Privacy Policy

Last updated 24 October 2026

This policy explains what Juntos collects, why, and your rights. We follow the Australian Privacy Principles and honour GDPR-style rights for everyone.

What we collect

• Account: username, display name, email address, a securely hashed password, and your invite code.
• Learning data: lesson scores, messages you send to the AI or to friends, transcripts of voice recordings, writing samples, grades and feedback, error patterns, level estimates, XP and streaks.
• Voice: recordings are transcribed to text to grade your speaking. Audio is processed in memory and not stored; the transcript is. The one exception is if you turn on Help improve speech recognition in Account: then the audio of your lesson speaking answers, including what you say in lessons with Mateo, is kept privately for 30 days, so the Juntos team can listen back when the app mishears you, and deleted after that. Only the team can hear it, and turning the setting off deletes any clips already kept.
• Slip of the week (optional): if you sign up for the weekly email, your email address, where you signed up and when you confirmed. It is kept until you unsubscribe, and you don't need an account.
• Technical: device and browser type and error diagnostics when something fails, so we can fix it. Our own visit counting is cookie-free. When you're signed in, or once you create an account, we link your visits to hablajuntos.com to your account, so we can see how people find and use Juntos. This stays inside Juntos and is never shared.
• Connection fingerprints: to count visits and to stop abuse, such as repeated sign-up attempts, we keep a scrambled fingerprint of your connection's IP address. It is made with a secret key, so it can't be turned back into the address, and we never store the address itself. Fingerprints are deleted on a schedule: within 2 days for abuse limits, within 180 days for visit counts and within a year for our short links. If you sign up for Slip of the week, the fingerprint from that sign-up is kept with your subscription.
• Advertising measurement: when we run ads, our public pages use the Meta Pixel and Meta's Conversions API to measure whether an ad led to a sign-up or purchase. Meta receives page views and, for sign-ups and purchases, a hashed (unreadable) form of your email. If you're visiting from the UK, the EU/EEA or Switzerland, we ask first: the pixel only loads, and nothing is sent to Meta, if you say yes on the banner. You can change your answer by clearing this site's cookies. You can opt out via your Meta ad settings, a browser tracker blocker, or by emailing us. The pixel never runs inside the learning app itself beyond the account pages.
• Partner links: if you arrive through a partner's link (a web address ending in ?via= and their code), we set a cookie for 60 days that holds only that partner's code, so we can credit them if you sign up and later pay. If you're visiting from the UK, the EU/EEA or Switzerland, it's only set if you said yes on the banner. Partners see totals, never who you are.
• Payments: handled by Stripe. We store your Stripe customer and subscription IDs, never card numbers.

How it's used

• To run the product. AI conversation, grading, feedback and your progress are generated from what you submit.
• AI processing: the tutor, grading and lessons run on Anthropic's Claude; speech-to-text and some voice audio run on Cloudflare Workers AI, and some voice audio on ElevenLabs. In live lessons with Mateo, what you say is transcribed by Deepgram and ElevenLabs as you speak, and the text of the conversation is kept with your lesson so we can improve him. Your content is processed to produce a response and is not used to train their models.
• To email you about your account: sign-in links, password resets, your trial ending, important service changes. The only other email is Slip of the week, and only if you sign up and confirm it. Every one has a one-click unsubscribe.

Sharing

Friends you connect with see your display name, level, streak, XP and messages you send in your shared chat. We don't sell data. Service providers: Cloudflare (hosting, database, email, speech AI), Anthropic (the AI tutor), ElevenLabs (voice audio and speech-to-text), Deepgram (speech-to-text in lessons with Mateo), Resend (Slip of the week emails, only if you subscribe), Stripe (payments), and Meta (advertising measurement only, as described above).

Retention

Data is kept while your account exists. Deleting your account removes your account, progress, messages and learning data within 30 days of backups cycling.

Your rights

Export your data or delete your account from Account settings in the app, or email us. You can also ask us to correct information. Contact: hello@hablajuntos.com.

Children

Juntos is for people aged 16 and over. We don't knowingly collect data from younger users; if we learn we have, we'll delete it.

Security

Passwords are hashed (PBKDF2), sessions expire, connections use HTTPS, and login is rate-limited. No system is perfect; if we ever discover a breach affecting you, we will tell you.

Want your data gone? How to delete your account and data. Terms · Privacy · Refunds · Home