Privacy Policy

SpeaksyAI (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application SpeaksyAI (“App”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the App immediately.

This policy is compliant with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), India's Digital Personal Data Protection Act (DPDPA 2023), Apple App Store Guidelines, and Google Play Store Developer Program Policies.

We use the information we collect for the following purposes:

For users in the European Economic Area (EEA), we process your data under these legal bases:

• •Contract performance: To provide the App's core language learning services
• •Legitimate interests: For analytics, security, and service improvement
• •Consent: For marketing communications, storing voice recordings for AI training, and optional features
• •Legal obligation: For tax, fraud prevention, and regulatory compliance

We do not sell your personal data. We share data only in these circumstances:

SpeaksyAI's core feature involves real-time voice interaction. Here's exactly how your voice data is handled:

• •Voice audio is streamed to Google Gemini 2.5 Flash in real-time for AI tutoring responses
• •Audio is transmitted as Opus-compressed audio at 16kHz sample rate
• •Session recordings may be stored on Google Cloud Storage for up to 90 days for quality review and learning analytics
• •You can delete your voice recordings at any time from your Profile settings
• •We obtain explicit microphone permission before any recording begins
• •Voice data is never shared with advertising networks or third-party marketers

We retain your data for the following periods:

• •Account data: Until you delete your account + 30 days
• •Voice recordings: Up to 90 days, then permanently deleted
• •Learning progress data: Duration of your account
• •Anonymized analytics: Up to 2 years
• •Financial/billing records: 7 years (legal requirement)
• •Support communications: 2 years

Depending on your location, you may have these rights regarding your personal data:

• •Access: Request a copy of the personal data we hold about you
• •Correction: Request correction of inaccurate or incomplete data
• •Deletion ("Right to be Forgotten"): Request deletion of your personal data
• •Portability: Receive your data in a structured, machine-readable format
• •Objection: Object to processing based on legitimate interests
• •Restriction: Request restriction of processing in certain circumstances
• •Withdraw Consent: Withdraw consent at any time (for consent-based processing)
• •Opt-out of push notifications: Via device settings at any time
• •Automated Decision-Making: Object to or request human review of decisions made solely by automated means, including AI pronunciation scoring
• •Lodge a Complaint: Contact your national Data Protection Authority. UK: Information Commissioner's Office (ico.org.uk). EU: your national supervisory authority. India: the Data Protection Board of India.

To exercise any of these rights, email us at: contact@speaksyai.com or use the “Delete Account” option in your Profile settings.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

SpeaksyAI is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children under these ages. If you believe we have inadvertently collected data from a child, please contact us immediately at contact@speaksyai.com and we will delete it promptly.

We implement industry-standard security measures to protect your data:

• •All data transmitted over HTTPS/TLS encryption
• •JWT tokens stored in encrypted secure storage on your device
• •Passwords hashed with bcrypt
• •RS256 asymmetric JWT signing
• •GCP infrastructure with VPC isolation and IAM access controls
• •Regular security audits and monitoring via OpenTelemetry

While we strive to protect your data, no method of internet transmission or electronic storage is 100% secure. Please use a strong password and enable account security features.

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• •Notify relevant supervisory authorities within 72 hours of becoming aware of the breach (where required by GDPR / UK GDPR)
• •Notify affected users without undue delay when the breach is likely to result in a high risk to your rights
• •Notifications will be sent to your registered email address and via in-app alert
• •Our breach response team can be reached at: security@speaksyai.com

Your data is processed and stored on Google Cloud Platform servers, which may be located outside your country of residence, including in the United States. We ensure appropriate safeguards are in place for international transfers, including Google's Standard Contractual Clauses (SCCs) for EEA users.

The SpeaksyAI mobile app uses the following local storage mechanisms:

• •Shared Preferences: App settings, language preferences, theme
• •Hive (local database): On-device translation cache for offline use
• •Flutter Secure Storage: JWT tokens and authentication credentials (encrypted)
• •No third-party advertising cookies are used in the mobile app

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notification or email at least 30 days before changes take effect. Your continued use of the App after changes constitute acceptance of the updated policy. The “Last Updated” date at the top reflects the most recent revision.

For privacy-related inquiries or to exercise your rights:

• •Email & Support: contact@speaksyai.com
• •Address: Nigdi, Pune, Maharashtra, India - 411044
• •Data Protection Officer: contact@speaksyai.com