Legal information
Privacy policy
Draft — to be completed and validated before publication. Items marked “To provide” are information only the publisher can give; nothing has been invented. This page is not indexed until it is validated.
What Hearwise records, where, why, and how to exercise your rights. The facts below describe how the site really works; the legal choices remain to be validated.
Data controller
- To provide: identity and contact details of the data controller
- To provide: contact for personal data questions (and data protection officer, if any)
Without an account
Your progress (results, levels, skills), your profile (display name, avatar, goal) and your listening preferences stay in your browser (local storage). They are sent to no server.
A technical cookie remembers the chosen language.
With an account
Your e-mail address and password are managed by Supabase Auth (the password is never stored in clear).
Your verified progress and profile are stored in the Supabase database; each user can only read their own data.
Your session is kept in your browser's local storage.
Subscription and payment
Payment is processed by Stripe: Hearwise neither sees nor stores your card details. Hearwise records the subscription status and Stripe's customer and subscription identifiers.
Invoices are kept by Stripe.
What Hearwise does not do
No advertising, no advertising cookies, no data resale. No profile is made public.
Cookie-free audience and performance measurement (Vercel Web Analytics and Speed Insights) counts page views and loading speed in aggregate, by their path only (no parameters): it sets no cookie, does not follow visitors across sites and links no visit to an account.
Processors
Supabase (authentication, database), Stripe (payment), Vercel (hosting, cookie-free audience measurement).
- To provide: references of the data processing agreements and processing locations, especially for transfers outside the European Union
Legal bases and retention periods
- To provide: legal basis of each processing (contract, legal obligation, legitimate interest…)
- To provide: retention period of inactive accounts
- To provide: retention period of accounting records
Your rights
You can delete your account yourself from the Account page: the account, synchronised progress, profile and subscription are erased, and an active subscription is cancelled.
You can export your progress to a file from the Settings.
You can lodge a complaint with your data protection authority.
- To provide: procedure and address to exercise the rights of access, rectification, objection and restriction