Data Report Card · Duolingo
Duolingo Data Report Card
Language learning · Duolingo, Inc.
Data
Practices
Practices
2Access1Portability1Friction2Deletion1Sells0Trains AI
=
C
7/12
Agent
Readiness
Readiness
2Access
1Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Duolingo's published policy; none has been tested (run by us) yet.
2Accessstated
Duolingo provides a self-serve Data Vault that lets you request a downloadable copy of the personal data associated with your account directly from account settings, with no fee — a self-serve in-product path.
Duolingo — Privacy Policy ("Your Rights" / Data Vault) · accessed Jun 2026 ↗1Portabilitystated
Duolingo states it will provide your data "in a format that can be transferred electronically to a third party", but the policy does not name the specific machine-readable format (e.g. JSON/CSV), so portability is scored at the exportable-but-format-unspecified level.
Duolingo — Privacy Policy (data-portability right) · accessed Jun 2026 ↗1Frictionstated
The request is self-serve to initiate but asynchronous to fulfil: Duolingo says it may take up to 30 days to action account-data and deletion requests, so it clears the initiation bar but not the immediate-fulfilment bar.
Duolingo — "Delete my account and data" help article · accessed Jun 2026 ↗2Deletionstated
Duolingo offers self-serve account and data deletion from within the app/site (via the Data Vault / account settings), which deletes your account and associated personal data, completed within up to 30 days.
Duolingo — "Delete my account and data" help article · accessed Jun 2026 ↗1Sells / sharesstated
Duolingo shares personal data with third-party advertising networks and analytics providers, which may constitute a "sale" or "share" under U.S. state privacy laws; it provides a "Do Not Sell or Share My Personal Information" opt-out and honors Global Privacy Control, so sharing is scored at the shares-with-opt-out level.
Duolingo — "Do Not Sell or Share My Personal Information" · accessed Jun 2026 ↗0Trains AIstated
Duolingo discloses it uses submitted audio recordings, transcripts and de-identified user data to train its own AI/ML models; while it bars third-party vendors (e.g. OpenAI, Google) from using the data for their own models, it offers no clear consumer opt-out from its own model training, so training use is scored at the no-opt-out level.
Duolingo — Privacy Policy (AI/model-training use) · accessed Jun 2026 ↗0API access — feeds Agent Readiness, not the /12stated
No consumer-grantable API lets an agent you authorize connect to your Duolingo account data — the only self-data path is the manual, asynchronous Data Vault export. Duolingo's developer APIs are bot / integration endpoints, not personal-data self-access.
Duolingo — Privacy Policy (Data Vault; manual export, no consumer data API) · accessed Jun 2026 ↗Reviewed Jun 2026 from Duolingo's own Privacy Policy, its "Delete my account and data" help article, and its "Do Not Sell or Share My Personal Information" (dnsspi) page. All cells "stated", not tested. Several duolingo.com pages returned JS-only shells to automated fetch, so policy text was confirmed via indexed excerpts of the same first-party URLs.
How to request your data from Duolingo
- Go to https://www.duolingo.com/settings/privacy — Duolingo's data-request entry point.
- self-serve Data Vault (account settings) to download a copy of your personal data; self-serve account + data deletion; "Do Not Sell or Share" opt-out at /dnsspi.
- Expected wait: self-serve in-product data export and account+data deletion via the Data Vault, fulfilled within up to 30 days; export format not explicitly specified; no consumer data API — Duolingo's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact privacy@duolingo.com: privacy@duolingo.com.
These steps reflect Duolingo's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.