§0Preamble
This English version is provided for convenience; the French version prevails.
This policy describes how Hamza Hajjaj, an independent web developer operating under the name Liminal (BCE 1020.634.196), publisher of the Hibi application (“we”), processes the personal data of its users (“you”). It applies to the mobile application, the website and the associated services.
By using Hibi, you accept the practices described here. We comply with the General Data Protection Regulation (GDPR). Hibi is intended for people aged 13 and over, and we do not knowingly collect data from children under 13.
§1Data we collect
We limit collection to what is strictly necessary for the service to work, with no advertising and no advertising profiling. On the website, audience measurement (Google Analytics) is subject to your consent (see §7). In practice, we process:
- Account: your email address, your display name and your password (stored in hashed form, never in plain text).
- Learning profile: your starting level, your comfort with the kana and your motivation, provided when you sign up.
- Preferences: daily goal, kanji display, reminders and reminder time, sounds and haptic feedback.
- Progress: your advancement per word and per lesson (spaced-repetition state), your progress on the kana, your favourites and the history of your sessions (date, number of cards, mode).
- Subscription: your Hibi+ status, its expiry date and its origin, via our subscription-management provider.
- Billing: handled by the App Store or Google Play. We neither receive nor store any payment-card details.
§2How we use it
Your data is used only to: run spaced repetition and show you the right word at the right moment, sync your progress across your devices, manage your access to Hibi+, and, if you turn them on, trigger your study reminders (local notifications scheduled on your device).
We carry out no advertising profiling and never sell your data. We do not send you marketing emails.
§3Sharing with third parties
We rely on a limited number of technical subprocessors, bound by contract: the hosting of our servers (Hostinger), the subscription management (RevenueCat), the collection of payments (Apple, Google) the website audience measurement (Google Analytics, only after your consent) and the anonymous app-usage measurement (PostHog, hosted in the EU). None is allowed to use your data for any other purpose, and we share nothing with advertising networks.
§4Retention period
Your data is kept for as long as your account is active. When you delete your account, your progress, your favourites, your history and your profile are erased from our servers; the data present on your device is erased when you log out. Only the data that the law requires us to keep (for example accounting records) is retained for the legally required period, namely 7 years in Belgium.
§5Your rights
In accordance with the GDPR, you have at any time a right of access, rectification, erasure, portability and objection. You can edit your information and your preferences directly in the app settings, or write to us to exercise one of these rights. You may also lodge a complaint with the competent supervisory authority.
§6Security
The exchanges between the app and our servers are encrypted in transit (TLS), and passwords are stored in hashed form. Your data is hosted on a dedicated server located in the European Union, and internal access is restricted to the people who need it.
§8Contact us
For any question about your data or to exercise your rights, write to us at consulting.liminal@gmail.com or via our contact page. Data controller: Hamza Hajjaj (Liminal), BCE 1020.634.196, Belgium.