Duolingo, the widely used language-learning app, is facing scrutiny after third-party reports claimed that a data exposure incident may have involved personal information tied to millions of users.