Privacy Policy

1. Who we are

Musefuel AB, company registration number 559080-8720, operates Björn and is the controller responsible for the personal data described in this Privacy Policy.

If you have privacy questions or want to exercise your rights, contact us at hey@heybjorn.com.

2. Where this policy applies

This policy covers Björn on the web, in our mobile and desktop apps and in the Björn Chrome extension, together with related account, billing, support and communications services. Features differ by platform.

Björn Translate uses your Björn account and shared account settings and saved learning items. Its separate privacy notice explains processing specific to the Translate app. Account deletion affects the shared account, not just one app.

3. Information we collect

Account and settings: your email address, name, account identifiers, authentication records and password hash where applicable; sign-in information from Apple or Google when you choose them; home and target languages, level, interests, voice and display preferences. Account and authentication information is needed to provide an account. Optional profile and learning information helps personalize your experience.

Learning content: your answers, prompts, corrections, notes, vocabulary, flashcards, decks, glossary lookups, lesson and practice results, study activity, scores and progress. Imported decks contain the fields you upload. We may send samples of those fields for AI processing to identify words and definitions. Requested videos and captions may also be processed for learning features.

Pen Pals: the letters you write, generated replies and enclosures, delivery state and information extracted from correspondence to maintain continuity, such as remembered facts, questions and conversation topics. Pen Pals are fictional AI characters. Your letters are processed by our systems and AI providers; they are not correspondence with other human learners.

Coach and personalization: examples from your learning activity, recurring errors, inferred strengths and difficulties, summaries and coaching feedback. These records help us choose relevant practice and personalize later guidance. Inferences can be wrong. Contact us to request access to, correction of or deletion of personal information in these records.

Voice: audio you submit or transmit when using microphone features, transcripts, text used for speech generation, recognized words, scores, timing information and audio references. Live voice features stream audio to the relevant AI provider while you speak. Some recordings, transcripts and results are stored for playback, review and continuity; generated speech may be cached for reuse.

Billing: purchase and subscription identifiers, purchase source, amounts, renewal and entitlement information, and credit balances. Payment providers process the payment details needed for checkout.

Support and communications: messages and feedback you send us, your contact details and relevant account and language information; email preferences and delivery records. Feedback sent through the app may be delivered to our support email inbox.

Technical information: IP address, approximate location (country, region and city) that our content delivery network infers from it, device and browser information, authentication and security records, diagnostic and usage events, time spent in each part of Björn, page visits and how you first found the site.

Information comes from you, your use of Björn, your chosen sign-in and payment providers, and inferences made by our learning features. Avoid including sensitive personal information or unnecessary information about other people in learning prompts or letters.

4. The Björn Chrome extension

The extension lets you look up words on websites you visit and, if you turn it on, get writing help as you type. It uses the Björn account you're signed in to on heybjorn.com.

• Looking up a word sends the selected text and up to 400 characters around it to Björn.
• Writing help is off until you turn it on. When it's on, the sentence you're typing and up to 1,500 characters around it go to Björn and our AI providers. Password, payment, verification-code, email and other personal-detail fields are skipped, as are forms that contain a password field.
• Pressing the speaker sends the word or phrase to Björn to fetch its pronunciation.
• Language detection runs on your device. Page text used for it never leaves your browser.
• The extension reads your Björn session cookie for heybjorn.com so lookups and saved words use your account. The cookie stays inside the extension and is never shared with the pages you visit.
• Your extension settings, including the sites you've turned it off on, stay in your browser. The popup reads the open tab's address only while the popup is open, so you can turn Björn off for that site.

The extension doesn't record your browsing history, doesn't send the addresses of pages you visit to Björn, and never submits forms or sends messages for you. Words you save become cards in your Björn account and are handled like words saved on the website.

5. Why we use information and our legal bases

To perform our contract with you, we use account information to sign you in; learning content and relevant history to deliver the features you use, including personalized lessons, Coach, Pen Pals and voice; and purchase information to manage subscriptions and credits. We also use relevant information to answer service requests and send necessary account and billing messages.

We rely on legitimate interests to protect accounts, prevent fraud and abuse, diagnose failures, maintain reliable services and handle support, disputes and legal claims. Those interests are operating a secure, reliable learning service and resolving problems. We assess these interests against your rights.

We process records needed to meet applicable accounting, tax and other legal obligations on the basis of those obligations.

Where consent is required, including for nonessential device storage or particular marketing communications, consent is the applicable basis. Where the law permits marketing to existing customers without consent, our interest is telling customers about relevant Björn services, subject to their right to opt out. You can withdraw consent or object to marketing without losing access to the core service.

6. Personalization and AI processing

Our AI features use your current input and relevant context, such as selected language and level, recent exchanges, saved learning evidence or Pen Pal memories. Providers receive the information needed for the requested processing. This can include personal information you put in a prompt, recording or letter.

