
Privacy policy
Last updated 6 October 2026
What Hataku keeps about you, why, who else handles it, and how to have it removed. Questions go to hello@hataku.app.
Who is responsible
Hataku is responsible for the personal data described here. You can reach us at hello@hataku.app for anything on this page, including the requests listed under "Your rights".
What we keep
Only what the app needs to work, in these groups:
- Your account: name, email address, whether you are a student or a teacher, your current and target level, timezone and language. Your password is held by our login provider in a form nobody can read back, including us.
- If you teach: your bio, the languages you teach and your profile photo, which students can see.
- What you write and record: diary entries, homework, exam answers, and voice recordings you make for your diary or a speaking exam.
- What your teacher records about your learning: feedback, corrections, marks, grades and observations.
- Payments: the amount, the method, whether it succeeded and the payment provider's reference. Card and bank details go to the payment provider and never reach us.
- Running the service: how many AI checks you used (a count, not the text), which notification emails were sent, and anonymous page-view statistics that set no cookie.
Why we keep it
To give you the account you signed up for: so you can write, so your teacher can read and respond to what you send them, and so your work is still there next time. We rely on the agreement you make with us by signing up.
To send you emails about your work. You can turn these off from the link in any email.
To take payment, and to stop one person taking the free trial more than once.
We do not sell your data, show you advertising, or use your writing for anything other than running Hataku for you.
Who can see your work
A draft is private to you. A submitted entry goes to the teacher you sent it to and nobody else. A teacher's notes about you are private to that teacher unless they choose to share one with you.
The people who run Hataku can reach the database to keep the service working and to answer requests you make. We do not read your work for any other reason.
Who else handles it
We use these services to run Hataku. Each one handles your data only to do its job for us. Some of them store data outside the country where you live.
- Supabase: our database, file storage and login.
- Vercel: hosts the website and counts anonymous page views.
- Anthropic: the AI check. Your text is sent only when you ask for a check, without your name, email address or account id. Under Anthropic's commercial terms it is not used to train their models.
- Resend: delivers our emails.
- Midtrans: processes payments.
- Your browser's speech recognition, if you use dictation. Hataku does not receive the audio. Your browser maker may (Google, in Chrome).
How long we keep it
For as long as you have an account. When an account is deleted, everything connected to it is deleted at once, including recordings and what teachers wrote about you. There is no waiting period and no hidden copy.
We keep one short record of each deletion: the email address, the type of account, the date, and whether a free trial was used. This exists so that deleting and signing up again cannot be used to take the trial repeatedly.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or withdraw your agreement to us processing it. Write to hello@hataku.app from the address on your account and we will act on it.
You can delete your own account at any time from your profile page. Most of your details can also be changed there.
If you think we have handled your data wrongly, you can also complain to the data protection authority where you live.
Children
To create an account you must be 18 or older, or have a parent or guardian who agrees to you using Hataku. You confirm this when you sign up, and we record when you did.
A parent or guardian can ask us at any time to delete their child's account.
Changes
If this page changes, the date at the top changes with it. If a change affects what we collect or who we share it with, we will tell you by email before it takes effect.