Do Not Sell or Share My Personal Information
Effective Date: 20 February 2026 | Version: 1.3 | Last Revised: 23 February 2026
| Legal Entity | Limeslime Ltd, a private limited company registered in England and Wales |
|---|---|
| Contact | legal@endlessly.io |
| Applicable Law | California Consumer Privacy Act (CCPA) as amended by CPRA (Cal. Civ. Code § 1798.100 et seq.) |
| Rights covered | Right to Opt Out of Sale / Sharing; Right to Limit Use of Sensitive Personal Information; Right to Non-Discrimination |
| ✅ We do not sell your personal information for money. We do not share your personal information with third parties for cross-context behavioural advertising. This page explains what this means and what rights you have as a California resident. |
|---|
1. DOES ENDLESSLY SELL PERSONAL INFORMATION?
1.1 No. Limeslime Ltd does not “sell” personal information as defined by the CCPA/CPRA (Cal. Civ. Code § 1798.140(ad)). We do not exchange your personal information for money or other valuable consideration.
1.2 We do not “share” personal information for cross-context behavioural advertising as defined by the CPRA, except as described in Section 2 regarding advertising SDKs on the Free Tier, which may constitute ‘sharing’ under a broad interpretation of CPRA. We do not otherwise disclose your personal information to third parties to deliver targeted advertising based on your activity across different websites, apps, or services.
1.3 This means we are not required to offer an opt-out from sale or sharing under Cal. Civ. Code § 1798.120. However, we are providing this page to be fully transparent about our data practices and to offer you maximum control over your personal information.
| ℹ Even though we do not sell or share personal data, California law still gives you important rights: to know what we collect, to delete it, to correct it, and to limit use of sensitive data. All of these are available to you and described below. |
|---|
2. WHAT ABOUT ADVERTISING AND ANALYTICS SDKS?
2.1 The Free Tier of the App may include advertising served through third-party advertising SDKs (such as Google AdMob). Under a broad interpretation of the CPRA, the transfer of data to an advertising SDK could potentially be characterised as “sharing” for cross-context behavioural advertising, even if no money changes hands.
2.2 To give you full transparency and control:
- We allow you to opt out of advertising SDKs at any time via App Settings > Privacy > Advertising
- Premium Subscribers are never shown third-party advertising; advertising SDKs are disabled on Premium accounts
- Advertising SDKs are always disabled for child users (under 13 or applicable local minimum age)
- Opting out of advertising will switch you to contextual advertising (based on the content of your current lesson, not your personal profile) or no advertising
2.3 If you are a California resident and wish to opt out of any data disclosure that could be characterised as “sharing” under the CPRA, you can:
- Use the in-app opt-out: App Settings > Privacy > Advertising > Off
- Email your opt-out request to legal@endlessly.io with subject line: “CCPA Opt-Out Request”
- Use the Global Privacy Control (GPC) signal on our website — we honour GPC signals at endlessly.io
2.4 Once you opt out, we will not request that you opt back in to the sale or sharing of your personal information for at least 12 months, in accordance with Cal. Civ. Code § 1798.135(a)(4).
3. RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION
3.1 The CPRA gives California residents the right to limit the use and disclosure of “sensitive personal information” (Cal. Civ. Code § 1798.121). The following categories of sensitive personal information may be collected by the App:
| Category | How We Use It | Can You Limit It? |
|---|---|---|
| Audio / Voice Recordings (pronunciation practice) | Transmitted to AI speech recognition providers to provide pronunciation feedback. Stored for up to 90 days. | Yes — opt out of voice features in App Settings > Privacy > Voice Features. Note: disabling voice features limits pronunciation feedback. |
| Account Login Credentials (email + password hash) | Used solely for authentication. Never used for advertising or profiling. | No — required to maintain your account. We never use credentials for any secondary purpose. |
| Precise Age Range (where provided) | Used to determine applicable age protections. Not used for advertising. | Contact legal@endlessly.io to request deletion of age data. |
3.2 We use sensitive personal information only for the purposes for which it was collected (providing the App service) and for security and fraud prevention. We do not use sensitive personal information to infer characteristics about you for advertising or profiling purposes.
