Privacy policy

Last updated 2 October 2026

This policy explains what personal data Hispanea (“we”, “us”) collects when you use hispanea.app (the “Service”), why, who helps us process it, how long we keep it and the rights you have. We are the data controller. Questions: hello@hispanea.app.

1. Data we collect

Account: your name, email address, time zone and an optional profile photo. If you sign in with a password, our sign-in provider stores it only in scrambled (hashed) form; we never see it.
Learning profile (students):what you tell us when you join — your Spanish level, goals, interests, how you like to learn and when you’re free.
Lessons:bookings, attendance, your teacher’s notes, homework, vocabulary and practice results, messages with your teacher, notes you leave for your next lesson, and lesson reviews you write.
Lesson transcripts and AI features: see section 3.
Payments: handled by Stripe. We receive the payment status and amount, and the card brand and last four digits — never your full card number.
Technical: basic server logs (such as IP address, browser and time of a request) needed to run and secure the Service.

2. Why we use it

To give you the lessons and the platform you signed up for — our contract with you (GDPR art. 6(1)(b)).
To take payments and keep accounting records — our contract with you and our legal obligations (art. 6(1)(c)).
To send emails about your account and lessons: confirmations, reminders and recaps (contract).
To keep the Service secure and fix problems — our legitimate interest in running a safe service (art. 6(1)(f)).
To show your review on the teacher’s public page, only if you tick the box allowing it (consent, art. 6(1)(a)). Only your first name and initial are shown, and you can withdraw consent at any time.

We don’t sell your data, we don’t show ads and we don’t use analytics or advertising trackers.

3. Video lessons, transcripts and AI features

Video: lessons take place over in-browser video provided by Daily.co. Lessons are not recorded.
Live transcription:during a lesson, Daily.co’s live transcription turns what is said into text. We store this transcript with the lesson.
AI lesson recaps: after the lesson, the transcript is sent to an AI model from OpenAI to write your recap: a summary, new vocabulary, feedback on what went well and what to practise, a short quiz and homework. The recap and some figures about the lesson (for example how long each of you spoke) are stored with the lesson, and your teacher can see them.
AI tutor and café practice: when you chat with the AI tutor or practise in the café, what you type — together with relevant context from your account, such as your level, goals, recent lessons and vocabulary — is sent to the AI provider to write a reply. Chats with the AI tutor are not saved in your account; your café practice results and any notes you leave for your teacher are.
The AI providers process this data only to produce the reply, on our instructions, and their business terms don’t allow it to be used to train their models.
AI can make mistakes. Recaps and AI answers are learning aids, not a formal assessment of your Spanish.

You can ask us to delete the transcript of any lesson at any time by emailing hello@hispanea.app.

4. Who we share it with

Your teacher sees what they need to teach you: your learning profile, lessons, homework, messages, notes, recaps and practice progress. Teachers never see your card details.

We use these service providers (“processors”), who handle data only on our instructions:

Supabase — sign-in, database and file storage (such as profile photos)
Vercel — hosting of the website and app
Stripe — payments, and payouts to the teacher
Daily.co — video lessons and live transcription
Resend — sending emails
OpenAI — AI lesson recaps, the AI tutor and café practice; it processes lesson transcripts and the messages you send

Some of these providers are based in, or use servers in, the United States. When data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We may also disclose data when the law requires it.

5. Cookies

We only use cookies the Service needs to work: keeping you signed in, recognising the browser where you asked for a sign-in link, and remembering a layout preference in the app. We don’t use analytics, advertising or tracking cookies, so there is nothing to consent to.

6. How long we keep it

Account, learning profile and lesson history: while your account is open. When you ask us to delete your account, we do so within 30 days.
Lesson transcripts: stored with the lesson while your account is open, and deleted with your account — or sooner if you ask.
Payment records: kept for as long as tax and accounting law requires (in Spain, generally up to six years), even after an account is deleted.
Server logs: kept only briefly by our hosting provider, for security and troubleshooting.
Backups: deleted data can remain in encrypted backups for a short time until they are replaced.

7. Your rights

Under the GDPR you can ask to see the data we hold about you, correct it, delete it, get a copy in a portable format, object to or restrict some processing, and withdraw consent (for example, to showing your review) at any time. Email hello@hispanea.appfrom the address on your account and we’ll reply within one month.

Deleting your account: email hello@hispanea.appwith “Delete my account” from your account’s email address. We’ll confirm, cancel any future lessons and subscriptions under our Cancellation & refunds policy, and delete your data as described in section 6.

If you’re unhappy with how we handle your data, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es) or the authority where you live.

8. Security

We use established providers, encrypted connections and access controls. You can sign in with a password or with a one-time link sent to your email, so keep your email account secure and use a strong password.

9. Children

If a learner is under 18, a parent or guardian must create and manage the account and agrees to this processing on their behalf.

10. Changes and contact

We’ll update this policy when things change and tell you by email or in the app about important changes.

Email: hello@hispanea.app
Website: hispanea.app