Privacy policy

Privacy Policy

Last updated: 19 October 2026

Heynour is a learning companion for children, run by parents. This policy explains what we collect, why, where it goes, and how you stay in control. We wrote it to be read, not skimmed.

1. Who we are

Heynour is operated by Heynour ("we", "us") and is available at heynour.com and in the Heynour apps. Questions about privacy go to support@heynour.com.

2. Children and parental consent

Heynour is designed for children, but every account is created and controlled by a parent or legal guardian. A child never signs up, gives an email address, or agrees to anything. By creating a family account and adding a child, you confirm that you are that child's parent or guardian and consent to the processing described here on their behalf. You can withdraw that consent at any time by deleting the child's profile or your account.

3. What we collect

• From you (the parent): your name, email address and timezone. You sign in with a code sent to your email, or with your Google or Apple account; from Google and Apple we receive only your name and email. We do not keep passwords. If you subscribe or buy from the store, billing details are handled by Stripe and we never see your card number; for store orders we keep the delivery address and phone number.
• About your child: the profile you write (first name, age or school year, interests, strengths, what they find hard, any notes or school files you upload), and the PIN you set for them.
• From sessions: the conversation between your child and Heynour (text and, when voice is used, the transcription of what they said), homework photos they take, explanation pictures Heynour creates, stars, levels and progress, session length, and the short summary Heynour writes for you afterwards.
• From you in the parents' app: what you tell or write about your child in "Tell Heynour", and your questions to the parents' assistant "Ask Heynour" with its answers.
• Technical: IP address, browser and device type, basic request logs kept for security and to keep the service running, per-account usage counts so we can apply plan limits and understand our costs, and in-app usage events (such as sign-up, starting a session or a purchase) so we can understand and improve the service.

4. Voice

When your child talks to Heynour, or you talk about your child, the audio is sent to our speech provider to be turned into text, and Heynour's replies are turned into speech the same way. Audio is processed in memory and is not stored by us; only the text transcript is kept. The microphone is only active while the talk button is held, or while hands-free mode is switched on, and never in the background.

5. Pictures

A homework photo is checked first: a photo showing a face, a body or a private place is refused and not kept. An accepted photo is sent to the AI provider so Heynour can understand it, and is kept encrypted with the conversation. Explanation pictures are created by the picture provider from a description Heynour writes, with no name and nothing from the conversation.

6. How we use it

To run the sessions and make Heynour remember your child from one session to the next; to show you progress, summaries and transcripts in the parents' app; to apply the limits of your plan; to fulfil and deliver store orders; to send you the messages you need (sign-in codes, summaries, alerts, support replies); to keep the service secure; and to understand usage and costs and measure our marketing campaigns. We do not sell or rent personal data, we do not use your child's conversations to train AI models, and we show no advertising inside Heynour.

7. Who we share it with

We use a number of providers, each only for the job named:

• Anthropic, OpenAI and Google (Gemini): the AI models that write Heynour's replies, check safety, write summaries, read homework photos and school files, and create explanation pictures, each for the task we assign it.
• OpenAI and ElevenLabs: speech-to-text and text-to-speech.
• Stripe: subscriptions and payments.
• Our email-delivery provider: sign-in codes and messages.
• Cloudflare: site protection and the bot check at sign-up.
• Google and Apple: signing in with their accounts, if you choose to.
• Railway: hosting and the database, in the European Union.
• Carriers: delivering store orders (name, address and phone only).
• Advertising platforms (Snapchat, TikTok, Meta and Google Ads): we send them, from our servers, limited events about the parent's account, such as a sign-up or a purchase, to measure our advertising. Nothing about your child or their conversations is sent.

Each processes data under its own standard terms and privacy policy. Some of these providers' servers are outside your country, including in the United States. We never sell your data to data brokers. We may disclose information if the law requires it or to protect a child's safety.

8. Where data lives and for how long

Our data is stored on servers in the European Union and kept while your account is active. When you delete a child's profile with the "delete everything" option, or delete your account, their profile, conversations, photos and progress are removed from our live database immediately and from backups within 30 days, except invoices the law requires us to keep. Anonymous usage statistics that cannot identify anyone may be kept. Support emails are kept for up to two years so we can follow up.

9. Your rights and controls

From the parents' app you can read every conversation, edit or delete anything in your child's profile, delete a child's data, download a copy of your data, change your email, sign out of every device, and delete your account and everything in it. Depending on where you live you may also have legal rights to access, correct, export, restrict or object to processing of your data, and to complain to a data-protection authority. Email support@heynour.com and we will help within 30 days.

10. Security

We use no passwords: you sign in with a one-time code by email or with Google or Apple. All traffic uses HTTPS and sensitive data is encrypted. Logins use random, revocable session tokens; child PINs lock after repeated wrong attempts. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you without undue delay.

11. Cookies

We use cookies needed to keep you signed in and to remember your language and light/dark preference, and one cookie that remembers which advertising campaign you came from so we can measure it. There are no third-party advertising or tracking cookies in the child's app.

12. Changes

If we change this policy in a way that matters, we will email the address on your account before the change takes effect and update the date at the top of this page.

13. Contact

support@heynour.com — we read everything and reply to everyone.