Privacy Policy
Last updated: May 27, 2026
1. Information We Collect
We collect information you provide directly: name, email address, and account preferences. During practice sessions, we process audio recordings to provide pronunciation feedback. Audio is analyzed in real-time and not stored permanently.
2. How We Use Your Information
Your information is used to: provide the Service, track your learning progress, improve AI feedback accuracy, and communicate important updates. We do not sell your personal data.
3. Data Storage and Security
Your data is stored securely using Supabase (PostgreSQL with Row Level Security). We use encryption in transit (TLS) and at rest. Access to production databases is restricted to authorized personnel.
4. AI Teacher Memory
When you consent at first login, our AI teachers (Sarah, James, Emily, Liam) remember conversational facts about you across sessions to make practice feel continuous. This memory is per teacher, not shared between them.
We store: facts you disclose (job, hobbies, learning goals), patterns we observe (recurring mistakes, filler words, preferred topics), a short summary of your most recent session, open conversational threads to follow up, and one optional "memorable moment" per session (embedded for retrieval).
Legal basis: explicit consent (GDPR Art. 6(1)(a), Vietnam Nghị định 13/2023 Điều 11) captured via the blocking dialog on first app entry; contract necessity (GDPR Art. 6(1)(b)) as secondary basis since memory is integral to the AI tutoring service.
We keep memory data until you delete it or after two years of account inactivity, whichever comes first. You can review every memory entry, edit it, or delete it any time at Settings → Memory. You can also turn memory off entirely — past memories stay until you clear them, but no new memory is captured.
Memory extraction runs through the third-party AI providers listed under Third-Party Services below. They run our prompt only, and neither retains your data nor trains on it.
Memory data is included in your full account export upon request, and is permanently deleted when you delete your account (cascade on profile deletion).
5. Third-Party Services
We use the following third-party services to operate SpeakShark:
- Supabase — authentication and database
- OpenAI — speech and language processing
- Groq — speech and language processing
- Microsoft Edge TTS — text-to-speech for AI teachers
- Polar — payment processing
6. Your Rights
You can request to access, update, or delete your personal data at any time by contacting us. You can delete your account from the Profile settings page. Under GDPR (EU/UK), CCPA (California), Nghị định 13/2023 (Vietnam), DPDP Act 2023 (India), and LGPD (Brazil), you have rights to access, rectification, erasure, portability, restriction of processing, and to withdraw consent.
7. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
8. Age Requirement
SpeakShark is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the service or provide any personal information.
9. Contact
Privacy questions? Contact us at speaksharksupport@gmail.com