Duolingo
Transparency
Breakdown
| Subprocessor list | not found | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | not found | 0 / 8 |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 19 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Duolingo's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/duolingo"><img src="https://thirdpartyindex.com/badge/duolingo.svg" alt="Duolingo transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/duolingo)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
None extracted.
Security record
What public security catalogs list for Duolingo, in their words.
Data breaches
- Duolingo 2,676,696 accounts Email addresses; Names; Spoken languages; Usernames
In August 2023, 2.6M records of data scraped from Duolingo were broadly distributed on a popular hacking forum. Obtained by enumerating a vulnerable API, the data had earlier appeared for sale in January 2023 and contained email addresses, names, the languages being learned, XP (experience points), and other data related to learning progress on Duolingo. Whilst some of the data attributes are intentionally public, the ability to map private email addresses to them presents an ongoing risk to user privacy.
Have I Been Pwned
Breach data: Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages (evidence)
Service status
- 3 incidents in 90 days
- 3 major or critical
- 27 min typical time to resolve
- 53 min longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Duolingo is experiencing increased errors | critical | 27 min | |
| Duolingo is experiencing increased errors | critical | 20 min | |
| Duolingo is experiencing increased errors | critical | 53 min | |
| Duolingo Android app issues | major | 32 min | |
| Issues with Video Call and Roleplay | none | 1 h 33 min | |
| Issues with Video Call and Roleplay | none | 30 min | |
| Duolingo is experiencing increased errors | critical | 45 min | |
| Duolingo is experiencing increased errors | critical | 23 min |
As Duolingo's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Changes
None since tracking began.