Privacy policy

Who we are

Lalea is operated by the Subpair team (full operator details will be published before public launch). Questions about your data: a contact email will be published here before public launch.

What we collect and why

• Plex sign-in. When you sign in, Plex gives us an access token and your Plex username. We use them to find your Plex server and to read what is playing. We never see your Plex password.
• Jellyfin or Emby sign-in. You give us your server address and confirm the sign-in with a Quick Connect code or your username and password. The password goes once to your own server and is never stored; we keep the access key your server returns and your username there.
• Your server address and access token. Needed to ask your server which title is playing and to fetch its subtitle files.
• Playback information. The title, playback position and the subtitle text of what is playing right now. Used to show the current line on your phone. We do not store your viewing history beyond the list below.
• Films translated this month. A list of the films you used AI translation for, to count the free plan limit and to show it on your Account page.
• Settings. The language you learn, the language you translate to, the date you first signed in.
• Subtitle files you open or upload (dual subtitle maker, browser player, listening mode). Kept in memory only while you use them, and gone when the service restarts. Subtitles you find by title are downloaded from OpenSubtitles and kept as a shared cache - they contain nothing about you.
• Video files you open in the browser player are played by your browser and never sent to us.
• Listening mode. Your phone's microphone is used by your browser's built-in speech recognition (Google in Chrome, Apple in Safari, under their own policies). Lalea receives only the recognised words needed to find the place in the subtitles, never the sound, and does not store them.

Translations are kept for your account only

When subtitles are translated for you, text is recognised from speech, or you correct a line, the result is saved for your account and reused only for you. Another user watching the same file gets their own. Deleting your data removes these too.

Who else processes data

• Plex Inc. - sign-in happens on plex.tv under Plex's own privacy policy.
• OpenSubtitles - when you search subtitles by title, the title you type is sent to OpenSubtitles.
• AI translation providers. Subtitle text is sent to an AI model through OpenRouter to be translated. We request providers that do not retain or train on this data. Only subtitle text is sent - never your name, account or server.
• Hosting. The service and the data above live on a rented server.

We do not sell data, show ads or use third-party analytics or tracking.

Cookies and local storage

One cookie keeps you signed in (until 6 months after your last visit, at most a year after you sign in, or until you sign out). Your browser also remembers small preferences: site language, translation language and light or dark theme. Nothing else.

How long we keep data

Your sign-in, settings and translation list are kept until you delete them or stop using Lalea. You can delete them at any time on the Account page ("Delete my data"). Signing out removes the session from this device.

Your rights

You can see what we keep about you on the Account page, delete it there, or write to a contact email will be published here before public launch to get a copy or ask a question. You can also revoke Lalea's access in your Plex account settings under "Authorized Devices", or in Jellyfin and Emby under Dashboard, Devices.

Changes

If this policy changes in a way that matters, we will say so on this page and update the date above.