1. Introduction
Welcome to SpeakyVoice ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal information is handled safely and responsibly.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SpeakyVoice application and website (the "Service"). SpeakyVoice is an AI-powered language learning platform featuring voice tutors, grammar lessons, and vocabulary training, operated by Oleksandr Liasnik (Founder) from Kyiv, Ukraine.
By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.
2. Information We Collect
A. Information You Provide to Us
- Authentication Data: When you sign in using Google, we collect your name, email address, profile picture (if available), and Google account identifier. When you sign in using Telegram, we collect your Telegram ID, first name, last name, and username (we do not collect or store your Telegram profile photo). When you register or sign in using Email and Password, we collect your email address, optional display name, and store your password strictly as a salted cryptographic hash (bcrypt).
- User Preferences: We store your chosen settings, such as your native language, target learning language, proficiency level, gender preference, display name, and interface language.
B. Information Collected During Your Use of the Service
- Voice Data: SpeakyVoice processes temporary audio streams in real-time to facilitate conversations with our AI tutors. We DO NOT store your voice audio on our servers. Voice streams are sent directly to the Google Gemini API for processing and are not retained by SpeakyVoice. Their processing by Google is governed by Google's terms (see Section 5).
- Conversation History: Text transcripts of your conversations with AI tutors and associated audio history are stored locally on your device in your browser's IndexedDB storage. They are not transmitted to or stored on our central database servers. You have complete control to review or delete individual conversations or clear your entire chat history at any time directly within the application.
- Grammar Lesson Progress: We store your progress through grammar lessons, including completed exercises, scores, and mastered topics.
- Vocabulary Data: We store your vocabulary flashcards, spaced repetition scheduling data (review dates, difficulty ratings), and learning statistics.
- Usage Data: We collect data about how you interact with the Service, including session duration, minutes used, and subscription status.
C. Payment Information
If you make purchases, your payment is processed by our third-party provider, PayPro Global. We do not collect or store your full credit card number, bank details, or other sensitive payment data on our servers. PayPro Global handles all payment-related data in accordance with PCI DSS standards.
D. Information We Do NOT Collect
- We do not store your raw IP address in our database. To prevent automated spam, rate-limit abuse, and protect our free welcome minutes from multi-account abuse, we process only irreversible, one-way cryptographic hashes (HMAC-SHA256) of your IP address and sign-in identifiers (email address, Google account ID, Telegram ID). These hashes cannot be reversed to reveal your IP address or identity.
- We do not store voice recordings on our servers.
- We do not allow file uploads — the Service does not accept user-uploaded images, documents, or other files.
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide, maintain, and improve the SpeakyVoice Service, including AI tutoring, grammar lessons, and vocabulary training.
- To process your voice input in real-time through the Google Gemini API to generate AI tutor responses.
- To personalize your learning experience, track your language progression, and schedule vocabulary reviews.
- To manage your account, authenticate you upon login, and link multiple authentication providers to a single account.
- To process payments and manage subscriptions through PayPro Global.
- To communicate with you regarding critical security notices, account status, and customer support inquiries. We do not send unsolicited marketing messages or automated promotional spam.
4. Data Storage and Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information.
- Database: Your user account profile, grammar lesson completion status, and vocabulary learning statistics are stored securely on MongoDB Atlas with encryption at rest. Conversation transcripts and session recordings are kept locally on your client device (IndexedDB) and are not stored in our central database.
- Authentication: Sessions are managed using encrypted JSON Web Tokens (JWT). Passwords for email/password authentication are hashed using bcrypt (cost factor 12) and are never stored in plain text.
- Retention: We retain your personal profile data and learning progress for as long as your account remains active. Real-time voice audio is strictly ephemeral and never retained on servers.
- Account Deletion: When you request account deletion, your account enters a 30-day grace period during which login is restricted. After 30 days, your account profile and server-stored learning progress are permanently removed. The only exception is the irreversible one-way hashes of your sign-in identifiers and IP address described in Section 2.D, which we retain solely to prevent repeated claiming of free welcome minutes; they cannot be used to identify you or to restore your account. Local data stored in your browser can be deleted by you at any time.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.
5. Third-Party Services
We rely on several trusted third-party services to operate SpeakyVoice. We share data only as necessary for these services to function:
- Google Gemini API: Receives real-time voice streams and conversation context (text) to power the AI tutor. SpeakyVoice does not store your voice audio. Content sent to the Gemini API is processed by Google as an independent service provider under the Gemini API Additional Terms of Service and the Google Privacy Policy. Depending on the service tier used, Google may retain such content for a limited period and may use it to provide, maintain, and improve its services, as described in those terms.