3.3 To exercise your right to limit the use of sensitive personal information, contact us at legal@endlessly.io with subject line: “CPRA Sensitive Data Limit Request”.
4. YOUR FULL CCPA / CPRA RIGHTS
4.1 As a California resident, you have the following rights under the CCPA/CPRA:
| Right | Description and How to Exercise |
|---|---|
| Right to Know (Cal. Civ. Code § 1798.110) | Request that we disclose: (a) the categories of personal information we collect; (b) the purposes for collection; (c) the categories of sources; (d) the categories of third parties we share with; (e) the specific pieces of personal information we hold about you. Submit a verifiable consumer request to legal@endlessly.io. |
| Right to Delete (Cal. Civ. Code § 1798.105) | Request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is required by law or to complete a transaction). Submit request to legal@endlessly.io or via App Settings > Account > Delete Account. |
| Right to Correct (Cal. Civ. Code § 1798.106) | Request that we correct inaccurate personal information we hold about you. You can correct most information directly in your account settings, or contact legal@endlessly.io. |
| Right to Opt-Out of Sale/Sharing (Cal. Civ. Code § 1798.120) | We do not sell or share personal information. If you believe any of our practices constitute sharing under CPRA, contact legal@endlessly.io or use App Settings > Privacy > Advertising. |
| Right to Limit Sensitive PI (Cal. Civ. Code § 1798.121) | Request that we limit use of your sensitive personal information to necessary service provision. Contact legal@endlessly.io with subject: “CPRA Sensitive Data Limit Request”. |
| Right to Non-Discrimination (Cal. Civ. Code § 1798.125) | We will not discriminate against you for exercising any CCPA/CPRA right. Exercising your rights will not result in denial of service, different prices, or reduced quality. |
| Right to Data Portability | Request a copy of your personal information in a portable format. Contact legal@endlessly.io. |
5. HOW TO SUBMIT A PRIVACY REQUEST
5.1 Methods for Submitting Requests
You may submit any CCPA/CPRA privacy request through any of the following methods:
| Method | Details |
|---|---|
| legal@endlessly.io — include your full name, email address registered with the App, and the specific right(s) you wish to exercise | |
| In-App | App Settings > Account > Privacy Requests (where available) |
| Subject Line Format | Use one of: “CCPA Know Request” | “CCPA Delete Request” | “CCPA Correct Request” | “CCPA Opt-Out Request” | “CPRA Sensitive Data Limit Request” |
5.2 Verification
5.2.1 To protect your privacy, we must verify your identity before processing any request that involves disclosing or deleting your personal information. We will ask you to confirm:
- The email address registered to your Endlessly account
- One or more recent account details (e.g., date of account creation, subscription status) to verify ownership
5.2.2 We will not ask for your password or financial information as part of identity verification.
5.2.3 If we cannot verify your identity, we will inform you and may be unable to fulfil the request.
5.3 Authorised Agents
5.3.1 You may designate an authorised agent to submit a request on your behalf. The authorised agent must provide written proof of authorisation (e.g., a signed letter from you) when submitting the request. We may require direct verification from you to confirm the agent’s authority.
5.4 Response Timeframes
| Action | Timeframe |
|---|---|
| Acknowledgement of request | Within 10 business days |
| Response to Know / Correct / Delete request | Within 45 calendar days (extendable by a further 45 days with notice if reasonably necessary) |
| Response to Opt-Out request | Within 15 business days |
| Frequency of requests honoured | Twice per 12-month period (Know requests); no limit on Delete / Correct / Opt-Out |
6. PERSONAL INFORMATION COLLECTED IN THE PAST 12 MONTHS
6.1 The following table summarises the categories of personal information we have collected, disclosed, and — where applicable — the business or commercial purpose, in the past 12 months. We have not sold any category of personal information.
