Privacy Policy

1. Information We Collect

When you create an account on hearito, we collect the following information:

• Account data: name, email address, and profile picture (if you sign in with Google).
• Practice data: sessions, scores, streaks, and XP earned while using the app.
• Billing data: if you subscribe to a paid plan, payment is processed by Asaas. We store your subscription status but do not store credit card numbers.

2. How We Use Your Information

• To provide and improve the pronunciation practice service.
• To track your progress, maintain streaks, and display leaderboards.
• To process payments and manage subscriptions.
• To generate AI-powered practice sentences tailored to your level.
• To send essential service notifications (not marketing).

3. Third-Party Services

We use the following third-party services:

• Google OAuth: for account authentication. Google receives your login request; we receive your name, email, and profile picture.
• OpenAI: to generate practice sentences. Your chosen topic is sent to OpenAI, but no personal data is included.
• Asaas: for payment processing. Asaas handles your billing data under their own privacy policy.
• Database hosting: your data is stored securely in an encrypted database with secure connections.
• YouTube: for video-based practice. We fetch public subtitle data from YouTube videos you choose.

4. Data Storage and Security

Your data is stored in an encrypted database. Sessions are managed with secure HTTP-only cookies. We use rate limiting, input validation, and content security policies to protect the application. All communication is encrypted via HTTPS.

5. Data Retention

We retain your account and practice data for as long as your account is active. If you delete your account, all associated data will be permanently removed within 30 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Export your practice data.

7. Cookies

We use a single session cookie to keep you logged in. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

8. Children's Privacy

hearito is not directed at children under 13. We do not knowingly collect personal data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email or in-app notification.

10. Contact

If you have questions about this privacy policy, contact us at privacy@hearito.com.