1. Who We Are
Musefuel AB, company registration number 559080-8720, operates Bjorn and is the controller responsible for the personal data described in this Privacy Policy.
If you have privacy questions or want to exercise your rights, contact us at hey@heybjorn.com.
2. Scope
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use Bjorn on the web, on iOS, and through related support, billing, account, and email flows.
3. Personal Data We Collect
3.1 Account and Identity Data
- email address and first name;
- password hash if you use password-based login;
- verification codes and related expiration data;
- account identifiers connected to Google or Sign in with Apple where you use those login methods.
3.2 Settings and Subscription Data
- target language, home language, language level, voice settings, theme, text size, and similar account preferences;
- tier, billing provider, payment month, payment amount, renewal information, and extra-credit balances;
- platform-specific subscription state, including App Store subscription status where applicable.
3.3 Learning and User Content
- saved flashcards, decks, vocabulary, notes, practice items, grammar-practice history, learning preferences, and study progress;
- daily lesson state and progress data needed to continue your study flow across sessions and devices;
- user feedback you submit inside the service.
3.4 AI, Voice, and Pronunciation Data
- text prompts and inputs sent for AI processing in active learning features;
- audio you submit for speech-to-text or pronunciation features;
- transcription results returned by our providers;
- pronunciation-assessment records such as reference text, recognized text, word-level scoring, duration, and pronunciation result payloads;
- generated audio cache references and generated speech files used to serve playback efficiently.
Important distinction: Bjorn does not appear to keep a general permanent archive of all AI chat history by default, but some voice and pronunciation-related records are stored where needed to provide features such as review, feedback, scoring, caching, and continuity.
3.5 YouTube and Integration Data
- YouTube channel selections associated with your account;
- video metadata, thumbnails, captions, and transcript cache data used to power learning features;
- Google account data needed when you use Google authentication.
3.6 Technical, Usage, and Analytics Data
- IP address and approximate location or country information;
- device, browser, operating system, and referrer information;
- page visits, conversion events, diagnostics, reliability data, and service-usage metrics;
- session and security data used to authenticate requests and protect the service.
4. How We Use Personal Data
- to create and manage accounts and authenticate users;
- to deliver lessons, AI interactions, feedback, transcription, pronunciation review, and saved learning features;
- to process payments, maintain subscriptions, and track credit balances;
- to provide support, send verification, security, and billing messages, and answer requests;
- to send product and marketing emails to registered users, subject to unsubscribe controls and applicable law;
- to secure the service, prevent abuse and fraud, monitor reliability, and improve performance and product quality;
- to comply with legal, tax, accounting, and regulatory obligations.
5. Legal Bases
Where GDPR or similar laws apply, we generally process personal data on one or more of these bases:
- performance of a contract with you, including running the account and delivering Bjorn features;
- legitimate interests, such as securing, improving, and administering the service;
- compliance with legal obligations, including tax, accounting, and fraud-prevention obligations;
- consent where consent is required under applicable law.
6. How We Share Personal Data
We share personal data with service providers and platforms that help us operate Bjorn. Depending on the feature you use, these may include:
- OpenRouter for AI text generation and related processing;
- ElevenLabs for speech-to-text and text-to-speech processing;
- Microsoft Azure for pronunciation assessment processing;
- Apple for App Store billing and subscription management on iOS;
- RevenueCat to validate and sync App Store subscription status;
- Polar for web billing and checkout flows;
- Amazon Web Services for hosting, storage, and email delivery;
- Google for Google Sign-In and YouTube Data API-related features;
- Vercel Analytics for public-site analytics;
- professional advisers, authorities, or counterparties where disclosure is required by law or needed to protect rights, safety, or the service.
We do not sell personal data or share it for third-party cross-context behavioral advertising.
7. International Transfers
Bjorn and our providers may process personal data in countries outside your home country, including outside the European Economic Area. When required, we rely on contractual protections, provider commitments, and other legally recognized safeguards appropriate to the transfer.
8. Retention
We retain personal data for as long as reasonably needed to operate Bjorn, provide support, maintain legitimate records, and comply with law.
- account and settings data are generally kept while your account is active and for a limited period afterward where needed for security, recovery, dispute handling, or compliance;
- billing, payment, tax, and accounting records may be retained as long as legally required;
- learning data, saved items, and pronunciation review data may be retained until deleted by you, deleted with your account, or no longer needed for the feature;
- some operational caches may persist for shorter or longer periods depending on the feature; for example, some YouTube cache data is refreshed on an approximately three-day cycle, while generated audio caches may persist until removed or replaced;
- temporary processing files, such as temporary transcription upload files, are intended to be deleted after processing.
9. Marketing and Product Emails
We may send product and marketing emails to registered users. Marketing emails will include an unsubscribe mechanism.
You may opt out of marketing emails, but you may still receive service-related communications such as verification, billing, account, legal, security, or support messages.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal data.
To exercise privacy rights, contact hey@heybjorn.com. We aim to respond within 30 days where applicable.
You can request account deletion through available account settings flows or by contacting us. If you have an Apple subscription, deleting your Bjorn account does not itself cancel App Store billing; you must cancel separately through Apple.
11. Children's Privacy
Bjorn is not intended for children under 16, and we do not knowingly offer the service to users under 16.
12. Security
We use reasonable technical and organizational measures to protect personal data, including access controls, secure transmission, authentication controls, and provider security measures. No system is perfectly secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we may notify you in the service, by email, or by posting an updated version with a new effective date.