Privacy Policy

1. Who we are

StoryHebrew is operated by Latitude Point Ltd, a company registered in England and Wales ("we", "us", or "our"). We are the data controller for personal data processed through storyhebrew.com and related apps.

This policy explains what we collect, why we use it, who we share it with, and your rights under UK GDPR and the Data Protection Act 2018.

2. Information we collect

2.1 Information you give us

• Account: if you sign in with Google, we receive your name, email address, and profile picture. If you sign in with email, you provide an email address, a password (stored hashed by our authentication provider), and a display name if you add one. We may send verification or password-reset emails.
• Other: account preferences, feedback you submit in the product, and messages you send us.

2.2 Payment information

Premium payments are processed by Polar, our merchant of record. Polar handles card and billing details. We receive subscription and customer information needed to provide Premium. Polar's own terms and privacy notice apply to the checkout.

2.3 Information from how you use StoryHebrew

• Learning data: such as stories you use, vocabulary, progress, and similar activity.
• Technical and usage data: such as device and browser information, log data, and analytics about how the Service is used, so we can operate, secure, and improve it.

2.4 Cookies and similar technologies

We use cookies, local storage, and similar technologies to run the Service (for example to keep you signed in and remember preferences) and to understand and improve how it is used. We do not sell your personal information or use it for third-party advertising.

3. How we use your information

• Provide, operate, and improve the Service.
• Create and authenticate your account.
• Process subscriptions and related billing through Polar.
• Remember your progress and preferences.
• Send service emails (for example account and billing messages) and, where appropriate, product emails. You can opt out of non-essential email from your account or the unsubscribe link.
• Analyze usage, keep the Service secure, and comply with the law.

4. Legal bases (UK GDPR)

• Contract: providing the Service and fulfilling a subscription.
• Legitimate interests: operating, securing, and improving the Service, and communicating with you about it, where this does not override your rights.
• Legal obligation: where the law requires us, or Polar as merchant of record, to keep or process information.
• Consent: where we rely on consent, you may withdraw it.

5. Who we share data with

We do not sell your personal information. We use trusted providers to run the Service, including for hosting, authentication, payments (Polar), email, analytics, fonts, and audio. They process data on our behalf or as independent controllers for their own services (for example Polar for checkout). We may also disclose information if required by law, or if we transfer the business, with appropriate protections.

6. International transfers

We are based in the United Kingdom. Some providers process data in the UK, the EEA, the United States, or other countries. Where we transfer personal data out of the UK, we rely on appropriate safeguards such as the UK's adequacy regulations or standard contractual clauses, as applicable to that provider.

7. Retention

We keep personal data while your account is active and as needed to provide the Service. If you ask us to delete your account, we will delete or anonymize personal data within a reasonable period, except where we must keep records for legal, security, or billing purposes.

8. Security

We use HTTPS, hashed passwords for email accounts, access controls, and hosting providers who implement their own security measures. No online service is completely secure. Please use a strong unique password for email sign-in and keep your Google account protected if you use Google.

9. Your rights

Under UK GDPR you can ask us to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data, including by asking us to close your account.
• Restrict or object to certain processing.
• Receive a copy of data you provided, where applicable.

Email support@storyhebrew.com. We will respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk. If you live in the EEA you may complain to your local supervisory authority.

10. Children

The Service is not aimed at children under 13. We do not knowingly collect personal data from children under 13. If you think we have, contact us and we will delete it.

11. California and other regions

If you are in California, we do not sell or share personal information for cross-context behavioral advertising as those terms are used in the CCPA/CPRA. You can make the same access, correction, and deletion requests described above.

12. Changes

We may update this policy. The new "Last updated" date will appear at the top. If a change is material we will take additional reasonable steps to notify you, such as an email or a notice in the product.

13. Contact

Privacy questions: support@storyhebrew.com.