Privacy Notice

Who we are

Habla is operated by Nikolay Vasilyev, a sole trader based in Spain, who acts as the data controller for the personal data described here. Contact: hello@habla-app.com.

What we collect and why

• Account data — email address, display name, sign-in identifiers (including Google sign-in). Used to create and secure your account. Legal basis: performance of our contract with you.
• Voice recordings and transcripts — audio from your speaking turns and the text transcribed from it. Used to run the conversation, generate corrections and build your session summary. Legal basis: performance of our contract.
• Learning data — level estimates, grammar and vocabulary targets, mastery scores, streaks, XP, and personal details you volunteer in conversation (for example your job or interests) so the tutor can refer back to them. Legal basis: performance of our contract.
• Inferred learning-style signals — coarse indicators such as how much correction you seem to want or how formal you speak, used only to tune the tutor's behaviour. Legal basis: consent, which you can withdraw in Settings.
• Support and feedback — messages, ratings and testimonials you send us. Legal basis: legitimate interests in improving the product.
• Technical and usage data — device and browser information, IP address, error diagnostics, session timing and reliability logs. Used for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests; legal obligation where applicable.
• Email and notification preferences — reminder settings, push subscriptions, delivery and unsubscribe records. Legal basis: consent.

Who we share it with

• Service providers (subprocessors) — cloud hosting and database, speech recognition, AI model providers and text-to-speech, and email delivery. They process data only on our instructions.
• Stripe, our payment processor, for the sale and management of subscriptions, payments, tax calculation and invoicing. Card details are handled by Stripe and never reach our servers.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data and we do not use it for third-party advertising.

International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses, together with encryption in transit.

How long we keep it

Learning data, transcripts and summaries are kept for as long as your account is active, because they are what makes progress tracking work. Raw audio is kept only as long as needed to transcribe and analyse a session, then discarded. Reliability and email delivery logs are kept up to 12 months. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for tax or legal reasons.

Your rights

You have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. Email hello@habla-app.com and we will respond within one month. You can also complain to your local supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

Security

We use encryption in transit, row-level access controls so learners can only read their own data, hashed credentials handled by our authentication provider, and least-privilege access for administrative operations.

Cookies and local storage

We use only essential cookies and browser storage: keeping you signed in, remembering your preferences, and processing the checkout. We do not use advertising or cross-site tracking cookies. You can clear them in your browser at any time, which will sign you out.

See also our Terms & Conditions and Refund Policy.