1. Introduction
SpeakFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SpeakFlow mobile application and website (collectively, the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Username (chosen by you)
- Password (stored securely as a bcrypt hash via Supabase Auth)
2.2 Audio Data
SpeakFlow requires access to your device's microphone to provide pronunciation coaching. When you complete a speaking session:
- Your voice recording is transmitted securely to our backend servers for real-time processing by NVIDIA Riva (speech recognition and pronunciation scoring).
- Audio recordings are processed transiently and are not permanently stored on our servers. Only the resulting text transcript and pronunciation scores are retained.
- Audio is transmitted only when you initiate a speaking session by pressing the microphone button.
2.3 Usage and Performance Data
We collect data about how you use the Service:
- Lessons completed, scores, and session history
- Streak and Fluency Points (FP) gamification data
- League standings and rankings
- App navigation patterns (via analytics)
2.4 Device and Technical Information
- Device type, operating system, and app version
- IP address and general location (country/region)
- Crash reports and performance data
- Push notification token (if you grant permission)
2.5 Payment Information
We do not store your payment card information. All payments are processed by Stripe (web) and RevenueCat / Apple App Store / Google Play (mobile), which are PCI-DSS compliant. We only receive confirmation of payment success or failure and your subscription status.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the SpeakFlow Service
- Process your voice recordings to deliver pronunciation feedback
- Personalize your learning experience and track progress
- Manage your subscription and process payments
- Send you practice reminders and streak notifications (if you opt in)
- Communicate service updates, new features, and support responses
- Ensure security and prevent fraud or abuse
- Comply with legal obligations
4. NVIDIA AI Processing
SpeakFlow uses NVIDIA Riva for automatic speech recognition (ASR) and pronunciation scoring, and NVIDIA NIM (Meta Llama 3.1 70B) for AI conversation coaching. Your voice data and transcripts are processed through NVIDIA's cloud APIs in accordance with NVIDIA's privacy practices.
NVIDIA processes your data as a service provider on our behalf. Audio is transmitted over encrypted connections (TLS) and is not used to train NVIDIA's models.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service Providers: We share data with trusted third-party vendors who help operate our Service (Supabase for database/auth, NVIDIA for AI processing, Stripe/RevenueCat for payments, Vercel/Render for hosting).
- Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process.
- Business Transfers: In the event of a merger or acquisition, your data may be transferred as a business asset.
- Aggregated Data: We may share anonymized, aggregated statistics that cannot identify individuals.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Session transcripts and scores are retained for up to 12 months to support your progress tracking.
You may request deletion of your account and associated data at any time by contacting us at privacy@speakmeteor.win. We will process deletion requests within 30 days.
7. Data Security
We implement industry-standard security measures to protect your information:
- All data in transit is encrypted using TLS 1.2 or higher
- Database data is encrypted at rest via Supabase (AES-256)
- Authentication is managed via Supabase Auth with JWT tokens
- We never store raw audio recordings
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take reasonable steps to protect your data.
8. Children's Privacy
SpeakFlow is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
To exercise these rights, contact us at privacy@speakmeteor.win.
10. Push Notifications
With your permission, we send push notifications to remind you to practice and maintain your streak. You can disable push notifications at any time in your device settings or within the SpeakFlow app.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: