Hearl Privacy Policy

This Privacy Policy explains how Wizora LTD ("we", "us", "our") collects, uses, shares and protects personal information when you use Hearl, our iPhone app that turns a topic into an audio series grounded in real sources, and our website https://hearl.app (together, the "Services").

If you have questions, email privacy@hearl.app. If you do not agree with this policy, please do not use the Services.

---

Summary of key points

• What we collect: your account details (email address, sign-in method, and your name if Apple or Google shares it), what you ask Hearl to make (topics, choices, steering, feedback), the sources you add (web links, files, pasted text), what Hearl generates for you (plans, scripts, transcripts, audio), your listening progress, your minutes and purchase status, a notification token if you allow notifications, and limited technical logs.
• Why: to run Hearl for you. We do not use your information for advertising, we do not track you across other apps or websites, and we do not sell or share it for advertising.
• AI: to research, write and voice your series, the text you give Hearl is sent to Google's Gemini API. The app asks your permission before the first time. Under Google's paid API terms, Google does not use it to improve its products (see section 6).
• Who helps us: Supabase (sign-in, database and file storage), Google Cloud (our servers), Google Gemini (AI), RevenueCat and Apple (purchases), Expo (notifications and app updates) and Cloudflare (this website and our email forwarding). The full list is in section 4.
• Where: our database and servers are in the United States (Virginia).
• Your controls: export your data or delete your account in the app at any time (Profile → Export my data, Profile → Delete account), or email privacy@hearl.app.

---

Table of contents

1. What information we collect
2. How we use it
3. Legal bases for processing
4. Who we share it with
5. Cookies and tracking
6. Artificial intelligence (Google Gemini)
7. Web pages you add (HearlBot)
8. Sign in with Apple and Google
9. International transfers
10. How long we keep information
11. How we protect information
12. Children
13. Your privacy rights
14. US state privacy rights
15. Do Not Track and Global Privacy Control
16. Changes to this policy
17. Contact us
18. Review, export or delete your data

---

1. What information we collect

Information you give us

Account

• Your email address and the way you sign in: Sign in with Apple, Sign in with Google, or email and password.
• If you sign in with email, your password. It is stored by our sign-in provider, Supabase, as a salted hash; we never see it.
• If you sign in with Apple or Google, the details that provider shares, typically your name and email address (with Apple, possibly a private relay address you choose) and, with Google, a link to your profile picture. See section 8.
• An account ID that we create for you.

Preferences

• The interests you pick when you start, your preferred level, your daily listening goal and your language setting.
• Your answer to the AI permission screen: the notice version you agreed to and when (see section 6).

What you ask Hearl to make

• Topics you enter, and the choices you make for a series: learn or explore, level, style (one narrator or two hosts), number of episodes, episode length and any focus you add.
• How you steer a series: suggestions you tap, episodes you add, deep dives you start, and the feedback you give after an episode (for example "too easy") with the topics you want next.

Sources you add

• Web addresses you add. Our servers fetch those pages and keep the text we extract from them, and a copy of a linked PDF (see section 7).
• Files you upload (PDF, Word, plain text or Markdown). We keep the original file and the text we extract from it.
• Text you paste into Hearl.

Support

• Emails you send to hello@hearl.app or privacy@hearl.app, and anything you include in them.

Information Hearl creates for you

• Research notes, series plans, episode titles and goals, scripts, transcripts, the list of sources each episode used, and the audio files of the episodes you voice.
• Your listening activity: where you are in each episode, which episodes you finished, and listening events (how many seconds you listened, on which day, in which time zone). Your streak and activity chart are calculated from these.
• Your minutes history: minutes added by a purchase, used for voicing or adding episodes, returned after a failed or cancelled voicing, and expired at the end of a membership period.

Purchase information

When you buy a membership or a minute pack, Apple processes the payment. Apple and RevenueCat tell our servers what you bought: the product, the purchase and renewal dates, whether the membership will renew, whether the purchase was a test ("sandbox") purchase, and a transaction reference linked to your Hearl account ID. We never receive your card or bank details. See Apple's Privacy Policy and RevenueCat's Privacy Policy.

