Privacy Policy
Oui! Learn French
Your privacy matters
This Privacy Policy explains what personal data we collect when you use the Oui! Learn French mobile application, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to users worldwide and is written to meet the requirements of the EU General Data Protection Regulation (GDPR).
1. Who we are
Oui! Learn French (the Application) is published by HEYATECH, a French simplified joint-stock company (société par actions simplifiée) with variable capital, registered with the Paris Trade and Companies Register (RCS) under number 993 329 739, with its registered office at 142 rue de Rivoli, 75001 Paris, France (we, us, our).
We are the data controller for the personal data described in this policy. For any question or request about your data, contact us at contact@heyatech.fr.
2. Data we collect
Depending on how you use the Application, we collect the following categories of data:
| Category | Examples | Source |
|---|---|---|
| Account data | Technical user ID. If you sign in with Google: your name, email address and profile picture. | You / Google |
| Learning data | Lessons and chapters completed, exercise answers, progress, level, app language, settings. | Your use of the Application |
| Voice recordings | Short audio clips recorded during pronunciation exercises, and their text transcription. Only if you allow microphone access and use these exercises. | You |
| Purchase data | Subscription plan, status, price, currency, transaction and renewal dates, store country, purchase identifiers. We never receive your full card number. | Apple, Google, RevenueCat |
| Device and usage data | Device model, operating system, app version, language, time zone, IP address, screens viewed, in-app events, crash and error reports. | Your device |
| Advertising and attribution data | Advertising identifier (IDFA on iOS, only with your permission; Advertising ID on Android), Meta anonymous ID, app install and app open events, the ad campaign that led to your install, subscription events. | Your device, Meta, RevenueCat |
| Notification data | Push notification token, if you allow notifications. | Your device |
| Support data | Messages you send us and our replies. | You |
We do not ask for and do not knowingly process sensitive data (such as health data, religious or political opinions).
3. Why we use your data and on what legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Provide the Application: create your account, save your progress, sync it across devices | Account data, learning data | Performance of our contract with you (Art. 6(1)(b)) |
| Pronunciation exercises: transcribe your voice and check your answer | Voice recordings | Performance of the contract, only when you choose to use the feature and grant microphone access |
| Sell and manage subscriptions, restore purchases, prevent fraud | Purchase data, account data | Performance of the contract; legal obligation for accounting and tax records (Art. 6(1)(c)) |
| Fix bugs, keep the Application secure and stable | Device and usage data, crash reports | Our legitimate interest in providing a reliable service (Art. 6(1)(f)) |
| Understand how the Application is used and improve lessons | Usage data | Our legitimate interest, or your consent where required by applicable law |
| Measure the effectiveness of our advertising campaigns (ad attribution) | Advertising and attribution data, subscription events | Your consent (Art. 6(1)(a)), collected through the App Tracking Transparency prompt on iOS and through an in-app consent request where required |
| Send reminders and learning notifications | Notification token | Your consent, given through your device's notification permission |
| Answer your requests | Support data | Our legitimate interest in responding to you |
4. Advertising and tracking
We advertise Oui! Learn French on Meta platforms (Facebook, Instagram). To know which ads bring new learners, the Application includes the Meta SDK, and our subscription provider RevenueCat sends subscription events (start of subscription, renewals) to Meta. This lets us measure installs and subscriptions generated by our ads and optimize our campaigns.
- We do not display third-party ads in the Application, and we do not sell your personal data for money.
- On iOS, your advertising identifier (IDFA) is only accessed if you tap “Allow” on the App Tracking Transparency prompt. If you refuse, Meta only receives aggregated, privacy-preserving attribution data through Apple's SKAdNetwork.
- On Android, the Advertising ID is used for attribution. You can reset or delete it at any time in your device settings (Settings > Google > Ads, or Settings > Privacy > Ads, depending on your device).
- Meta processes the data it receives as an independent controller under its own Privacy Policy. You can manage how Meta uses information from apps and websites in your Meta account under “Your activity off Meta technologies”.
How to withdraw your consent
On iOS, go to Settings > Privacy & Security > Tracking and turn off tracking for Oui! Learn French. On Android, delete your Advertising ID as described above. You can also contact us. Withdrawing consent does not affect processing carried out before the withdrawal and does not affect your access to the Application.
5. Who we share your data with
We only share your data with the service providers we need to run the Application. They act on our instructions (processors), except where indicated as independent controllers.
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Google Ireland / Google LLC) | Authentication, database, cloud functions, analytics, crash reporting (Crashlytics), push notifications | EU and United States |
| Google Sign-In (Google) | Sign in with your Google account, if you choose it | United States |
| RevenueCat, Inc. | Subscription management and forwarding of subscription events to Meta | United States |
| Meta Platforms Ireland Ltd / Meta Platforms, Inc. | Ad attribution and campaign measurement (independent controller for its own purposes) | EU and United States |
| OpenAI, L.L.C. | Transcription of voice recordings (Whisper) and AI-powered exercise features. Data sent through the API is not used to train OpenAI models. | United States |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | United States |
| Apple and Google (App Store, Google Play) | Payment for in-app subscriptions (independent controllers) | Worldwide |
| Netlify, Inc. | Hosting of our web pages | United States |
We may also disclose data when required by law, to respond to a valid request from a public authority, to protect our rights, or as part of a merger or sale of the business (in which case you will be informed beforehand).
6. International transfers
Some of our providers are located in the United States. When your data is transferred outside the European Economic Area, the transfer is based on the EU–U.S. Data Privacy Framework (for certified providers) or on the Standard Contractual Clauses adopted by the European Commission, together with any additional safeguards required. You can ask us for more information about these safeguards.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Account and learning data | As long as your account exists. Deleted within 30 days after you delete your account. |
| Voice recordings | Not stored by us: the audio is sent for transcription and discarded. OpenAI may keep API data for up to 30 days for abuse monitoring, then deletes it. |
| Purchase and billing records | 10 years, as required by French accounting law. |
| Analytics data | Up to 14 months. |
| Crash and error reports | Up to 90 days. |
| Advertising and attribution data | Retained by Meta and RevenueCat according to their own policies; on our side, aggregated campaign reports only. |
| Support messages | 3 years after our last exchange. |
8. Your rights
Under the GDPR, you have the right to access your data, rectify it, erase it, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. You can also give instructions on what should happen to your data after your death (French law).
- Delete your account directly in the Application (Profile tab), or by writing to contact@heyatech.fr.
- Exercise any other right by email at contact@heyatech.fr. We may ask you to prove your identity. We answer within one month.
- Lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.
Users in the United States
Depending on your state of residence (for example California), you may have the right to know, access, correct and delete your personal data, and to opt out of the sharing of personal data for cross-context behavioral advertising. To opt out, disable tracking or delete your advertising ID as described in the “Advertising and tracking” section, or contact us. We will not discriminate against you for exercising these rights.
9. Device permissions
The Application may ask for the following permissions. All of them are optional, and you can change them at any time in your device settings:
- Microphone: to record your voice during pronunciation exercises.
- Notifications: to send you learning reminders.
- Tracking (iOS): to measure which of our ads bring new learners.
10. Security
We use encrypted connections (HTTPS), access controls and reputable providers to protect your data. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data and will notify you and the competent authority of any data breach where required by law.
11. Children
The Application is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy, for example when we add a feature or a new provider. The “Last updated” date at the top shows the latest version. If a change significantly affects how we use your data, we will inform you in the Application before it takes effect and, where required, ask for your consent again.
13. Contact
For any question about this Privacy Policy or your personal data: contact@heyatech.fr.