| Category | Examples | Purpose | Disclosed to Third Parties? | Sold? |
|---|---|---|---|---|
| Identifiers | Name, email, username, IP address, device ID | Account management, security, analytics | Yes (processors only) | No |
| Personal Records (CA Civ. Code § 1798.80) | Name, billing address, payment token | Order processing, fraud prevention | Yes (payment processors only) | No |
| Protected Classifications | Age range | Age-appropriate protections | No | No |
| Commercial Information | Subscription history, purchase history | Billing, support, analytics | Yes (processors only) | No |
| Biometric / Audio Data | Voice recordings (pronunciation) | AI pronunciation feedback | Yes (AI providers only) | No |
| Internet / Network Activity | App usage, features accessed, session data | Analytics, performance, improvement | Yes (analytics processors) | No |
| Geolocation (coarse) | Country/region from IP address | Content localisation, legal compliance | Yes (analytics processors) | No |
| Audio / Visual Data | Voice recordings | Pronunciation feedback feature | Yes (AI providers only) | No |
| Inferences | Learning level, language goals, skill progress | Personalised learning paths | No | No |
| Sensitive PI — Audio | Voice recordings | Pronunciation feedback only | Yes (AI providers only) | No |
6.2 “Disclosed to Third Parties” means disclosed to service providers and contractors acting on our behalf under data processing agreements. This does not constitute a “sale” or “sharing” under CCPA/CPRA.
7. NON-DISCRIMINATION
7.1 We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not:
- Deny you goods or services
- Charge you different prices or rates for goods or services
- Provide you with a different level or quality of service
- Suggest that you will receive a different price, rate, or quality of service for exercising your rights
7.2 We may, however, offer financial incentives for the collection, retention, or sharing of your personal information, or a different price or rate if the difference is reasonably related to the value of your data. Any such programme will be disclosed separately and will require your opt-in consent.
8. GLOBAL PRIVACY CONTROL (GPC)
8.1 We honour the Global Privacy Control (GPC) signal on our website at endlessly.io. The GPC is a browser-level signal that communicates your preference not to have your personal information sold or shared.
8.2 When we detect a valid GPC signal from a California resident on our website, we will automatically treat it as an opt-out of sale and sharing of personal information. This opt-out applies to the browser and session in which the signal is detected.
8.3 For the mobile App, please use App Settings > Privacy > Advertising to opt out, as GPC is a browser-based standard and does not apply directly to mobile apps.
9. CONTACT US AND COMPLAINTS
| Company | Limeslime Ltd |
|---|---|
| Email for Privacy Requests | legal@endlessly.io |
| Registered Address | Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD |
| Response Time | Acknowledgement within 10 business days; full response within 45 days |
9.1 If you are not satisfied with our response to a privacy request, or if you believe we have violated your CCPA/CPRA rights, you may:
- Submit a complaint to the California Privacy Protection Agency (CPPA): cppa.ca.gov
- Contact the California Attorney General’s Office: oag.ca.gov/privacy
- Contact the Complaint Assistance Unit of the Division of Consumer Services, California Department of Consumer Affairs: 1625 North Market Blvd., Suite N112, Sacramento, California 95834 | Tel: (800) 952-5210
9.2 If you are a Virginia resident and your appeal of a denied privacy request is unsuccessful, you may contact the Virginia Attorney General at oag.state.va.us.
10. UPDATES TO THIS PAGE
10.1 We will update this page if our data practices change materially or if California privacy law is amended in a way that affects our obligations. Updates will be notified via in-app notification and/or email at least 30 days before they take effect.
10.2 This page was last updated on 20 February 2026.
Limeslime Ltd — Do Not Sell or Share My Personal Information v1.3 — Effective 20 February 2026 | Last Revised 23 February 2026
Contact
Limeslime Ltd
Stoney Works, 8 Stoney Lane
London, United Kingdom, SE19 3BD
legal@endlessly.io