This policy explains what HebrewO collects, what stays on your device, and how to reach us. It applies to hebrewo.app and the tracing course we run there. It should be read with our Terms of Use.
Operator contact: hello@hebrewo.app.
1. What HebrewO is
HebrewO is a handwriting practice site. You can trace today’s word and use parts of the course without an account. Paid plans unlock the full alphabet and 500-word path. Payments go through Stripe. Accounts, when enabled, use our auth provider.
2. Data that stays on your device
If you use HebrewO without signing in, progress lives in this browser: which glyphs you passed, quiz unlocks, review schedule, and streak. That data is stored in local storage on your device. We do not receive those records until you sign in and subscribe. Paid subscribers: course progress (letters traced, quiz scores, streak) syncs to your HebrewO account. Free daily practice on the home page stays in your browser until you subscribe.
The tracing canvas draws in this tab. Stroke paths from a practice session are not uploaded as image files to HebrewO for grading. Clearing cookies and site data deletes local progress. We cannot restore a browser-only record.
3. Data we collect if you make an account
- Email address and authentication identifiers from our auth provider.
- Account timestamps (created, last sign-in) that the provider stores.
- Billing status needed to know whether monthly or lifetime access is active, tied to the Stripe customer created at checkout.
We ask for an email so we can log you in, send receipts through Stripe, and answer support mail. We do not require your real legal name to practise.
4. Payments
Card details are entered on Stripe’s checkout. Stripe processes USD 7.99 monthly (after a 7-day trial) and USD 54 lifetime payments. We receive a customer id, payment status, the price you chose, and limited billing metadata (for example that the purchase is monthly or lifetime). We do not store full card numbers, CVC, or the full PAN on HebrewO servers.
Stripe’s own privacy policy governs the payment form. You can read it at stripe.com.
5. Hosting logs and security
Our hosting provider records ordinary web logs: IP address, date, URL, referrer, user agent, and error traces. These exist to run, debug, and protect the site (abuse, outages, fraud). They are not used to rebuild your handwriting. Logs are kept only as long as needed for those purposes, typically weeks unless we are investigating an incident.
6. Email
If you write to hello@hebrewo.app, we keep the thread long enough to help you and to keep a record of refunds or account requests. If we send transactional mail (for example a login link), that mail is sent through our email vendor. We do not sell a marketing list. We will not add you to a promotional list unless you opt in separately.
7. Cookies and similar storage
- Local storage: progress, streaks, and course unlocks in this browser.
- Auth cookies or tokens: only if you sign in, so the session can persist.
- Stripe cookies on checkout: set by Stripe on their pages.
We do not run a third-party advertising cookie network on HebrewO today. If we later add analytics or ads, we will update this policy before that ships.
8. Optional telemetry
HebrewO can send a thin usage heartbeat (that the app is running, not your traces) if telemetry is configured for the deployment. It is not required for tracing. It does not include your canvas strokes or the contents of local progress records.
9. How we use information
- To provide the course, canvas, and quizzes.
- To create and secure accounts, and to restore access.
- To take payment, run trials, cancel subscriptions, and issue refunds.
- To answer email and fix bugs.
- To keep the Service stable and to prevent fraud or abuse.
- To comply with law, tax, or accounting rules that apply to the charges Stripe collects for us.
We do not sell your personal information. We do not use your handwriting samples to train public AI models.
10. Legal bases (EEA, UK, similar laws)
Where those laws apply, we rely on:
- Contract: providing the Service you asked for, including paid access.
- Legitimate interests: keeping the site secure, understanding crude traffic, and answering support.
- Consent: where we ask for it, for example optional marketing.
- Legal obligation: tax and accounting around payments.
11. Sharing
We share data only with:
- Stripe, for checkout and subscriptions.
- Our auth provider, for login.
- Our host, email, and (if enabled) telemetry vendors, to run the site.
- Professional advisers or authorities if required by law, or to establish or defend a legal claim.
If HebrewO is transferred as a business, account and billing records needed to keep the Service running may move with it. We would still expect the buyer to honour this policy or give you notice.
12. Retention
- Browser progress: until you clear it, or the browser expires it.
- Account email and auth records: while the account is open, then deleted or anonymised within 90 days after a verified deletion request, except data we must keep for tax (Stripe already holds payment history).
- Support email: typically up to 24 months.
- Server logs: typically up to 90 days, longer only for security incidents.
13. Your rights
You can access, correct, or delete account data by emailing hello@hebrewo.app from the address on the account. You can export what we hold on you in a common electronic form on request. You can object to or restrict certain processing where the law gives you that right.
Local progress: use your browser settings to clear hebrewo.app site data. We cannot retrieve it from here.
Stripe customer portal or our billing screen (when available) lets you cancel a subscription. Card updates are done with Stripe, not by emailing us a card number.
If you are in the EEA or UK you may complain to your local data protection authority. We would rather fix the issue first at hello@hebrewo.app.
14. Children
HebrewO is for learners aged 13 and over, and for parents or teachers practising with a child on the adult’s device. We do not knowingly collect personal information from children under 13. If you believe a child under 13 created an account, email hello@hebrewo.app and we will delete it.
15. International transfers
Vendors such as Stripe, auth, and hosting may process data in the United States or other countries. Where a transfer law requires safeguards (for example Standard Contractual Clauses), we rely on the vendor’s published terms for that processing.
16. Security
We use HTTPS, vendor-managed auth, and Stripe for cards. No method is perfect. You should use a unique password or magic-link email you control. Do not practise on a shared computer if you need the progress to stay private; local storage is visible to anyone with access to that browser profile.
17. Changes
We will update this page when our practices change. The date at the top is the latest version. Material changes will be flagged on the site or by email if you have an account.
18. Contact
Privacy requests: hello@hebrewo.app
HebrewO · hebrewo.app