HablaDay ("we", "our", "us") is operated by OrekunMedia. This policy explains what data we collect when you use HablaDay — available at habla.day as a web app (PWA) and as a native iOS app on the Apple App Store — how we use it, and your rights.
We believe in collecting as little data as possible. We do not sell your personal data to third parties.
1. Who we are
HablaDay is a product of OrekunMedia. If you have any questions about this policy, email us at [email protected].
2. Data we collect
We collect only what is necessary to operate the service:
- Anonymous user ID — when you first open HablaDay, Firebase Authentication assigns you a random anonymous ID. No name, email, or phone number is required at this stage.
- Email address — if you purchase a Premium subscription via our website (habla.day), Stripe collects your email at checkout. We store this email against your account in order to send you a payment confirmation email and a sign-in link for the iOS app. If you purchase via the iOS App Store, Apple processes the payment and we do not receive your email address.
- Learning progress — your word scores, layer progress, streak, and session history are stored in Firebase Firestore against your user ID. This data is also cached locally on your device.
- Payment information — if you subscribe via our website, payments are processed by Stripe. If you subscribe via the iOS App Store, payments are processed by Apple Inc. via RevenueCat. In both cases, we receive only a subscription status and a customer reference — we never see or store your full card number or bank details.
- Usage analytics — basic, aggregated usage data (screens visited, session events) may be collected via Firebase Analytics to help us improve the app. No personally identifiable information is attached to analytics events.
- Microphone audio — pronunciation feedback is processed on your device using the Web Speech API or the iOS Speech framework. Audio is not sent to our servers and is not recorded or stored by us.
- Device and app information — standard crash reports and performance data may be collected by Firebase to help us identify and fix issues.
3. How we use your data
- To provide and maintain the HablaDay service
- To save and sync your learning progress across sessions and devices
- To manage your Premium subscription (via Stripe or Apple IAP)
- To send a transactional welcome email with your App Store download link and sign-in link after a web purchase (if you provided an email at checkout)
- To understand how the app is used and improve it (aggregated analytics only)
We do not use your data for advertising, profiling, or any purpose beyond operating HablaDay.
4. Third-party services
HablaDay uses the following third-party services, each governed by their own privacy policies:
- Firebase (Google) — anonymous authentication, Firestore database, and analytics. Privacy policy →
- Stripe — payment processing for web and PWA purchases. Privacy policy →
- Apple Inc. / RevenueCat — in-app purchase processing for iOS App Store purchases. Apple's privacy policy → | RevenueCat's privacy policy →
- Resend — transactional email delivery (sends your welcome email after a web purchase). Privacy policy →
- Netlify — web hosting and serverless functions. Privacy policy →
- Google Cloud Text-to-Speech — generates the Spanish audio you hear in the app. Audio is generated server-side; only the Spanish word text is sent to Google's API, not your personal data. Privacy notice →
5. Email communications
We only send you email in the following circumstance: when you complete a purchase via our website and provide an email address at Stripe checkout, we send you a single transactional welcome email containing your payment confirmation and a sign-in link for the iOS app.
We do not send marketing emails, newsletters, or promotional messages unless you separately opt in to receive them. You can opt out of any future communications by emailing [email protected].
6. Data retention
Your learning data is retained for as long as your account exists. If you uninstall the app or clear your browser data, your local data is deleted. Firebase data associated with your user ID is retained until you request deletion.
To request deletion of all your data, email [email protected] with the subject line "Data Deletion Request". We will process your request within 30 days.
7. Cookies and local storage
HablaDay uses browser local storage (not third-party cookies) to save your learning state between sessions. No tracking cookies are set by us. Third-party services (Firebase, Stripe) may set their own cookies in accordance with their policies.
8. Children's privacy
HablaDay is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us at [email protected] and we will delete it promptly.
9. Your rights (UK / EU)
Under UK GDPR and EU GDPR, you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability
To exercise any of these rights, email [email protected]. We aim to respond within 30 days.
10. International data transfers
HablaDay is hosted on Netlify (US) and uses Firebase (Google, US-based infrastructure). By using HablaDay, you consent to your data being processed in the United States and other countries where these service providers operate. These transfers are made under appropriate safeguards (Standard Contractual Clauses or equivalent).
11. Changes to this policy
We may update this policy from time to time. We will post the updated policy here with a new effective date. Continued use of HablaDay after a change constitutes acceptance of the updated policy.
12. Contact
Questions? Email us at [email protected].