Information from your device

• Notifications (only if you allow them): a push token from Apple, delivered through Expo, so we can tell you when a plan or an episode is ready.
• Stored on your iPhone, not sent to us: your sign-in session, episodes you download, your listening queue and unfinished drafts. Signing out removes the session and downloads from the device.

Hearl does not ask for or use your location, contacts, photos, camera, microphone, or the advertising identifier.

Information collected automatically

• Server logs. When the app talks to our servers, our cloud provider records technical request data: IP address, time, the address that was requested, the response status and timing, your app version, and your account ID when you are signed in. We never log the content of your topics, sources, scripts or transcripts, or your sign-in tokens.
• Error reports. When something breaks in the app, it sends a short report: the kind of error, the error message and stack trace, the app version and update, the screen it happened on, and limited technical context. Reports never include text you typed. If you are signed in, a report is linked to your account ID so we can fix the problem.
• Usage counts for our AI costs. For each research, writing or voicing job we record how much of the AI service it used (for example, the number of tokens and seconds of audio) and what it cost us. These records contain no content.
• Apple diagnostics. If you choose to share analytics with app developers in your iPhone settings, Apple gives us aggregated crash and usage reports. We cannot identify you from them.

Our website

hearl.app is a static website. It uses no cookies, analytics, advertising pixels or third-party scripts, and its fonts are served from our own site. Our host, Cloudflare, processes technical data such as your IP address to deliver the site and protect it from abuse.

---

2. How we use it

We use personal information to:

• Create and run your account, sign you in, and keep you signed in.
• Research, plan, write and voice the series you ask for, using the AI service described in section 6, and fetch the web pages you add.
• Play, stream and download your episodes, save your listening progress, and show your streak and activity.
• Keep your minutes balance and purchases accurate, and apply the plan you bought.
• Send the notifications you allowed ("Your plan is ready", "Episode 3 is ready").
• Answer your support requests.
• Keep Hearl secure and fair: prevent abuse and fraud, apply usage limits, and protect our systems.
• Find and fix bugs, and watch our reliability and AI costs.
• Meet legal obligations and enforce our Terms of Service.

We do not use your information for advertising or to build a profile of you for anyone else, we do not sell it, and we do not train our own AI models on your content.

---

3. Legal bases for processing

If you are in the United Kingdom or the European Economic Area, we rely on:

• Performance of a contract: to provide the Services you signed up for, including storing your series, fetching the pages you add, processing your purchases and sending the notifications you asked for.
• Consent: to send your topics, sources, steering and feedback to our AI provider. Before Hearl does that for the first time, the app asks for your explicit permission and records it. You can withdraw it at any time by emailing privacy@hearl.app; after that, Hearl will not send new requests to the AI provider for your account until you agree again, and you can keep listening to the free series and your existing episodes. Notification permission is controlled in your iPhone settings.
• Legitimate interests: to keep the Services secure, prevent abuse, fix errors and understand our costs, in ways that do not override your rights.
• Legal obligations: where the law requires us to keep or disclose information.

---

4. Who we share it with

We share personal information only with service providers who process it for us under contract, to run the Services:

Provider	What they do for Hearl	Information involved	Where
Supabase (Supabase, Inc.)	Sign-in, our database, and private file storage	Your account, and everything Hearl stores for you (section 1)	United States (AWS, Northern Virginia)
Google Cloud (Google LLC)	Runs our servers and background jobs (Cloud Run), and stores our server logs	Everything that passes through our servers; server logs and error reports	United States (Northern Virginia)
Google Gemini API (Google LLC)	Research with Google Search, writing, and voicing	Your topic, choices, steering and feedback, the text of your sources and pasted text, and the scripts it voices (section 6)	Google's global infrastructure
RevenueCat (RevenueCat, Inc.)	Keeps track of App Store purchases and memberships	Your Hearl account ID, purchase history, and basic device information such as app version, platform, country and IP address	United States
Apple	App Store purchases, Sign in with Apple, delivery of push notifications	As described in Apple's privacy policy	Worldwide
Google (sign-in)	Sign in with Google, if you choose it	Your Google name, email address and profile picture link	Worldwide
Expo (650 Industries, Inc.)	Delivers push notifications, and app updates	Your push token and the notification text (a series or episode title); when the app checks for an update, technical data such as app version, platform and IP address	United States
Cloudflare (Cloudflare, Inc.)	Hosts this website and forwards email sent to hearl.app addresses	Website request data; the emails you send us	Worldwide
Google Workspace / Gmail (Google LLC)	Our support mailbox	The emails you send us	Worldwide