Learning profiles and inferred patterns help generate recommendations, corrections and practice. They are educational feedback, not an official qualification or a decision about your legal rights.

Retention of information in Björn is separate from processing by AI providers. Provider handling depends on the service, model and applicable configuration and terms. Contact us for information about the providers and safeguards used for a particular feature.

7. Who receives information

OpenRouter and the model providers it routes requests to process text generation, translations, glossary content, learning feedback, Pen Pal content and related AI requests. ElevenLabs processes speech recognition, including live voice while you speak, and speech generation.

Amazon Web Services provides infrastructure, storage, content delivery and email delivery. Resend also delivers email. Apple and Google provide the sign-in services you choose. Apple also provides App Store billing. RevenueCat helps validate and synchronize App Store purchases. Polar handles web checkout and billing, and receives your IP address at checkout. Google's YouTube services provide channel and video information for watching features, and YouTube serves embedded videos when you play them. We measure use of Björn ourselves and don't use a third-party analytics service.

When external maps, videos or other hosted media are loaded, their providers receive the network and device information needed to deliver them. Their own notices apply to processing they undertake as independent providers.

Authorized people handling support and operations can access information needed for that work. We may also disclose relevant information to professional advisers or authorities when necessary to comply with law, handle claims or protect rights and safety. Providers may act on our behalf or as independent controllers for their own billing, legal or platform purposes.

We do not sell personal data or share it for third-party cross-context behavioral advertising.

8. International processing

Our providers may process information outside your country, including outside the European Economic Area. Such transfers require an applicable legal basis for the transfer, such as an adequacy decision or appropriate safeguards, including approved standard contractual clauses where applicable.

You can contact hey@heybjorn.com to ask which transfer arrangements apply to your information and how to obtain a copy of relevant safeguards. Commercially confidential information may be redacted.

9. How long information is kept

Account settings, saved learning items, letters and learning memories are kept to provide account continuity while needed for those features, unless you delete them through available controls or request their deletion. Not all learning records have the same lifetime.

Temporary transcription upload files are removed after processing. Generated speech and other playback caches can remain separately from the lesson or screen that created them. Account deletion does not mean that every cached file or backup copy disappears immediately.

We retain support correspondence for handling the request and any related dispute, and security records for investigating incidents and preventing abuse. Payment, tax and accounting records are retained for applicable legal periods. Retention depends on the purpose, the sensitivity of the information, outstanding requests or claims and legal requirements.

Backup copies are held separately for recovery and may remain after deletion from active systems until they are overwritten or removed. Contact us for information about retention or deletion of a particular record, recording or support message.

10. Browser storage, email and notifications

Björn uses browser or device storage for sign-in, preferences and local app state. On your first visit, the website stores a note of how you found it under the key bjorn:first-touch: the page you landed on, including any campaign tags in its address, the site that sent you and the time. It is sent to us with your usage and kept with your account, so we can understand visits and sign-ups.

The browser copy remains until you clear it. You can remove website data using your browser settings; removing essential storage may sign you out or reset preferences. Nonessential storage is subject to applicable consent requirements.

Every optional email, such as Pen Pal letters, reminders, progress updates and news, has an unsubscribe link that works without signing in. Unsubscribing does not stop necessary verification, security, billing or support messages.

11. Your rights and account deletion

Where the GDPR applies, you can request access to your personal data, correction of inaccurate data, erasure, restriction of processing and portability where its conditions apply. You can object to processing based on legitimate interests and to direct marketing at any time.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. These rights have legal conditions and exceptions, for example where records must be kept to meet an accounting obligation.

Contact hey@heybjorn.com to exercise your rights, including requests concerning stored letters or inferred memories. We may need proportionate information to verify your identity. We respond without undue delay and normally within one month. If a lawful extension is needed because of complexity or the number of requests, we will explain it within that first month.

You can delete your account in Björn Translate (open Account and choose Delete account) or by emailing hey@heybjorn.com from your account's address. Deletion affects the shared Björn account. Some records may remain for the purposes and periods described above. If you subscribed through Apple, cancel that subscription separately in Apple subscription settings.

You may complain to the Swedish Authority for Privacy Protection, IMY, at www.imy.se, or another competent supervisory authority, including in the EEA country where you live or work. You do not have to contact us first.

12. Children's privacy

Björn is not intended for children under 16, and we do not knowingly offer the service to users under 16.

13. Security

We use reasonable technical and organizational measures to protect personal data, including access controls, secure transmission, authentication controls, and provider security measures. No system is perfectly secure, and we cannot guarantee absolute security.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the service, by email, or by posting an updated version with a new effective date.

15. Contact

Musefuel AB (559080-8720)

Privacy contact: hey@heybjorn.com