Privacy Policy

Who we are

SpeakRight (“we”, “us”) is a mobile application that helps users practice spoken English with AI-driven feedback. This Privacy Policy describes what data we collect when you use the SpeakRight mobile apps (iOS and Android) and this website, why we collect it, and how it’s handled.

For privacy-related questions, contact us at support@getspeakright.com.

Information we collect

Account information

When you sign in to SpeakRight, we receive a small set of identifiers from your chosen sign-in provider:

• Google Sign-In or Sign in with Apple — email address, display name, and profile picture URL (if available).
• Email magic-link — the email address you enter, used only to deliver the one-time sign-in link.

We store these to identify your account, sync your progress across devices, and send you transactional emails about your account or subscription.

You may also use SpeakRight without an account (“Continue without account”); in that mode we generate an anonymous account id, no personal account information is collected, and your progress is stored only on the device and cannot be recovered if you uninstall the app or change devices.

Voice recordings and exercise data

SpeakRight is built around recording your spoken English and giving you feedback on it. When you complete an exercise, we collect:

• The audio recording of your spoken response.
• The transcription of that recording.
• AI-generated feedback (pronunciation scores, error highlights, suggested corrections, conversation replies from the AI tutor).
• Metadata: which exercise you took, when, your selected accent, your skill level, your selected topics.

These data are tied to your user account and used to:

• Power the exercise feedback you see immediately after recording.
• Build your error-word practice (the words you stumble on most).
• Show your progress history.

Subscription information

If you start a paid subscription, billing is processed by Apple (App Store) or Google (Google Play). We do not see, store, or have access to your payment method or purchase amount. We use RevenueCat to receive subscription status (active, expired, in trial) and to associate it with your account so the app knows whether to grant access to paid features. We store the product identifier and expiration date in our database.

Device and usage analytics

To understand how the app and website are used and to fix bugs, we collect product analytics through PostHog, using their managed PostHog Cloud service in the European Union region (eu.i.posthog.com). The data we capture includes:

• Pages or screens viewed.
• Buttons tapped or clicked.
• Errors and crashes encountered, including stack traces.
• Device platform and OS version (no precise device identifiers).

Before you sign in (in the app or on this website), these events are tied to a random anonymous distinct_id. After you sign in to the app, we associate that identifier with your SpeakRight account id so we can debug issues per user — at that point, analytics are linked to your account.

On this website specifically, PostHog stores a first-party cookie containing the distinct_id. This is the only cookie we set. We honor the Do Not Track browser signal and the Global Privacy Control signal — when either is enabled, we do not collect any analytics from your visit.

Advertising

The SpeakRight mobile apps (iOS and Android) show occasional interstitial advertisements through Google AdMob. We do not show any advertisements on this website.

When AdMob is used:

• Google may access or set your Advertising ID — the Identifier for Advertisers (IDFA) on iOS, the Google Advertising ID (GAID) on Android — together with your IP address, and may share information about your device and ad impressions with its advertising and measurement partners. See Google’s advertising privacy notice.
• For users in the European Economic Area, the United Kingdom, and Switzerland, we show Google’s IAB-TCF-compliant consent form (via Google’s User Messaging Platform) the first time you open the app. You can revisit your choice from inside the consent form.
• On iOS, we additionally request App Tracking Transparency permission (the “Allow / Ask App not to Track” system prompt) before personalized ads can be served. If you decline, you will still see ads, but they will not be personalized to you.
• You can opt out of personalized ads at any time:
  • iOS — Settings → Privacy & Security → Tracking → toggle off “Allow Apps to Request to Track” (or per-app).
  • Android — Settings → Google → Ads → “Delete advertising ID” or “Opt out of Ads Personalization”.
• AdMob revenue events are reported to RevenueCat alongside your subscription state for our internal monetization reporting.

How we use third-party services

To deliver the product we share specific data with the following processors. Each is bound by terms compatible with GDPR and either stores data in the European Union or under equivalent safeguards.

Service	What we share	Why
Supabase	Account info, voice recordings, exercise history, subscription state	Application backend (database, auth, storage)
Google / Apple OAuth	Email, display name, profile picture URL	Sign-in only, no further data passed back
RevenueCat	App-Store / Play subscription identifier, account id, AdMob ad-revenue events (Android)	Subscription state and monetization reporting
Azure Cognitive Services Speech	Voice recording, target text	Pronunciation scoring, speech-to-text, text-to-speech
OpenRouter	Transcription text and exercise context (messages between you and the AI tutor)	LLM routing for conversation generation and feedback text. OpenRouter may further route the request to downstream model providers (e.g. OpenAI, Anthropic) under its terms.
PostHog Cloud (EU)	Product events; account id after sign-in; web distinct_id	Product analytics and error tracking
Google AdMob	Advertising id (IDFA on iOS, GAID on Android), IP address, ad impression data	Interstitial advertisements

We do not sell your personal information for monetary consideration.

How long we keep your data

• Account data, voice recordings, exercise history, and AI-generated feedback: kept as long as your account exists. When you delete your account, we delete this data immediately (and at most within 30 days). Account deletion is permanent.
• Subscription state: tied to account lifetime; deleted with the account.
• Analytics events in PostHog: retained according to PostHog’s project retention (currently up to 12 months). When you delete your SpeakRight account, we ask PostHog to delete the events linked to your account; this completes within 30 days. Anonymous events captured before you signed in are not associated with your account and are retained by PostHog’s project retention.

Your rights

If you live in the European Economic Area, the United Kingdom, or another jurisdiction with comparable data-protection law, you have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and the associated data (“right to be forgotten”). You can do this from inside the app (Settings → Delete Account) or by emailing support@getspeakright.com.
• Export your data in a portable format (request via support).
• Object to specific processing activities.
• Withdraw consent at any time where we rely on consent (including AdMob consent, which you can change from the consent form or your device settings).

We respond to requests within 30 days. There is no fee for reasonable requests.

California residents

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you additional rights:

• Right to know what categories of personal information we collect, share, and disclose.
• Right to delete the personal information we hold about you (use Settings → Delete Account, or email us).
• Right to correct inaccurate personal information.
• Right to opt out of sharing for cross-context behavioral advertising. We do not sell your personal information for money. Our Google AdMob integration in the iOS and Android apps may constitute “sharing” under CPRA. To opt out: revisit the AdMob consent form in the app, decline the iOS App Tracking Transparency prompt, or disable personalized ads in your device settings (see the “Advertising” section above).
• Right to non-discrimination for exercising any of the above.

Submit requests to support@getspeakright.com.

Children

SpeakRight is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please email support@getspeakright.com and we will delete it.

Security

We use industry-standard security practices: TLS in transit, encryption at rest for the production database, scoped access tokens for backend services. No system is perfectly secure, but we work continuously to protect your data.

International transfers

Our backend, primary database, and analytics are hosted in the European Union. Some processors — Apple, Google (OAuth, Play Billing, AdMob), Azure Cognitive Services, OpenRouter (and the LLM providers it routes to), and RevenueCat — may process data outside the EEA, including in the United States. Where they do, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

Changes to this policy

We will update this page when our data practices change. The “Last updated” date at the top of the page reflects the most recent change. For material changes that affect your rights, we will also notify you in the app.

Contact

For privacy questions or data-subject requests, email support@getspeakright.com.