Last updated 23 September 2026
Hey Runa is a spoken English course operated by Runa HR Holdings Inc ("we"). You say your answers out loud, but the app never turns on the microphone, so your voice never leaves your phone. If you make an account, what we keep is that account and how far you've got.
You can use Hey Runa without an account. Choose Continuar sin cuenta on the first screen and your progress stays on your phone, and nothing about it is stored on our server: the app doesn't send it to us at all. Playing a lesson still asks our server for Runa's audio, and those requests are logged like any other (see Technical logs below). If you sign in later, the progress on your phone moves into your account and is kept from then on as the rest of this page describes.
If you make an account, signing in uses Sign in with Apple, or an emailed one-time code. With Apple, Apple gives us an opaque identifier for you, and that identifier is the only thing about your identity we store; we ask Apple for your email address so the app can show you which account you're signed into, but we don't keep it — it's never written to our database, and the copy on your phone is the only one. We never ask Apple for your name and we never receive it.
With an emailed code, there is no third party to hand us an opaque identifier, so the address itself is what identifies your account — the one case where what we store is not opaque. The code we send is never stored: only its cryptographic hash is, for the ten minutes it's valid, and it's deleted the moment it's used or expires. What we keep about you is that identifier (the Apple one or the email), when the account was made, when it was last used, and your progress.
For each unit: how many times you've finished it and where to pick up if you left partway. Alongside it, which cards you've unlocked and when. That's all: nothing about how any single answer went, because the app never hears your answers.
Our server writes an operational log of each request. A request your account makes, such as sending your progress, carries the identifier for your account. Requests for Runa's audio carry no identifier for your account, whether or not you're signed in. The log also holds timings, sizes, and counts: how long a line of Runa's speech was, how many units and cards your phone reported. Those log lines include the IP address the request arrived from, which is also how we cap abuse. Rate-limit counters live in memory and are never written down.
Runa's voice is synthesized by an AI provider, xAI, before each release of the app. The text of her lines, which are all written by us, is sent there to be spoken, and nothing else is. Using the app never reaches xAI: your phone's requests for her speech are answered from what was stored ahead of time. xAI handles its requests under its own terms.
Cloudflare stores one thing for us: a cache of Runa's synthesized speech, shared across everyone and filed by a fingerprint of the sentence rather than by who plays it. Every sentence in it is one of Runa's. That cache has no expiry, and account deletion doesn't reach into it.
Apple handles Sign in with Apple. If you sign in with an emailed code instead, Resend delivers that one email; it sees the address and the code, nothing else. Railway runs our server, so every request passes through it.
Open Settings in the app and choose Delete account. Once you confirm, we delete everything listed above in one step: your progress, your cards, and your account itself. The app then signs you out. If you can no longer open the app, write to privacy@heyruna.ai telling us which account it is, and we do the same by hand.
Without an account there is no account or progress of yours on our side to delete. Deleting the app deletes the progress on your phone.
One thing survives: Runa's synthesized speech in the shared cache, which holds only her own lines and isn't filed under you in the first place.
You can also ask us what we hold about you, ask for a copy, or ask us to correct it. Write to privacy@heyruna.ai. Depending on where you live you may have these rights by law, and we honor them wherever you live.
Hey Runa is built for adults and isn't directed at children under 13. We don't knowingly collect anything from them, and we don't ask anyone's age. If you believe a child has an account, write to privacy@heyruna.ai and we'll delete it.
Everything travels over an encrypted connection and is stored on servers that require credentials we hold. Your sign-in token is kept in your phone's secure storage. No system is perfectly safe, and we don't claim ours is.
Our servers, our storage, and our AI provider are in the United States. Using Hey Runa from elsewhere means your data is handled there.
When what we do changes, this page changes with it, and the date at the top moves. If the change is a significant one we'll say so in the app rather than leaving you to notice.
Write to privacy@heyruna.ai.