Español HQ Privacy Policy

Last updated September 29, 2026.

What Español HQ stores

When you create an account, we store an account identifier and the email address supplied by your sign-in provider. We store the learning data you choose to create: vocabulary, notes, examples, card preferences, review history, goals, practice results, reading progress, imported text, and app settings. This information is linked to your account so it can sync across your iPhone, iPad, and Mac.

How we use it

We use your data only to provide the app: signing you in, syncing your library, scheduling reviews, showing progress, preventing data loss, and supporting requests you send us. We do not sell personal information, use it for advertising, or track you across other companies' apps and websites.

Reading, photos, files, and speech

Text, files, or photos you select for capture are used to extract or save the study material you request. Español HQ does not scan your photo library or files in the background. Imported copyrighted material remains your responsibility and is not published as a public catalog by the app.

Speaking practice asks for microphone and speech-recognition permission only when you use that feature. Your device or browser's speech-recognition provider may process audio under its terms, depending on device and language support. Español HQ stores the editable transcript and recognized-word match with your practice history so attempts can sync, export, and be deleted with your account. It does not claim to diagnose pronunciation quality and does not retain microphone recordings on its servers. If you report a practice prompt, Español HQ stores the prompt snapshot, selected issue, optional explanation, and selected voice region so the content can be reviewed; reporting does not edit your vocabulary.

When AI listening or speaking practice is enabled, Español HQ sends a limited set of your saved words and definitions to OpenAI to create a prompt. The verified Spanish prompt or reference answer may then be sent to OpenAI's speech service to create clearly labeled AI-generated playback. Generated audio is kept in a private, account-owned cache so replaying it does not create another provider request, and it is deleted with your account. Your typed answer or editable speech-recognition transcript is sent for meaning and grammar feedback. Raw microphone audio, your email address, notes, sources, and account identifier are not sent. Generated prompts are checked by a second Spanish-language pass and kept as immutable, account-owned practice snapshots. OpenAI may retain API request data temporarily for abuse monitoring under its API data controls. Your prompt and completed practice result remain in your Español HQ history so they can sync, export, and be deleted with your account.

Diagnostics and notifications

The Apple app keeps a small rolling diagnostic log on your device for app launches, crashes, and sync failures. We also use PostHog for limited product analytics, error reporting, and operational logs so we can improve reliability and understand whether core learning flows work. Analytics may include an account identifier, app and device characteristics, screen or feature names, counts, durations, and success or failure status. We do not send your email address, vocabulary, reading content, typed or spoken answers, AI prompts or responses, passwords, or sign-in tokens to PostHog. Session replay and automatic interaction capture are disabled. PostHog is not used for advertising or tracking you across other companies' apps or websites. Local study reminders are scheduled on your device after you grant notification permission.

Subscriptions and purchases

If you choose a Premium subscription, Apple processes the payment and RevenueCat processes subscription product, transaction, trial, renewal, expiration, and entitlement information. Español HQ associates that purchase history with your internal account identifier so access can be provided and restored to the correct account. We do not receive your payment-card details, and purchase information is not used for advertising or cross-app tracking.

Service providers

Supabase provides authentication and database infrastructure. PostHog provides product analytics, error reporting, and operational logging. RevenueCat provides subscription and entitlement management. When AI practice is enabled, OpenAI processes the limited vocabulary and practice text described above. Apple provides in-app purchase processing and, together with Google, provides sign-in when you choose those options. Our hosting provider processes requests needed to operate the service. These providers process information under their own terms and privacy policies.

Retention, export, and deletion

We retain account data while your account exists and as briefly as reasonably necessary in operational backups. You can export your study data from Settings. You can permanently delete your account from Settings; deletion removes the account's active learning data and schedules its authentication identity for removal. Data may remain temporarily in encrypted backups until those backups expire.

Security and your choices

We use account-scoped access controls and encrypted network connections. No system can guarantee absolute security. You can decline optional microphone, speech, photo, file, and notification access and continue to use the rest of the app; text entry remains available for speaking tasks.

Contact and changes

For privacy questions, export or deletion help, or security concerns, use the support page. We will update the date above when this policy changes materially.