HedgyThis Privacy Policy explains how Hedgy (“Hedgy”, “we”, “us”, or “our”) collects, uses and protects your personal information when you use the Service at hedgy.app and its subdomains. By using the Service you agree to the practices described here.
1. Information we collect
Account data: your email address, display name and a securely hashed password. Learning data: the words you add, your training results, progress and settings. Audio: when you use pronunciation features, short voice recordings are processed to score your speech. Usage data: basic technical logs needed to run and secure the Service.
Google Calendar data (optional, teacher accounts only): if you connect Google Calendar, Hedgy uses the Google Calendar API with read-only access to read your calendar list and the events on the calendar you select, so it can show your existing lessons inside Hedgy. Hedgy never creates, edits or deletes anything in your Google Calendar. See section 12.
2. How we use your information
We use your information to provide and improve the Service, personalize training, generate feedback, maintain security, and communicate important account or service notices.
3. Payment data
Payments are handled by Paddle.com, our Merchant of Record. When you purchase, Paddle collects and processes your payment details directly under its own privacy policy. Hedgy does not store your full card information; we receive only the information needed to manage your subscription or wallet (such as transaction status and country for tax).
4. AI processing
To generate translations, examples, grammar notes and speech feedback, some text and audio is processed by third-party AI providers (such as OpenAI). This data is used to return a result to you and is not used by us to build advertising profiles.
5. Cookies
We use essential cookies and local storage to keep you signed in and remember preferences. We do not use them for cross-site advertising.
6. Sharing and subprocessors
We share data only with service providers that help us operate the Service — for example payment processing (Paddle), AI processing, hosting and email delivery — under appropriate safeguards. We do not sell your personal information. Data obtained through the Google Calendar API (see section 12) is never sold, shared with third parties or used for advertising.
7. Data retention
We keep your data while your account is active and for as long as needed to provide the Service and meet legal obligations. You can delete your account, after which we remove or anonymize your personal data, subject to limited retention required by law.
8. Your rights
Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact [email protected].
9. Security
We use industry-standard measures, including encryption in transit and hashed passwords, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16 without appropriate consent.
11. Changes
We may update this policy; material changes are reflected by the “Last updated” date above.
12. Google user data (Google Calendar)
The Google Calendar integration is optional and available only to teacher accounts that choose to connect it. Hedgy requests read-only access (the calendar.readonly scope) and uses the Google Calendar API solely to display your existing lessons inside Hedgy. We access your calendar list, the events (title and date/time) on the calendar you select, and your Google account email; we never create, edit or delete anything in your Google Calendar. This data is used only to show your schedule in the app — never for advertising, never sold, never shared with third parties, and never used to develop, improve or train AI or machine-learning models. A Google refresh token is stored encrypted at rest (AES-256-GCM); you can disconnect at any time, which revokes Hedgy’s access with Google and deletes the stored token and any cached Google data.
Hedgy’s use of and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
13. Contact
Questions about this policy or your data can be sent to [email protected].