We may also share information:

• If the law, a court or a public authority requires it, or to protect the rights, safety and security of our users, the public or us.
• As part of a merger, acquisition or sale of our business, with notice to you where required.

We do not share your information with advertisers or data brokers.

---

5. Cookies and tracking

• Website: hearl.app sets no cookies and uses no analytics, advertising or social-media tags. Fonts and images are served from our own site.
• App: Hearl contains no advertising or analytics SDKs, does not use the advertising identifier, and does not track you across apps and websites owned by other companies. That is why Hearl does not show Apple's "Allow tracking" prompt.

---

6. Artificial intelligence (Google Gemini)

Hearl makes your series with artificial intelligence. We use the Google Gemini API to:

• research your topic with Google Search and draft a plan of titled episodes;
• write each episode's script from your sources and that research, and check it against them; and
• turn the script into speech.

What is sent. From our servers (not from your phone), we send Google the information needed for the step: your topic and the choices you made for the series, the text of the web pages and files you added, text you pasted, your steering and feedback, the research notes and plan for the series, and the scripts to be voiced. We do not send your email address, name or payment details.

Your permission. Before you create your first series or add your first source, Hearl shows you what is sent to Google Gemini and asks for your permission. We record the notice version you agreed to and when. Our servers refuse to send anything to the AI provider for an account that has not agreed to the current notice. Listening to the free series does not need it. Agreeing to our Terms is not the same as giving this permission.

What Google does with it. We use the Gemini API as a paid service. Under Google's Gemini API terms, Google does not use prompts or responses from paid services to improve its products, and processes them under its data processing terms. Google keeps prompts and responses for a limited period to detect abuse and meet legal requirements. When Hearl researches with Grounding with Google Search, Google stores the prompts, context and output for 30 days to produce the grounded results and to debug and test those systems. Google may process this information in any country where it has facilities.

Accuracy. AI can misread a source, miss context or state something wrong. Every episode shows its sources so you can check them. Hearl is for learning and curiosity, not professional advice. See our Terms of Service.

Free series. The five free series were made by us with the same system. They contain no personal information.

---

7. Web pages you add (HearlBot)

When you add a web address as a source, our servers fetch that page with our fetcher, HearlBot. The website sees a request from our servers, not your IP address or your identity. HearlBot fetches only the pages you add, respects each site's robots.txt, never logs in or works around paywalls, and does not fetch social networks or video sites. We keep the extracted text (and a copy of a linked PDF) with your series so the episodes can cite it. Details for site owners are at hearl.app/bot.

---

8. Sign in with Apple and Google

If you sign in with Apple or Google, that provider shares basic profile information with us, typically your name and email address. We use it only to create and run your Hearl account. With Sign in with Apple you can hide your email address behind an Apple relay address. When you delete your Hearl account, we also ask Apple to revoke Hearl's Sign in with Apple access.

Hearl's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

---

9. International transfers

Wizora LTD is based in the United Kingdom. Our database, file storage and servers are in the United States, and some providers, including Google for AI processing, may process information in other countries. Where UK or EU law requires it, we rely on appropriate safeguards for these transfers, such as the EU–US Data Privacy Framework and its UK Extension, Standard Contractual Clauses, or the UK International Data Transfer Addendum, as each provider offers. Contact us for more information.

