Who we are

SpeakUp ([registered address]) is the data controller for the personal data described here — that means we decide what is collected and why, and we are the ones you hold responsible for it. For anything on this page, including a request to see or delete your data, write to [email protected].

What we store, and why

Each of these exists because a specific feature needs it. Nothing is collected “just in case”.

• Your account — email address and authentication details. If you sign in with Google, Google tells us your email address, name and profile picture; we never receive your Google password and we do not read anything else from your Google account.
• Your conversations — the text of what you and the AI partner said, and the grammar errors identified in it. This is the raw material the whole product is built on: without the transcript there is no diagnosis.
• Your learner profile — the named mistake patterns, their status over time, and short examples taken from your own sentences.
• Your practice results — which exercises you attempted, whether each was right, and when.
• Speech measurements — pace, pitch range, pauses, filler counts, word-stress verdicts, and the transcript of a recording. Not the recording itself (see below).
• Preferences — native language, daily goal, schedule, theme, and whether you opted into practice reminders.
• Billing status — your plan, whether it is active, and the identifiers Lemon Squeezy uses for your subscription. Not your card.
• AI usage — for each request: the model, the token counts, the estimated cost, and which key paid. We keep this to run spending limits and to know what the service costs. It records that a request happened, not its content.

What never leaves your device

Speech Studio video and audio. The speech-recognition and analysis models are downloaded into your browser and run there, on your own machine. Your recordings are never uploaded to us or to anyone else. Only one recording — the most recent — is kept, in your browser's local storage, so you can replay it beside its report; each new take replaces it, and you can delete it yourself from the player at any time.

The same is true of word-stress practice and the voice-modulation tool: the acoustic scoring happens in your browser and only the verdict is stored.

Practically, this also means: clearing your browser data deletes those recordings for good, and they never existed anywhere we could hand them over.

What we keep in your browser

These stay on your device and are not readable by us:

• IndexedDB (speakup-media) — your most recent recording.
• Local storage — your theme, sound on or off, your voice calibration, which speech signals you asked us to monitor, and whether the speech models have been set up.
• Cache storage — the speech models themselves, which are large. They are downloaded once and reused so you are not re-downloading hundreds of megabytes every session.

Cookies

Functional only. There is no advertising network, no analytics product, and no cross-site tracking anywhere in this application.

• Session cookies (sb-…) — keep you signed in. Set by our authentication provider.
• Membership cache (su-ent) — a signed cookie, valid for five minutes, that remembers your membership was checked so every page load does not re-query the database. It contains an expiry and a signature. It carries no personal data.

Because these are strictly necessary to deliver a service you asked for, they do not require a consent banner — which is why you have not been shown one.

Who else processes your data

• Supabase — database, authentication and hosting of your account data.
• Anthropic — receives conversation text, speech transcripts, your learner profile and your written answers, in order to reply, analyse and generate exercises. Under Anthropic's commercial API terms, this data is not used to train their models; they may retain it briefly for abuse monitoring.
• Google Cloud Text-to-Speech — only if spoken replies are enabled. The reply text is sent so it can be synthesised into audio. Your voice is never sent.
• Google Sign-In — only if you choose it, and only to authenticate you.
• Lemon Squeezy — our merchant of record. They run the checkout, hold the payment details and handle tax. We never see or store your card number.
• Vercel — hosting and content delivery. Handles the network request itself, including your IP address.

These providers operate in the United States and elsewhere, so using the service involves transferring your data outside the EEA and the UK. Those transfers rely on the providers' Standard Contractual Clauses.

Google user data

If you choose “Continue with Google”, we request only the basic sign-in scopes: your email address, your name and your profile picture. We ask for nothing else — no access to Gmail, Drive, Contacts, Calendar or any other Google service, and we cannot read them.

What we do with it:

• Use — your email address identifies your account and is how we contact you about it. Your name and picture are used only to show you who is signed in.
• Store — held in our authentication database (Supabase) for as long as your account exists.
• Share — we do not share, sell or transfer Google user data to anyone. It is not sent to Anthropic, it is not used in any AI request, and it is not used for advertising.
• Delete — ask us and it goes with the rest of your account. You can also disconnect SpeakUp at any time from your Google account permissions.

SpeakUp's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used to train AI models — ours or anyone else's.

If you use your own Claude API key

Lifetime members supply their own Anthropic API key. Two consequences worth understanding:

• Your key is encrypted before it is stored, using authenticated encryption tied to your account, and it is never shown again after you save it — only the last four characters, so you can recognise it. It is never sent to a browser, including yours.
• Your AI requests then run against your Anthropic account, so the content of those requests is visible to you in Anthropic's console and governed by your own agreement with Anthropic as well as by this policy.

Accounts given to you by someone else

Some accounts are handed out free, with a spending limit. If yours is one of them, the person who gave it to you can see your email address, how much AI spend the account has used, and any note they wrote about you. They cannot read your conversations, your transcripts or your learner profile — the console shows totals, not content.

Notifications

If you opt in to practice reminders we store the push subscription your browser generates. That is a device token, not a phone number or an email address. Revoke it any time in your browser or device settings, and we will stop.

Legal basis (EU/EEA and UK users)

• Performance of a contract — running your account, producing your roadmap, analysing your practice, taking payment. This is the basis for nearly everything here.
• Consent — practice reminders, and using your camera or microphone. Both are opt-in, and withdrawing consent is as easy as giving it.
• Legitimate interests — keeping the service secure, enforcing rate and spending limits, and preventing abuse.

How long we keep it

Your account data is kept for as long as your account exists, because the product's value is the history: a mistake pattern is only meaningful measured over months.

• Ask us to delete your account — email [email protected] — and your conversations, transcripts, learner profile, practice history, speech measurements, preferences and stored API key go with it, within 30 days. There is no self-service delete button yet; a human does it, which is why it takes days rather than seconds.
• Billing records are kept as long as tax law requires, and mostly live with Lemon Squeezy rather than with us.
• Shared exercises generated during your use stay in the common exercise bank. They are written to be generic — they never contain your name, your details or your sentences — so they are not personal data once you are gone.

Security

• Every request travels over HTTPS, and the database enforces row-level security so one account's rows are unreachable from another.
• Stored API keys are encrypted with AES-256-GCM under a key that is kept separately from the database credentials, and bound to your account so a copied record decrypts nowhere else.
• We do not store passwords ourselves; authentication is handled by Supabase.

No system is perfectly secure. If we ever discover a breach affecting your data, we will tell you and the relevant authority without undue delay.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to it — and you can ask without giving a reason. Write to [email protected] and we will answer within one month. If you are in the EEA or the UK and you think we have got it wrong, you can complain to your national data protection authority.

Children

SpeakUp is not intended for children under 16. We do not knowingly collect their data; if you believe a child has created an account, tell us and we will remove it.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect — not quietly bump the date at the top.

Contact

[email protected] — for privacy requests, questions, or anything on this page. See also our terms.