Privacy Policy
A plain-language guide to the information MyLafzLab needs, how we use it, and the choices available to account holders and families.
Last updated: September 12, 2026. MyLafzLab is a playful Urdu-learning service for learners of all ages, designed with children and families in mind. This policy explains the information we collect, why we use it, and the choices available to account holders, parents, and caregivers.
At a glance
- Adults and eligible learners can create accounts; family accounts are managed by a parent or legal guardian.
- We collect account and security information needed to provide the service.
- We use a local age check before showing account-creation options; we do not send or store the date of birth entered for that check.
- We do not sell personal information or use behavioural advertising.
- You can request account deletion or contact us to ask about or correct account information.
Information we collect
We collect only the information needed to provide and secure an account:
- Account and sign-in information: an email address and a sign-in identifier. If someone chooses Google sign-in, we retain their Google account's unique subject identifier and verified email address to sign them in and link that Google identity to their MyLafzLab account. Google may return a display name and profile image during the sign-in exchange, but MyLafzLab does not store them.
- Profile information: first name, last name, and country when an account holder completes the profile form.
- Security and service information: session identifiers and limited account activity needed to keep the service secure and operating reliably.
- Feedback: when a signed-in account holder sends feedback, we include the message with their account details so we can respond.
- Mobile waitlist: if a parent, guardian, or person aged 18 or over chooses to join the mobile-app waitlist, we store their email address and consent timestamp in our application database. We use this only to send requested mobile-launch updates.
We do not ask anyone to provide a home address, phone number, precise location, photo, voice recording, or public posts. We do not use behavioural advertising.
Local age check for account access
Anyone can use the currently available learning activities as a guest. Before we show account-creation options, we ask for a date of birth to confirm whether the person may access those options. This check happens only on the device: we do not send, retain, or add that date of birth to an account. Parents and legal guardians should use their own details when creating or managing a family account.
How we use information
- to create and secure an account and send a requested sign-in code;
- to provide the activities and remember account settings;
- to maintain, protect, and improve the service; and
- to respond to support, privacy, or account-deletion requests.
Children and family accounts
MyLafzLab welcomes learners of all ages, and its activities are intentionally friendly for children. A child can use the currently available learning activities as a guest. When an account is used for a child, a parent or legal guardian should create and manage it, decide what profile information is shared, and supervise use of the service. Children should not enter personal information into the app.
If a child is below the age at which they can independently consent to online services where they live, their parent or legal guardian must provide any required authorization. Parents, caregivers, and account holders can contact us to ask about, access, correct, or delete information associated with an account.
Service providers and sharing
We use Microsoft Azure for hosting, database, and email delivery. When an account holder chooses Google sign-in, Google provides the identity information described above under Google's own terms and privacy practices. We use it only to authenticate or link an account; we do not access Google contacts, files, calendars, or other Google services. We do not sell personal information or share it for cross-context behavioural advertising.
Storage, security, and retention
We use reasonable administrative and technical safeguards designed to protect account information. Sign-in codes are one-time codes, and active sessions are protected with security controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We keep account information for as long as it is needed to provide the account, meet legal obligations, resolve disputes, or enforce our agreements. When an account is deleted, we delete the associated account data from the active application database, subject to limited backup and legal-retention periods.
Your choices and contact
To leave the mobile waitlist, or to ask a privacy question or request access or correction of account information, contact us at [email protected]. To request deletion, use our account deletion request page.
Changes to this policy
We may update this policy as MyLafzLab changes. If a change materially affects how we handle personal information, we will update the date above and provide any notice required by applicable law.