Privacy policy

Who is responsible for your data

Controller: Henoch Schmohe, self-employed professional (trabajador autónomo, Spain).

Tax ID (NIF): X4159627P

Registered address: Calle Hermandad de San Isidro 3, 28670 Villaviciosa de Odón, Madrid, España

Contact: henoch@hsmart.dev

AI is part of the service

Your stories, their pictures, the narration, the questions, the corrections to your writing and the feedback on your speaking are generated by an artificial intelligence system. You are interacting with AI, not with a teacher reading your work.

The AI models used are Google Gemini models, accessed through the Gemini API. AI output can be wrong: treat corrections and explanations as practice material, not as authoritative language advice.

What we collect

Your account. Your email address, your name if you give one, and either a hashed password or the fact that you signed in with Google. Sign-in sessions last 30 days.

Your reading profile. The language you are learning, the language you want explanations in, the app language, your level, your topics, the hero you picked, the name you show to others, and your time zone (so that a day on your trail is your day).

Your books and your work. Every chapter written for you, how you rated it, your answers to the questions, the text you write, and the feedback and transcripts produced from what you said out loud.

Your trail and points. The days you read, the days covered by a stepping stone or by a friend's bridge, and the points (XP) you earned.

Your circle. Which circle you belong to, and the waves and bridges exchanged with its members.

Delivery settings. Whether you want the morning chapter by email, and, if you switch on notifications, the technical address your browser gives us to reach that device.

Pictures and narration. The cover and scene picture of each chapter and its spoken version, stored so they are not generated again every time you open them.

Usage counters. The number of AI requests your account uses, so the service can be kept within a workable budget.

We do not run advertising, we do not profile you, and there are no third-party analytics or tracking cookies on this site. The only cookie is the one that keeps you signed in. Your reading preferences (page colour, text size) are kept in your browser's own storage and never leave your device.

What other people can see

Nobody, unless you choose to. On your own, your books, your trail and your work are visible only to you.

Members of your circle. If you create or join a circle (up to eight people), its members see the name you show, your hero, the language and level you are learning, your trail, your points for the week, whether you have read today and the title of your latest chapter. They can open the chapters you have read, re-told for them in their own language. They never see your answers, your writing, your recordings or the feedback on them. Leaving the circle ends this.

Share links. If you press Share, a public page is created that anyone with the link can open. It shows the name you show, the language you are learning, your trail, and the title, cover and opening lines of that chapter. To have a link switched off, write to us.

Why we process it, and on what legal basis

• To create your account, write your chapters, keep your trail and your shelf, and run the circle you choose to join: performance of the contract you enter into when you sign up (art. 6.1.b GDPR).
• To send password reset and email verification messages: performance of that same contract.
• To send the morning chapter by email or a notification to your device: only if you switch it on yourself, and until you switch it off again in the app (art. 6.1.b GDPR, a feature you request).
• To count AI usage, prevent abuse and keep the service running safely: our legitimate interest in a service that is not abused and does not collapse under cost (art. 6.1.f GDPR).

We do not sell your data and we do not use your writing or your recordings to train AI models.

Who else processes your data

These providers process data on our behalf, only to make the service work:

• Vercel (hosting and server logs).
• Neon (the PostgreSQL database that holds your account, profile, sessions and work).
• Google (the Gemini API, which generates stories, pictures, narration, writing feedback and speaking feedback; and Google Sign-In, if you choose that way in).
• Cloudflare R2 (private storage for chapter pictures and narration).
• Resend (delivery of password-reset and verification emails, and of the morning chapter if you switch it on).
• Your browser's notification service (Apple, Google or Mozilla, depending on your device), which carries a notification to your device if you switch notifications on. It receives the short text of the notification.

When you tap a word to look it up, that single word is sent to Wikimedia's Wiktionary API. No account information goes with it.

Where your data is stored

The database is hosted in the European Union, in Amazon Web Services' Frankfurt region (eu-central-1). Chapter pictures and narration are held in a private Cloudflare R2 bucket in the EU jurisdiction.

Requests to the Gemini API, emails sent through Resend and notifications carried by your browser's notification service may be processed outside the European Economic Area. Those transfers rely on the European Commission's standard contractual clauses, which are part of the providers' terms.

What we send to the AI

To write a chapter we send your level, your languages, your topics, your hero, a summary of the earlier chapters of your book, how you rated the last ones and the language points you recently found hard. Your email address and your account details are never sent.

To draw a picture we send a description of the scene and the drawing of your hero. To give you writing feedback we send the text you wrote. To give you speaking feedback we send the audio you recorded.

When a member of your circle opens one of your chapters, the text of that chapter and the name you show are sent so it can be re-told in their language. For the weekend story of a circle, only the heroes of its members are sent.

Your recordings are not kept. They are sent for analysis and only the resulting transcript and feedback are stored with the chapter, so you can read them again.

How long we keep it

Your account and everything in it stays for as long as your account exists, because your shelf of past books is part of the product. Notification addresses are removed as soon as your device stops accepting them or you switch notifications off.

There is currently no self-service delete button. Write to henoch@hsmart.dev from the address you signed up with and your account, your books, your trail and your share links will be deleted within 30 days.

Your rights

You can ask for access to your data, correction of anything wrong, erasure, restriction of processing, portability of what you have written, and you can object to processing based on legitimate interest. Write to henoch@hsmart.dev and you will get an answer within one month.

If you are not satisfied, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the supervisory authority where you live.

Age

This service is not aimed at children. If you are under 14 (under 15 if you live in France, under 16 if you live in Germany), do not create an account without a parent or guardian.

Changes

If this policy changes in a way that matters, the date at the top changes with it. Significant changes will be announced in the app.