Privacy Policy
This page explains what information Hertzlingo collects from you, why it needs them, and what control you have over them.
Last updated: ۱۴۰۵/۰۷/۱۴
1. What information we collect
To create your account and provide the service, we store this information:
- •Account information: Display name, email, and password. The password is always stored "hashed" — even we cannot read it.
- •Google sign-in: If you sign in with your Google account, we only receive your name, email, and email-verification status from Google. We have no access to your Google password.
- •Profile photo: Only if you upload one yourself (optional).
- •Learning data: Your answers to questions, whether they were correct, your level, points, daily streak, and exam results. These are needed to calculate your level and progress chart.
- •Speaking exam audio (Sprechen): If you take a speaking exam, your recorded audio is stored so a teacher can review it and give feedback.
- •Writing exam text (Schreiben): The text you write in a writing exam, for the same reason.
- •Technical information: Your last-active time, your time zone and language, and - if you enable notifications - your browser's push identifier or, in our Android app, the device's push token (delivered through Google's Firebase Cloud Messaging). In the apps we also record which screens are opened (without their content), the app version and the app edition, to improve the product.
- •Community and messages: Your friends list, the messages you send in match chats and Sprechen Partner chats, your support tickets, and any reports or blocks you make.
- •Clips and voice you submit: If you contribute shadowing/dictation clips, the video or audio and its text. Your voice recordings for shadowing are turned into text by our own speech-recognition server and are not sent to an outside speech service.
- •Telegram: Only if you link Telegram to your account: your Telegram ID and username, and the messages and voice messages you send to our bot.
- •Payments: We never see or store your card number. Payments are handled by Stripe or Zarinpal; we keep only the order record (plan, amount, date, status).
2. Why we keep this information
- •So you can log into your account and your progress stays in sync across devices.
- •To calculate your language level (A1 to C1), points, rank, and progress chart.
- •So a teacher can review your speaking and writing exams.
- •To respond to your support tickets.
- •To prevent fraud and abuse of the subscription and match systems.
- •To send the reminders and notifications you have turned on (browser, app, Telegram, email).
- •To run the community features: friends, matches and Sprechen Partner pairing.
3. Who we share it with
We do not sell your personal information, and we do not hand it over to anyone for advertising. Information leaves our system only in these cases:
- •Reviewing teachers: The audio file or exam text you submitted, along with your display name, is visible to the teacher who grades it.
- •Infrastructure services: Our servers (rented from Hetzner) and the email-delivery service (Resend). These are purely a technical backbone and are not permitted to use the information independently.
- •Google sign-in: Only if you choose this sign-in method yourself.
- •Payment providers: Stripe (international cards) or Zarinpal (Iran) receive the payment details you enter on their own pages.
- •Google (push and video calls): Firebase Cloud Messaging delivers push notifications to the Android app, and Google Meet provides the video-call link for Sprechen Partner (we do not record these calls).
- •Telegram: If you link Telegram, messages between you and our bot pass through Telegram.
- •Legal requirement: If a competent judicial authority officially requests it.
4. What information is public
Your display name, profile photo, level, points, and rank are visible to other users in the ranking table and on your public profile page. If you don't want to be seen, you can change your display name or leave out a profile photo. Your email is never shown to other users.
5. Cookies and local storage
We do not use advertising cookies or third-party trackers. To keep you logged in, your session token and your settings (theme, language, level) are stored in your browser's local storage — these are essential and always active. With your permission (set via the cookie banner), we also use anonymized Vercel Analytics page-view data to understand how the site is used; choosing "Necessary only" means analytics never loads at all. Clearing your browser data will log you out of your account and reset your cookie choice.
In the Android and Windows apps, your login token is stored encrypted on your device, and the apps contain no advertising or third-party tracking code. You can turn push notifications off in the app's profile page or in your phone's settings.
Usage statistics in the apps: the Android and Windows apps record which screens are opened (screen name, time, app version, a random session ID and your account ID) and send this only to our own server, to improve the app; no answer content, messages or device identifiers are sent. The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). You can switch it off at any time in the app under Settings → Privacy → Share usage statistics; deleting your account also deletes this data.
6. Data retention and deletion
Your information is retained as long as your account is active. Whenever you want, you can delete your account from the Settings section; this deletes your account information, answers, and any submitted audio files and texts. Any remaining time on an active subscription is lost when the account is deleted and is not refunded. Payment records are kept for as long as the law requires, and matches you played remain in your opponents' history without your name. In the same section you can also download a copy of all your data.
You can unlink Telegram or switch off any reminder whenever you like; from then on we stop using the related identifier (Telegram ID or push token).
7. Users under 18
Use of this service by minors under 18 must be with the knowledge and consent of a legal guardian. If we become aware that an account belongs to a child under 13, we will delete it.
8. Changes to this policy
If this policy changes, the date at the top of this page will be updated, and for significant changes we will notify you through an in-app notification.
9. Contact us
For any question about privacy or a request to delete your information, open a ticket in the support section or email [email protected]. Full contact information is on the contact page.