App privacy

Your recordings and learning library stay on your iPhone. With your permission, text is sent to Weasly and OpenAI for translations and word meanings.

Updated 16 October 2026. This notice covers the Weasly iPhone app being prepared for release. The website privacy notice covers this website.

Who is responsible

Eldhorn GmbH provides Weasly and controls the processing described here. You can contact us at this email or postal address about your data or the app.

Your audio and learning library

Recordings, downloaded audio, transcripts, saved translations, vocabulary, review history, learning goals and preferences are stored in the app on your iPhone. Speech is transcribed on the device using Apple’s speech tools. Weasly does not upload raw audio to its translation service or OpenAI.

The Weasly account shares subscription access and translation allowance across your devices. It does not upload or synchronize your full learning library. Apple device backups and files you export follow your backup settings and chosen storage destination. Exported Weasly backup files are not encrypted by Weasly. Store them somewhere you trust.

Cloud translations and word meanings

Before signing in, the app asks whether you allow text to be sent to Weasly and OpenAI. When you use cloud translation or request a word meaning, Weasly sends the relevant transcript text, surrounding sentence context, selected word or phrase, language choices and any associated source title through our Cloudflare-hosted service to OpenAI’s AI service. Translations and meanings are returned to your device.

Cloudflare provides the servers, queues and account storage used to process these requests. OpenAI provides the AI translation. The requests to OpenAI do not include your Weasly account ID or raw audio. The text itself may contain personal information, so avoid recording or translating information you should not share. Get permission from everyone you record.

Weasly stores pending request text in encrypted form for up to 24 hours. It removes that input when the request completes or expires. Completed results are stored in encrypted form for 24 hours after completion so your device can retrieve them. These server limits do not delete the copies saved in your local library.

Weasly requests that OpenAI not retain Responses API results for later retrieval. This does not mean zero retention: OpenAI may retain text in security and abuse-monitoring records for up to 30 days, or longer where required by law or reasonably necessary to prevent harm. OpenAI’s default API policy does not use API data to train models unless the customer opts in. See OpenAI’s data controls for its applicable retention rules.

Account, subscription and service records

Sign in with Apple creates a pseudonymous Weasly account identifier. Weasly does not request your name or email address from Apple. We use encrypted Apple authorization tokens, session records and Apple App Attest device-verification keys to authenticate requests and protect the service.

Apple handles purchases and payment details. Weasly receives signed transaction information, such as the product, transaction identifier, subscription status and expiration date, to provide paid access and restore purchases. We do not receive your payment-card or bank details.

The service also processes translation request identifiers, source fingerprints and timing intervals, request types, language choices, quota use, processing cost, request status and errors. These records support correct billing, recovery, security and service operation. Our hosting provider receives connection information such as IP address and request timing when your device contacts the service.

Weasly does not use an advertising identifier, sell personal data, or run behavioral advertising or a third-party analytics SDK in the app. Podcast publishers may include their own advertising in episodes.

Podcast and language downloads

Podcast searches and charts use Apple’s directory. Apple receives the search terms and connection information needed to respond. Podcast feeds, audio and artwork are requested from publishers and their hosting providers, which receive ordinary network request information such as your IP address and the requested content. Weasly does not attach your private recordings, learning history or Weasly account credentials to those requests.

Speech and public podcast-metadata translation assets may be downloaded from Apple. Japanese pronunciation data is downloaded from the dictionary project hosted on GitHub. These providers handle requests under their own policies. Podcast availability and publisher data practices can vary.

Reminders and support

Daily learning and trial reminders are scheduled on your device only when you allow notifications. You can change reminder preferences in Weasly and notification permission in iPhone Settings.

If you contact us, we process your email address and the information you send to answer your request and related follow-up. We keep correspondence while needed for that purpose or applicable legal obligations. Please do not send passwords, payment details or unnecessary recordings and transcripts.

Choices and deletion

You can decline text sharing before signing in. New cloud translations require that permission and an active subscription. You can stop sending new translation text by signing out in Settings → Translation account. This does not remove text already sent to a provider or automatically cancel a subscription.

You can delete the cloud account in Settings → Translation account → Delete account. When deletion begins, Weasly removes online translation text and results, source fingerprints, manifests and translation-job history. Your saved library stays on your iPhone. Deleting Weasly from the device removes its local app data; copies in exported files or backups must be managed at their storage destination.

After deletion begins, only aggregate usage for the current monthly allowance is kept until that allowance resets, for no more than 31 days. Minimal security and subscription-ownership records expire within 31 days; outstanding cost-reconciliation records expire within 24 hours. These limited records prevent a repeated deletion from granting a fresh allowance and let us finish accounting for requests already processed.

Weasly also revokes the authorization with Apple and removes its stored sessions and device-verification keys. If Apple cannot complete revocation immediately, the service retries automatically. The encrypted Apple authorization grant is retained only for those retries, for no more than 31 days, then removed. OpenAI’s separate security-retention rules and Apple’s own account and transaction records are not erased by deleting the Weasly account.

Deleting the app or account does not cancel an App Store subscription. Use Manage subscription in Weasly or your Apple Account’s subscription settings.

Why we process data and where

We process data to deliver the service you request, authenticate your account, manage subscriptions and allowance, respond to support requests and protect the service against abuse. You choose whether to permit text sharing for cloud translation. Where the GDPR applies, the relevant bases are performance of the service contract, consent where requested, legitimate interests in service security and support, and legal obligations where applicable. You can withdraw consent for future processing; this does not change processing that already took place.

Our hosting provider is Cloudflare, Inc. (United States). OpenAI’s contracting entity for customers in Switzerland is OpenAI Ireland Ltd. (Ireland). We use global cloud services without a Switzerland-only or European-only processing restriction. Data can therefore be processed outside Switzerland and the European Economic Area, including in the United States, and in other countries used by the providers and their subprocessors.

The providers publish their processing locations in Cloudflare’s subprocessor information and OpenAI’s subprocessor list. OpenAI’s listed infrastructure and operational locations include countries in Europe, the United States, Canada, Japan and other countries specified there. Their data-processing agreements describe transfer safeguards, including standard contractual clauses and applicable adequacy decisions: Cloudflare’s Data Processing Addendum and OpenAI’s Data Processing Addendum. Contact us if you need more information about the safeguards relevant to your data.

Your rights

Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact kontakt@eldhorn.com; we may need information to verify that the request concerns your account. You can also contact the Swiss Federal Data Protection and Information Commissioner or your competent data protection authority.

Weasly is a general language-learning app and is not designed specifically for young children. Public podcasts may contain mature content.

Changes

We will update this notice when the app’s data processing changes. The date above identifies the current version.