- Google OAuth: Used for secure user authentication. We receive only your basic profile information (name, email, picture).
- Telegram OAuth (OIDC): Used for user authentication. We receive your public Telegram identity details (Telegram ID, first name, last name, username).
- Resend: Used to deliver transactional email verification codes and password reset emails when you use email/password authentication.
- PayPro Global: Handles all payment processing as our Merchant of Record. They collect your billing information securely in accordance with their own Privacy Policy.
- MongoDB Atlas: Hosts our encrypted database infrastructure.
- Vercel: Provides web hosting, serverless compute, and CDN infrastructure.
We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes.
5.1 Google User Data (Limited Use Disclosure)
When you choose "Sign in with Google," we request only the basic scopes openid, email, and profile. Through these scopes we receive your name, email address, profile picture URL, and Google account identifier. We do not request access to your Gmail, Google Drive, Contacts, Calendar, or any other Google services.
- How we use it: Solely to create and authenticate your SpeakyVoice account, display your name and picture in your profile, contact you about your account, and prevent abuse of free welcome minutes (via irreversible hashes, see Section 2.D). None of the personal data obtained through Google OAuth is shared with or used by artificial intelligence models.
- How we store it: In our encrypted MongoDB Atlas database for as long as your account is active.
- How we share it: We do not sell Google user data, do not use it for advertising, and do not share it with third parties except the infrastructure providers listed above as necessary to operate the Service, or when required by law.
- AI/ML: We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
- How to delete it: Delete your account from your Profile page or email us (see Section 13). You can also revoke SpeakyVoice's access at any time at myaccount.google.com/permissions.
SpeakyVoice's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Analytics
We currently do not use any third-party analytics, advertising, or tracking tools. We only process the service usage data described in Section 2.B (such as minutes used and lesson progress) to operate the Service.
If we introduce analytics tools in the future, we will update this Privacy Policy before doing so.
8. AI and Your Data
- No Training by SpeakyVoice: SpeakyVoice does not use your conversations, voice data, or any personal information to train AI models, and does not develop its own machine learning models. The AI tutor is powered by the Google Gemini API; how Google processes content submitted through its API is governed by Google's own terms (see Section 5).
- No Manual Review: We do not manually review or analyze your conversations with AI tutors.
- Context Processing: During an active voice session, the Google Gemini API receives the real-time audio stream and recent conversation turns, along with instructions for your selected scenario, language settings, and an optional preferred name you choose to provide for the tutor to address you. Live voice audio is processed in real time and is never recorded or stored on our servers.
- User-Generated Content: You may input arbitrary text or speech during AI interactions. You are responsible for not sharing sensitive personal information (such as passwords, financial data, or government IDs) during conversations with AI tutors.
9. Children's Privacy
SpeakyVoice is intended for users who are at least 18 years of age (the age of majority to enter into binding digital contracts and payment transactions). Individuals under 18 years of age may only use the Service with the involvement, supervision, and verifiable consent of a parent or legal guardian. We do not knowingly collect personal data directly from children under 13 (or under 16 in jurisdictions where local law requires). If we become aware that an unauthorized minor has registered without parental consent, we will take immediate steps to delete the account and associated profile data.
10. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Delete your account directly from your Profile page. This triggers a 30-day soft-delete period, after which your personal data is permanently removed (except the irreversible anti-abuse hashes described in Section 2.D). You may also request immediate deletion by contacting us.
- Portability: Request to receive your data in a structured, commonly used format.
- Objection: Object to the processing of your personal data under certain circumstances.
- Conversation Deletion: Delete individual conversation sessions or clear your entire local chat history at any time directly within the application's interface.
To exercise any of these rights, please contact us at contact.speakyvoice@gmail.com. We will respond within 30 days.
11. International Data Transfers
SpeakyVoice is operated from Ukraine, but our servers and third-party service providers (including Vercel, MongoDB Atlas, and Google) are located globally, including in the United States and the European Union. Your information may be transferred to, stored, and processed in countries outside of your country of residence, where data protection laws may differ. By using the Service, you consent to these transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via an in-app notice.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
SpeakyVoice
Oleksandr Liasnik, Founder
Email: contact.speakyvoice@gmail.com
Location: Kyiv, Ukraine