professional advisers where required by law or necessary to protect rights.
Live lessons. A lesson is a real-time audio and video call, with a text chat inside the lesson room, between you and your tutor. The media and chat travel through LiveKit, which carries the connection on our behalf under a processor agreement; the connection is encrypted in transit. We do not record lessons — not the video, not the audio, not the chat — and neither we nor LiveKit keep their content afterwards. Nobody at Dublo watches or listens to a lesson. Both our Terms and the Tutor Agreement forbid either side recording without the other's clear consent. What we do keep is the booking itself (who, which tutor, when, what was paid) and technical connection logs such as join and leave times and error events, which we use to bill correctly and to investigate faults or reports of misconduct. If you report something that happened in a lesson, we can only work from what you and the tutor tell us, because there is no recording to review.
Tutors you book. If you book a lesson with a tutor, that tutor sees your display name and a limited view of your course progress — your current unit, recently learned words and recent difficulties — so the lesson can build on what you already know. Tutors see this only for learners who booked them, only while the booking relationship exists, and may not use it for anything other than preparing and delivering your lessons.
We may disclose data in a merger, financing, reorganisation or sale, subject to confidentiality and applicable notice requirements. We do not sell personal data for money.
6. Advertising choices and US state rights
Meta Pixel and related conversion measurement may be considered "sharing", "targeted advertising" or a similar regulated activity in some US states even though we do not sell data for money. You may reject or withdraw advertising consent through . We do not knowingly sell or share personal data of users under 16.
7. International transfers
Konit is in the United States and our providers may process data in the United States, European Economic Area and other countries. Where required, we use recognised safeguards such as adequacy decisions, standard contractual clauses or equivalent contractual and technical measures. You may contact us for information about applicable safeguards.
8. Retention
- Account and learning data: while your account is active, then deleted or anonymised within a reasonable period after deletion unless retention is legally required.
- Lessons you booked: when you delete your account, the booking record itself is kept but your identity is removed from it. We do this because the record is what a tutor's earnings, payout and our own tax accounting rest on — deleting it would erase part of someone else's history, not just yours. What remains is the date, the amounts and the tutor; your name, email and course data are gone, and the tutor sees the lesson as belonging to a deleted account. If you have a lesson still to come, cancel it first so the payment is settled, then delete.
- Payment, tax, fraud and payout records: generally up to 7 years or the period required by applicable law.
- Support and affiliate records: while needed to administer the relationship, resolve disputes and meet legal obligations.
- Optional analytics and advertising data: according to your choices and the provider periods described in our Cookie Notice.
- Backups: deleted on a rolling schedule, subject to security and legal holds.
9. Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; opt out of targeted advertising; or appeal a refusal. You may delete your Dublo account from Settings. You may also email us. We may verify your identity and may retain information that law requires us to keep.
EEA and UK users may complain to their local data-protection authority. California and other eligible US residents may use an authorised agent where permitted. We will not discriminate against you for exercising a privacy right.
10. Children
Dublo is not directed to children under 13, and a child under 13 must not create or use an account. Where local law requires a higher age for independent consent to online services, a parent or guardian must authorise and supervise the account. Contact us if you believe a child provided data without proper permission; we will investigate and delete it where required. Live tutor lessons are restricted to people aged 18 or over, separately from the course: booking one requires an age confirmation, which we store as a date and time on your profile.
11. Security
We use access controls, encryption in transit, restricted server credentials and other organisational and technical safeguards. No system is completely secure, so we cannot guarantee absolute security.
12. Automated decisions
Placement and learning recommendations may be generated from your answers and progress. They personalise course sequencing but do not produce legal or similarly significant effects. Affiliate fraud and payment providers may use automated signals to flag activity for review.
13. Changes
We will update the date above when this Policy changes. We will provide additional notice for material changes where required.
14. Contact
Konit, LLC131 Continental Dr, Suite 305
Newark, DE 19713, USA
support@dublolearn.app