Privacy Policy · Haki (حكي)

Last updated: September 24, 2026 · Deutsche Version

Controller

IOQ Software, Owner: Ihab Oweis
Lessingstraße 48, 47166 Duisburg, Germany
Email: info@speakhaki.com

What data we collect

Account data: Email address (for authentication via Firebase Auth or Google Sign-In)
Translation data: Words and sentences you translate are stored in your account to provide history and favorites
Voice input: Audio is processed by your device's built-in speech recognition. Audio is not sent to or stored on our servers.
Settings: Your language preferences, dark mode setting, and collection data
Crash reports: Anonymous crash data via Firebase Crashlytics to improve stability
Subscription data: Purchase status and subscription tier, managed by Apple/Google via RevenueCat. We do not store payment details.
Energy balance: Your translation energy count, stored in your account for service delivery

How we use your data

To provide AI-powered translation services
To sync your translations and settings across your devices
To improve app stability through anonymous crash reports

Third-party services

Firebase (Google): Authentication, data storage, crash reporting. Privacy Policy
OpenRouter: AI translation processing. Privacy Policy
OpenStreetMap Nominatim (OpenStreetMap Foundation): Place search and administrative boundaries. Privacy Policy
Google Sign-In: Optional authentication method. Privacy Policy
RevenueCat: Subscription and purchase management. Privacy Policy

Subscriptions & Payments

Payments are processed by the Apple App Store or Google Play Store. We do not store credit card information. Subscription management is handled by RevenueCat. Refunds are managed by the respective app store.

Place search and dialect research

When you search for a place, the search term is sent to OpenStreetMap Nominatim to find it. If we don't cover the place yet, its coordinates are sent to our server, which looks up the administrative area at that point (again via Nominatim) and uses AI (OpenRouter, with web search) to find out which dialect is spoken there. The prompt contains only the place names from OpenStreetMap, never your search term or account data. The result is stored without any reference to you, so the next person searching there gets it straight away.

Dialect feedback

If you rate whether a translation sounds like the chosen dialect, we store your vote, the reason you picked, your optional correction (up to 300 characters), the original sentence and the translation, together with your user ID and the app language. We use this only to check and improve the dialect. Your feedback is kept as long as your account exists and is deleted together with it. The per-dialect vote counts contain no personal data and are kept.

Data sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Data is only shared with the services listed above to provide app functionality.

Shared collections

If you share a collection with another user, they can see the translations in that collection. You can stop sharing at any time.

GDPR Rights (EU Users)

You have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at the address below or use the in-app account deletion feature. You also have the right to lodge a complaint with a data protection authority; the one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (www.ldi.nrw.de).

Data retention and deletion

You can delete your account and all associated data at any time in the app under Settings → Delete Account. This permanently removes all your translations, collections, energy data, and settings.

Children's privacy

Haki is not directed at children under 13. We do not knowingly collect data from children.

This website

Hosting: This website is served via Cloudflare Pages (Cloudflare, Inc., USA). Cloudflare processes technically required server logs including your IP address (legal basis: legitimate interest in secure operation, Art. 6(1)(f) GDPR). Cloudflare Privacy Policy
Visit counting without cookies: We use Cloudflare Web Analytics (Cloudflare, Inc., USA) to count which pages get opened. It records the page view itself, the address opened, the referring page, the country, the device type, the browser and the operating system. It sets no cookies, stores nothing on your device and reads nothing from it; individual visitors are not recognised. No consent under Section 25 TDDDG is therefore required, the legal basis is our legitimate interest in a website that fits its purpose (Art. 6(1)(f) GDPR). Cloudflare Privacy Policy
No cookies without your consent: Running this website needs no cookies at all. Fonts load locally from your system, not from external servers. We use no advertising services.
Statistics, only with consent: If you consent in the privacy notice, we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to count which pages get opened and where visitors come from. This sets cookies and sends data to Google, including to the USA. Your IP address is truncated before evaluation. Legal basis is your consent (Art. 6(1)(a) GDPR). Google Privacy Policy
Withdrawal: You can change your decision at any time via Cookie settings at the bottom of every page. Withdrawal takes effect immediately; it does not affect the lawfulness of processing before it (Art. 7(3) GDPR).
Language choice and your decision: Your language selection and your answer to the privacy notice are stored only locally in your browser (localStorage) and never transmitted to us. Without them, the notice would reappear on every page.

Contact

For questions about this privacy policy, contact: info@speakhaki.com