SpeakZilla Privacy Policy

Effective date: [DATE]

Last updated: [DATE]

SpeakZilla ("SpeakZilla", "we", "us") is a pronunciation-practice app

operated by [LEGAL ENTITY NAME], [ADDRESS / COUNTRY]. This policy explains

what personal data we collect, why, who we share it with, and the choices

and rights you have.

If you have questions, contact us at [CONTACT EMAIL].

1. Who this policy covers

This policy applies to everyone who creates an account or uses SpeakZilla

on the web or in our mobile apps.

2. Information we collect

a) Account information

• Your email address and a password (passwords are stored only in hashed

form by our authentication provider — we never see or store your plain

password).

• A display name, which by default is derived from your email address.

b) Learning activity and progress

• Your lesson progress, scores, accuracy history, streaks, points, tokens,

daily missions, and which lessons you've completed.

c) Voice recordings and transcripts *(the most important category — see

Section 3)*

• When you practice, we record the audio of you speaking the target

sentence, and we generate a text transcript of what you said.

• We store the resulting pronunciation scores (overall and per word/sound).

d) Information collected automatically

• Basic technical data needed to run and secure the service (for example

IP address, device/browser type, and timestamps), collected by our

hosting and backend providers through standard server logs.

We do not knowingly collect payment information, precise location, or

data from third-party social accounts. [Update if this changes.]

3. Voice data — how it works

Because SpeakZilla scores pronunciation, using it necessarily involves

recording your voice. Specifically:

• Capture: the app records short audio clips of you reading a sentence.
• Processing: each clip is sent to Microsoft Azure AI Speech to

transcribe it and assess pronunciation accuracy. Azure processes the

audio to return scores; see Microsoft's terms for how they handle it.

• Storage: your recordings, transcripts, and scores are stored in our

backend (Supabase) so you can review progress and so features like

spaced repetition can resurface sounds you find difficult.

You control this data — see Your rights (Section 7). If you do not want

your voice recorded, you should not use the practice features, as they

cannot function without it.

4. How we use your information

We use the data above to:

• provide the core service — recognise your speech and score pronunciation;
• track and show your progress, streaks, and achievements;
• personalise practice (e.g. resurfacing sounds you struggle with);
• operate, secure, debug, and improve the app;
• communicate with you about your account (e.g. password resets).

We do not sell your personal data, and we do not use your voice

recordings to build or train speech models. [Confirm this is accurate and

keep it accurate.]

5. Who we share data with (service providers)

We share data with the following processors solely to run SpeakZilla. Each

processes data on our behalf under their own terms and security controls:

Please review each provider's own privacy documentation:

• Supabase: https://supabase.com/privacy
• Microsoft Azure: https://privacy.microsoft.com
• Cloudflare: https://www.cloudflare.com/privacypolicy/

We may also disclose data if required by law, to protect our rights, or as

part of a business transfer (e.g. merger or acquisition), in which case we

will notify you where required.

6. Data retention

We keep your account and progress data for as long as your account is

active. We retain voice recordings for [RETENTION PERIOD — e.g. 90 days]

to power feedback and progress features, after which they are

automatically deleted. When you delete your account, we delete or

anonymise your personal data within [TIMEFRAME — e.g. 30 days], except

where we must retain some data to comply with legal obligations.

Implementation note (remove before publishing): the app does not yet

enforce automatic recording deletion or full account deletion. Build

those before committing to the timeframes above, so the policy is true.

7. Your rights and choices

Depending on where you live (e.g. under GDPR or CCPA/CPRA), you may have

the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• export a copy of your data (portability);
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

To exercise any of these, [use the in-app "Delete my data" option / ]email

us at [CONTACT EMAIL]. We will respond within the timeframe required by

applicable law. You will not be discriminated against for exercising these

rights.

8. Data security

We use industry-standard measures to protect your data, including

encryption in transit, access controls that restrict each user's data to

that user (row-level security), and reputable infrastructure providers. No

method of transmission or storage is 100% secure, so we cannot guarantee

absolute security.

9. International data transfers

Our providers may process and store data in countries other than yours,

including the United States. Where required, we rely on appropriate

safeguards (such as Standard Contractual Clauses) for these transfers.

[Confirm with counsel and specify regions if needed.]

10. Children's privacy

SpeakZilla is not directed to children under **[MINIMUM AGE — e.g. 13 (or

16 in the EU)]**, and we do not knowingly collect personal data from them.

If you believe a child has provided us data, contact us and we will delete

it. [If you *do* intend to serve minors, this section needs significant

additional COPPA/GDPR-K provisions and likely verifiable parental consent.]

11. Changes to this policy

We may update this policy from time to time. If we make material changes,

we will notify you (e.g. by email or an in-app notice) and update the

"Last updated" date above.

12. Contact

Questions or requests about this policy or your data:

[LEGAL ENTITY NAME] — [CONTACT EMAIL] — [ADDRESS].