← Back to XLEMETY

Privacy Policy

Last updated: August 4, 2026

This Privacy Policy explains how XLEMETY collects, uses, and protects information when you use the Platform. It applies to Learners, Coach Teachers, Natives, and Recruiters alike, with role-specific notes where relevant. Sharing your information with XLEMETY — and deciding whether verified companies can see your profile — is always your choice.

1. Information We Collect

CategoryExamples
Account informationName, email, password (hashed), country, role (Learner / Coach Teacher / Native / Recruiter)
Learning dataSession completions, scores, momentum, linguistic error history, placement and level exam results
Verification data (Coach Teachers)Self-attestation of non-native status, placement assessment result (must reach B2 or C1 to be approved)
Verification data (Natives)Country of residence, identity verification for eligible countries (US/UK/CA/AU)
Verification data (Recruiters)Corporate email domain, business documents submitted for verification, tax/business ID
Payment dataSubscription plan and billing status. Card and payment details are handled directly by our payment processor — XLEMETY does not store full payment credentials.
Session dataLive session duration, background transcription used for objective scoring (grammar, vocabulary detection)
Technical dataDevice/browser information, IP address, general usage analytics

2. How We Use Your Information

3. Live Session Recording and Transcription

Every session on XLEMETY — Coach Mode, Real Mode, Team Challenge, and XLEMETY Live — takes place directly between real, live human participants: a real Coach Teacher or a real Native, never an AI character or synthetic voice. During these sessions, the Platform performs background transcription for the purpose of objective scoring — grammar, vocabulary, pacing, and duration metrics — that supports, but never replaces, the direct feedback given by the human on the other side.

4. Who We Share Information With

XLEMETY does not sell personal information to third parties. XLEMETY is not a recruitment agency and does not act on behalf of Learners or Recruiters in any hiring process — see our Terms of Service for details.

5. Profile Visibility and Consent

Only Learners who check this box have their profile — including validated performance metrics — made discoverable to verified, paying Recruiters. Nothing about your profile is shared with a company unless you take this affirmative action. You can withdraw this consent at any time from your account settings, which removes your profile from Recruiter visibility going forward.

6. Data Retention

Account and learning data is retained for as long as your account remains active. Upon account deletion, personal data is removed within a reasonable period, except where retention is required for legal, tax, or dispute-resolution purposes (for example, business documentation submitted during recruiter verification).

7. Your Rights

Depending on your country of residence, you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, contact us via the channels listed below. We will respond within a reasonable timeframe.

8. Cookies

XLEMETY uses only strictly necessary cookies — the kind required for the Platform to function, not for advertising or tracking. Specifically: an authentication cookie that keeps you logged in (set by our authentication provider, Supabase), and a security cookie used by our bot-protection service (Cloudflare Turnstile) during signup and login. XLEMETY does not use Google Analytics, advertising cookies, or any third-party tracking cookies. Because these cookies are strictly necessary for the Platform to work, they do not require a cookie consent banner under applicable law — you cannot opt out of them while remaining logged in, the same way you can't opt out of a login cookie on any secure website.

9. Data Security

XLEMETY uses industry-standard security measures — including access controls at the database level and encrypted connections (HTTPS) — to protect your information, consistent with practices used across modern web platforms. No system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. International Data Transfers and Legal Compliance

XLEMETY operates from Colombia and relies on infrastructure providers that may process data in other jurisdictions, including the United States. By using the Platform, you acknowledge that your data may be processed outside your country of residence, under providers bound by their own data protection commitments.

Your personal data is handled in accordance with applicable data protection law: for users based in Colombia, this includes Law 1581 of 2012 (Habeas Data) and its regulatory decrees; for users elsewhere, XLEMETY applies comparable protections consistent with frameworks such as the GDPR (for users in the European Union) and the CCPA (for users in California). Regardless of location, XLEMETY commits to processing your information lawfully, transparently, and only for the purposes described in this Policy.

11. Children's Privacy

XLEMETY is intended for users 18 years of age or older. We do not knowingly collect personal information from children. If we become aware that a child's data has been collected without appropriate consent, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the Platform or by email. Continued use of XLEMETY after changes take effect constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy or your data can be directed via LinkedIn (XLEMETY), X (@xlemety), or Reddit (u/xlemety).

This document is a general-purpose Privacy Policy template adapted to XLEMETY's current data practices. It has not been reviewed by a licensed attorney or data protection specialist. Before relying on it for compliance at scale — particularly regarding GDPR (EU users), CCPA (California users), or Colombia's Habeas Data law — professional legal review is strongly recommended.