Privacy Policy
Last updated: May 27, 2026
1. Information We Collect
We collect information you provide directly: name, email address, and account preferences. During practice sessions, we process audio recordings to provide pronunciation feedback. Audio is analyzed in real-time and not stored permanently.
2. How We Use Your Information
Your information is used to: provide the Service, track your learning progress, improve AI feedback accuracy, and communicate important updates. We do not sell your personal data.
3. Data Storage and Security
Your data is stored securely using Supabase (PostgreSQL with Row Level Security). We use encryption in transit (TLS) and at rest. Access to production databases is restricted to authorized personnel.
4. AI Teacher Memory
When you consent at first login, our AI teachers (Sarah, James, Emily, Liam) remember conversational facts about you across sessions to make practice feel continuous. This memory is per teacher, not shared between them.
We store: facts you disclose (job, hobbies, learning goals), patterns we observe (recurring mistakes, filler words, preferred topics), a short summary of your most recent session, open conversational threads to follow up, and one optional "memorable moment" per session (embedded for retrieval).
Legal basis: explicit consent (GDPR Art. 6(1)(a), Vietnam Nghị định 13/2023 Điều 11) captured via the blocking dialog on first app entry; contract necessity (GDPR Art. 6(1)(b)) as secondary basis since memory is integral to the AI tutoring service.
We keep memory data until you delete it or after two years of account inactivity, whichever comes first. You can review every memory entry, edit it, or delete it any time at Settings → Memory. You can also turn memory off entirely — past memories stay until you clear them, but no new memory is captured.
We use two AI providers as data processors solely for memory extraction: Groq (primary, Llama-3) and OpenAI (fallback, gpt-4.1-mini). Both run our prompt only — neither retains your data for training. OpenAI is also used for the embedding model that powers memorable-moment retrieval.
Memory data is included in your full account export upon request, and is permanently deleted when you delete your account (cascade on profile deletion).
5. Third-Party Services
We use the following third-party services to operate SpeakShark:
- Supabase — authentication and database
- OpenAI — speech-to-text, AI conversation, embeddings
- Groq — fast LLM inference for memory extraction
- Microsoft Edge TTS — text-to-speech for AI teachers
- Polar / SePay — payment processing
6. Your Rights
You can request to access, update, or delete your personal data at any time by contacting us. You can delete your account from the Profile settings page. Under GDPR (EU/UK), CCPA (California), Nghị định 13/2023 (Vietnam), DPDP Act 2023 (India), and LGPD (Brazil), you have rights to access, rectification, erasure, portability, restriction of processing, and to withdraw consent.
7. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
8. Age Requirement
SpeakShark is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the service or provide any personal information.
9. Contact
Privacy questions? Contact us at speaksharksupport@gmail.com