Privacy Policy

Last updated: 24 July 2026. This policy explains what data Vaza ("we") collects, why, and your choices. Vaza is a language-learning app operated by Heartspace Invest AB (org. no. 559388-2839), Garagevägen 32, 121 32 Enskededalen, Sweden. Contact: hello@getvaza.com.

What we collect

Account data. If you create an account, your email address (used to sign in via a one-time code) and your subscription status. If you first arrived through a partner or campaign link, we also store which source brought you here, so we understand which channels reach the people Vaza helps.

Content you create. The texts you paste to read, the words you save, your notes, your conversations with the in-app teacher, and your learning progress. This is stored so it syncs across your devices.

Device data. Your settings (language, goals), theme, and an anonymous device identifier used to enforce fair-use limits. This stays on your device and is not tied to your identity.

Usage analytics (only with your consent). If you allow statistics, we record anonymous events (for example, which features are used) together with the anonymous device identifier. We never include the content you read or write. You can decline this in the cookie banner, and analytics are off until you accept.

Technical data. Your IP address is processed transiently to protect the service against abuse (rate limiting and bot protection). We do not use it to build a profile of you.

Error reports. When something crashes we record what went wrong: the error message, the technical stack trace and which page you were on. This is diagnostic data, not content — we do not send what you read or write, and we do not record your screen. It is stored in our own database and in our error monitoring provider, hosted in the EU.

How we use your data

To run the service (show and read your content, generate word explanations and teacher answers, save your progress, sign you in), to process payments, to keep the service secure, and — only with your consent — to understand usage and improve Vaza.

Text-to-speech and AI

To read text aloud and to generate explanations, exercises and teacher answers, the text involved is sent to specialist text-to-speech and AI providers (see the categories below). Do not paste sensitive personal information you would not want processed by these providers.

Service providers

We use a small number of specialist service providers that process data on our behalf, only to deliver the service. We work with the following categories of providers:

• Cloud hosting and database storage (located in the EU).
• Payment processing.
• Bot and abuse protection at sign-in.
• Text-to-speech, to read text aloud.
• AI text processing, to generate word explanations, teacher answers and exercises.
• Email delivery, to send sign-in codes.
• Search, to find news articles to read.
• Error monitoring, to find and fix crashes (hosted in the EU).

A current list of the specific sub-processors we use is available on request at hello@getvaza.com. Some providers may process data outside the EU; where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Legal basis (GDPR)

Performance of our contract with you (running the service and your account); your consent (usage analytics); and our legitimate interest in keeping the service secure and preventing abuse.

How long we keep it

We keep your account and content for as long as your account exists. You can delete your content in the app, and you can ask us to delete your account and associated data. Anonymous analytics events are retained for up to 12 months.

Your rights

You can access, correct, export or delete your data, withdraw consent to analytics at any time, and object to certain processing. To exercise these rights, contact hello@getvaza.com. You may also lodge a complaint with your local data protection authority (in Sweden, the Integritetsskyddsmyndigheten, IMY).

Cookies and local storage

We use local storage on your device to keep you signed in and to remember your settings and content — this is necessary for the app to work. We set analytics identifiers only if you accept statistics. We do not use third-party advertising cookies.

Children

Vaza is intended for users aged 18 or older. If you are under 18, you may use Vaza only with the consent of a parent or guardian.

Changes

We may update this policy. We will note the date above and, for material changes, tell you in the app.

See also our Terms of Service and about Vaza.