Privacy policy

Who we are

Bubale is a Hebrew-learning platform operated by Mor and Chen, trading as Bubale, Tel Aviv, Israel (“we”, “us”). We are the data controller for the personal data described in this policy. For any privacy question or request, contact us.

What we collect

Account data: your email address, name or username, and password (stored in hashed form by our authentication provider).

Profile data: details you choose to add, such as a photo, city, timezone, date of birth, and why you are learning Hebrew. Date of birth is required for the Chaver community feature to verify you are 18 or older.

Learning data: your progress, saved words, flashcard reviews, placement test results, XP, and game activity.

Community data: messages you send in Chaver chats, groups you join, likes, matches, and challenges. Messages are visible only to their participants.

Bookings: sessions you book, including date and price.

AI prompts: when you use AI flashcard generation, the situation you describe and a sample of your saved words are sent to Anthropic (our AI provider) to generate cards. Under our agreement with Anthropic, API inputs are not used to train their models.

Manifesto signatures: if you sign our manifesto, the name you provide is displayed publicly. Do not sign with your full name if you prefer not to be identified.

How we use it, and on what legal basis

We use your data to operate your account and the features above (performance of our contract with you), to keep the platform safe and prevent abuse (legitimate interests), and to respond when you contact us. Where we rely on consent — such as optional Chaver profile visibility — you can withdraw it at any time in your profile settings. We do not sell your personal data, and we do not use advertising or tracking cookies.

Who processes your data

We use a small number of service providers (processors): Supabase (database, authentication, and storage), Vercel (website hosting), and Anthropic (AI flashcard generation). Some of these providers are located in the United States; where data of EU or UK users is transferred there, it is protected by the providers’ data processing agreements and recognized transfer safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

We keep your data while your account is active. If you delete your account or ask us to, we delete your personal data without undue delay, except where a short retention period is required for legal or security reasons.

Your rights

You can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent. If you are in the EU or UK, you also have the right to complain to your data protection authority (in the UK, the ICO). To exercise any right, contact us — we respond within one month.

Children

Bubale is for learners aged 13 and over. If you are under the age at which you can consent to data processing in your country (13–16 in the EU), a parent or guardian must approve your use of Bubale. The Chaver community feature is restricted to users 18 and over. If we learn that we hold data of a child below the minimum age, we will delete it.

Changes

If we make material changes to this policy, we will notify you by email or an in-app notice before they take effect.