Ulpan — Privacy Policy

Last updated: 4 September 2026

Ulpan (ulpan.pionion.com) is a small, invitation-only Hebrew-learning application operated by Pionion. This page describes what data it handles and why.

What we collect

• Account data. Your email address, display name, and role. If you sign in with Google, we receive your verified email address and display name from Google; we store nothing else from your Google profile and we never receive your password or access to your Google account or data.
• Access requests. If you sign in with Google without having an account, we keep your email address, display name, and the time of the request so the owner can grant you access. Unapproved requests are automatically deleted after 30 days.
• Learning activity. Words you save, flashcard reviews, and pronunciation-practice recordings' scores, kept so the app can function as a study tool.
• Cookies. One session cookie, used solely to keep you signed in. No advertising or analytics cookies.

How data is used

Only to operate the app: authentication, your personal study progress, and service costs. We do not sell data, share it for advertising, or use it for any purpose beyond running Ulpan.

Third-party processing

Study content (subtitle text, words you look up, short pronunciation recordings) is processed by AI providers (Google Gemini, ElevenLabs) to produce translations, explanations, audio, and transcriptions. Sign-in via Google uses Google Identity Services, governed by Google's privacy policy.

Payments

If you subscribe to the Supporter plan, the checkout and your payment details are handled by Paddle as merchant of record under Paddle's privacy policy. We send Paddle only your account email and an internal account identifier so the subscription can be matched to your account; Paddle sends us the subscription status and paid-through date. No learning data goes to Paddle and no card details reach us.

Data deletion

To have your account and associated data deleted, or for any privacy question, contact support@pionion.com. Dismissed or expired access requests are deleted outright.