---

10. How long we keep information

• Your account and everything in it (preferences, series, episodes, audio, sources, listening history, minutes history, purchase records and your AI permission record) are kept while your account exists. The app has no option to delete a single series; email us and we will delete one for you.
• Notification tokens are deleted when you sign out, or when Apple tells us a token no longer works.
• Technical records: records that stop a request being applied twice are deleted after 7 days; records of finished background jobs (which can include details of what was requested) after 30 days; our server logs and error reports after 30 days. Our providers keep their own service logs on their own schedules.
• Support emails are kept as long as we need them to help you and keep a record of the conversation.

When you delete your account, we stop using it at once: you are signed out, and a deletion job starts straight away. It deletes your series, episodes, audio files, uploaded files, sources, listening history, minutes history, purchase records, notification tokens and profile, then your sign-in account at Supabase and your customer record at RevenueCat. It usually finishes within minutes; if a step fails it is retried automatically, and it completes within 30 days. After that, copies can remain only in our server logs until they expire (30 days), in our providers' encrypted backups until those are overwritten on the providers' schedules, and with Google for the periods described in section 6. Apple keeps its own records of your App Store purchases. Deleting your account does not cancel an App Store membership; cancel it in your App Store settings.

---

11. How we protect information

• Information is encrypted in transit (TLS) and at rest by our providers.
• Your files and audio are kept in private storage. The app plays audio through signed links that expire after a few hours (one hour for the links in a data export).
• Hearl's data lives in a part of the database that Supabase's public data interface cannot read, and our servers reach it through a dedicated account with no access to anything else.
• Access to production systems is limited to the people who run Hearl.

This is not end-to-end encryption: our servers, and our AI provider for the steps described above, need to read your topics and sources to make your series. No system is completely secure, so please keep your iPhone and sign-in details safe.

---

12. Children

Hearl is for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact privacy@hearl.app and we will delete it.

---

13. Your privacy rights

Depending on where you live, you may have the right to:

• Access your information and receive a copy. In the app: Profile → Export my data, which gives you a file with your profile, series, episodes and transcripts, sources, listening history and minutes history, with links to your audio that work for an hour (one export per hour).
• Correct inaccurate information (email us).
• Delete your information. In the app: Profile → Delete account. See section 10.
• Port your information to another service, using the export.
• Object to or restrict certain processing.
• Withdraw consent where we rely on it (see section 3).
• Complain to a data protection authority. In the UK that is the Information Commissioner's Office. In the EEA, contact your local authority.

To exercise a right, email privacy@hearl.app from the email address on your account, so we can verify it is you. We reply within the time the law requires, usually within one month.

---

14. US state privacy rights

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another US state with a consumer privacy law, you may have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to opt out of its sale, of "sharing" for cross-context behavioral advertising, and of profiling with significant effects.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for profiling with legal or similarly significant effects.

In the last 12 months we collected these categories of personal information, for the purposes in section 2, and disclosed them only to the service providers in section 4:

• Identifiers: email address, name if a sign-in provider shares it, account ID, push token, IP address.
• Commercial information: memberships and minute packs you bought, and your minutes history.
• Internet or other electronic network activity: how you use the app (series you make, steering, feedback, listening progress and events) and technical logs.
• User content: topics, sources and pasted text you add, and the plans, scripts, transcripts and audio made for you.
• Sensitive personal information: only your account login (email address and password), used to sign you in.

To make a request, email privacy@hearl.app. We will verify your request using your account email, and we will not treat you differently for using your rights. You may use an authorized agent where the law allows it.

---

15. Do Not Track and Global Privacy Control

We do not track you across other websites or apps and do not sell or share personal information for advertising, so Do Not Track and Global Privacy Control signals do not change how the Services work. If we ever change that, we will honour Global Privacy Control as an opt-out where the law requires it.

---

16. Changes to this policy

We may update this policy. The "Last updated" date at the top shows when it last changed. If we make a material change, such as sending your information to a new kind of provider, we will tell you in the app, and ask for your permission again where it is needed, before the change applies to you.

---

17. Contact us

Wizora LTD
71–75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom

Privacy: privacy@hearl.app
Support: hello@hearl.app
Website: hearl.app/support

---

18. Review, export or delete your data

• In the app: Profile → Export my data; Profile → Delete account.
• By email: privacy@hearl.app.

We act on verified requests as the law requires.