Privacy Policy

Last updated: October 5, 2026

Hejly ("we", "us") is a language-learning app operated by Akkadian v/Ahmad Razoogi Abd-Ali in Denmark, which is responsible for your personal data. This policy explains what we collect, why, and the choices you have.

We never sell or rent your personal data, and we only use analytics or share data for advertising if you accept those cookies on our website. We use service providers to run Hejly and deliver the features you use. Their limited purposes and the data they receive are explained below.

What we collect

• Account details — your name, email address and password (stored hashed). If you sign in with Google or Facebook we receive your name, email and a unique account identifier from that provider to create or identify your Hejly account and sign you in.
• Learning data — the languages you study, your vocabulary progress, review history, XP, streaks and settings. This is the product; without it nothing can be scheduled or remembered.
• Purchase state — whether your subscription or trial is active. Payment itself is handled entirely by Apple's App Store, Google Play or Stripe on our website. We receive payment and subscription status and limited billing details, but not your full card number or card security code.
• Device basics — timezone and app language, used for scheduling reviews and localizing the interface.
• Vision photos — when you use Vision to identify an object, the photo you take or choose is sent to our servers and passed to our AI service provider to name the object. The photo is used only for that one identification and is not stored by us afterward.
• AI tutoring and voice practice — the writing, recordings and reference text you submit, together with relevant language, level and exercise context, are sent to our AI service provider for transcription, corrections or feedback. Tutor entries, including recordings, transcripts and feedback, are stored for your learning history.
• Device speech recognition — when you use your device's dictation service, it turns speech into text. Depending on your device and language, Apple or Google may process the audio. We receive the resulting text; recordings submitted for AI voice practice are handled as described above.
• Crash reports — if the app hits an unexpected error, it sends us the error message and technical stack trace (no personal content) so we can fix it.

What we do not do

• We never sell or rent your personal data.
• We do not show third-party advertising.
• We do not track you across other companies' apps or websites, apart from the analytics and ad measurement on our website that you can accept or decline, described below.

Cookies, analytics and ad measurement on our website

Our website uses a small number of necessary cookies to keep you signed in, protect forms and remember your language, theme and cookie choice. These do not need your consent.

If you accept cookies in the banner on our website, we also use the two tools below. Neither is loaded before you accept.

• Google Analytics, from Google Ireland Limited, shows us how the website is used. Google's script sets cookies in your browser (such as _ga) and tells Google which pages of our website you open, how you reached us, and basic details of your browser and device. It also records that an account was created or a membership started, without saying whose. We do not use Google Analytics for advertising, and we do not send Google your name, email address, learning data or payment details.
• The Meta Pixel, from Meta Platforms Ireland Limited, measures and improves our own advertising on Facebook and Instagram. Meta's script sets cookies in your browser (_fbp and, after you click one of our ads, _fbc) and tells Meta which pages of our website you open. When you create an account, start a checkout or begin a membership, we report that event to Meta from your browser and from our server, together with your IP address, browser type, those cookie identifiers and, if you are signed in, your email address and account number in hashed (SHA-256) form, so that Meta can match the event to a Meta account. We never send Meta your learning data, anything you write or record, or your payment details.

Google and Meta may process this information outside the European Economic Area, and Meta may also use it for its own purposes, such as improving its advertising products, as described in Google's and Meta's privacy policies. We and Meta are jointly responsible for collecting and sending the Meta Pixel data. The legal basis is your consent, which you can withdraw at any time under "Cookie settings" at the bottom of every page; this stops both tools and removes their cookies from your browser. Your choice is remembered for six months. All of this applies to our website only.

Service providers and limited data sharing

We disclose the data needed to operate your account, deliver the features you use and process purchases to the following providers:

• Hetzner Online GmbH — hosting and email. Our servers, database and account email services are hosted with Hetzner in Germany. Hetzner provides the infrastructure that stores and processes your account and learning data.
• Stripe — website payments. When you start a website purchase, we send Stripe your account name and email address, including an email obtained through Facebook or Google sign-in, to create or identify your billing account. Stripe processes your purchase, subscription and payment details. You enter payment details directly with Stripe. Stripe also processes data for purposes such as fraud prevention and legal compliance under its privacy policy.
• AI service provider — AI learning features. This provider receives the photos, writing, voice recordings and learning context needed for the Vision, tutoring, transcription and language assistance features you use.
• Cohere — enhanced library search. When enhanced search is enabled, search text is sent to Cohere to find and rank relevant learning material.
• ElevenLabs and Microsoft Azure Speech — pronunciation audio. The configured speech provider receives the text to turn into spoken pronunciation audio.
• Apple, Google and Meta — services you choose. These companies process information when you use their sign-in services. Apple and Google also handle purchases through their app stores and may handle your device's speech recognition. Google and Meta also receive the website analytics and ad measurement data described above if you accept those cookies.

We use these providers for the purposes described above and, apart from the ad measurement you can accept on our website, do not give them your personal data for their advertising or marketing. Some providers, including Stripe and AI services, may process data outside Denmark and the European Economic Area under their applicable data protection arrangements. Hosting in Germany does not mean that every provider processes data only in Germany.

We may also disclose personal data when required by applicable law or a binding legal order. Outside the purposes described in this policy, we do not share your personal data with third parties.

Your choices

• You can edit your profile, languages and preferences in the app.
• You can delete your account from Profile → Delete account. This permanently removes your account and learning data from our servers.
• You can accept or decline analytics and marketing cookies when you first visit our website, and change your choice at any time under "Cookie settings" at the bottom of every page.
• You can write to us on our contact page to request a copy of your data or ask any question about this policy.

Children

Hejly is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes in a meaningful way, we will note it here with a new "last updated" date.