1. Introduction
SpeakSmart AI ("we," "us," "our") provides an AI-powered communication coaching app that helps you practice interviews, negotiations, presentations, and other high-stakes conversations. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. By using SpeakSmart AI, you agree to the practices described here.
2. Information We Collect
Account information
- Email address, full name, and a securely hashed password (we never store your plaintext password) — for accounts created with email/password.
- Your Google account identifier and email — if you sign in with Google instead.
- A device push-notification token — only if you enable practice reminders.
Profile information (optional)
- Your CV/resume — we extract and store roughly the first 2,000 characters of text from the PDF you upload, used to personalize interview questions. You can remove it at any time from Settings without affecting your account.
- Job description text you paste or import, used the same way.
Practice content
- Your spoken or typed answers during a practice session, and the resulting transcript.
- AI-generated feedback on each answer: scores, structure/field-knowledge ratings, detected filler words and hedging phrases, and suggested improvements.
- Session summaries and reports (overall score, strongest/weakest answers, recommended focus areas) and your progress history over time.
Audio recordings
- If you grant microphone access, your spoken answers are recorded so they can be transcribed and, if you choose, played back to you inside the app. Audio files are automatically deleted within 24 hours — see Data Retention.
Subscription & payment information
- Your selected plan (Trial, Plus, or Pro), billing period (weekly or monthly), and session-usage counters.
- A Google Play purchase token (if you subscribe via the Play Store) or a LemonSqueezy customer/order reference (if you subscribe via the web). We never see or store your card number — Google Play and LemonSqueezy handle payment details directly.
Technical & usage data
- IP address and user-agent string, logged on login/registration for account security and abuse prevention.
- Crash reports and performance diagnostics, collected automatically via Sentry.
- App version, device type, and general usage events (e.g., which mode you practiced) for product analytics.
3. App Permissions
| Permission | Why we ask |
|---|---|
| Microphone | To record your spoken answers for transcription, AI feedback, and optional playback. You can decline and type answers instead. |
| Notifications | To send optional daily practice reminders. Entirely opt-in — disable any time in Settings or your device settings. |
SpeakSmart AI does not request camera, location, contacts, or storage-wide permissions.
4. How We Use Your Data
- To run the core practice experience: generate relevant questions, transcribe your answers, score them, and produce reports.
- To personalize sessions to your CV, target role, and chosen difficulty.
- To enforce plan limits (sessions per week/month, session length) tied to your subscription.
- To detect and prevent fraud, abuse, and security incidents (e.g., rate-limiting, audit logs of login/registration events).
- To diagnose crashes and improve app stability and performance.
- To communicate with you about your account, your subscription, or — only if you opt in — practice reminders.
We do not use your practice content to show you ads, and we do not sell your personal information.
5. AI Processing & Third-Party Subprocessors
To deliver feedback in real time, SpeakSmart AI sends limited data to the following service providers, strictly to operate the features described. As of the time of writing, each of these providers' API/business terms state that data submitted via their API is not used to train their general models — this differs from some providers' free consumer-facing products, and may change, so we encourage you to also review each provider's own policy.
| Provider | Purpose | What's sent |
|---|---|---|
| Anthropic (Claude API) | Generates interview questions/follow-ups and scores your answers | Your current answer text, a short window of recent conversation turns (your earlier answers are replaced with a placeholder before being reused as context), and optional CV/job-description text |
| OpenAI (Whisper API) | Speech-to-text transcription | Your recorded answer audio, sent transiently — not stored by OpenAI beyond what's needed to return a transcript |
| OpenAI / ElevenLabs (text-to-speech) | Voices the AI interviewer's questions out loud | The question text to be spoken |
| OpenAI (Moderation API) | Screens submitted text for disallowed content (e.g., hate, harassment, self-harm) before processing | Your answer, CV, or job-description text |
| Cloudflare (R2 storage) | Temporary storage of audio files for playback/transcription | Your recorded audio, auto-deleted within 24 hours |
| Sentry | Crash and performance monitoring | Device/app diagnostic data and error context |
| Google (Sign-In & Play Billing) | Authentication and subscription purchases | Your Google account ID/email; purchase tokens for entitlement verification |
| LemonSqueezy | Web-based subscription checkout and billing portal | Your email and payment details (handled entirely by LemonSqueezy, not us) |
6. Data Retention
- Audio recordings — automatically deleted within 24 hours of upload, regardless of subscription status.
- Conversation working memory — recent-turn context used to keep the AI coherent during a session is held in temporary, in-memory storage and is not part of your permanent record.
- Transcripts, scores, reports, and progress history — retained for as long as your account is active, so you can track improvement over time. Deleted when you delete your account (see Delete My Data).
- Audit logs (login/registration, IP/user-agent) — retained for a limited security-relevant period, then purged or anonymized.
- Billing records — retained as required for tax, accounting, and fraud-prevention obligations, even after account deletion, to the extent the law requires.
7. Sharing & Disclosure
We share data only with:
- The subprocessors listed in Section 5, strictly to operate the app's features.
- Google Play and LemonSqueezy, to process subscription payments.
- Law enforcement or regulators, only when required by valid legal process.
- A successor entity, if SpeakSmart AI is involved in a merger, acquisition, or asset sale — your data would remain subject to a policy at least as protective as this one.
We do not sell your personal information, and we never share your practice answers or audio with other users.
8. Your Rights & Choices
- Access & correction — view and edit your profile information from within the app (Settings).
- Deletion — delete your CV independently at any time, or permanently delete your entire account and all associated data via Settings → Delete Account, or through our web-based deletion request if you no longer have app access. See that page for full details.
- Notifications — opt in or out of push reminders at any time.
- Subscription management & cancellation — manage or cancel via the Google Play Store or the LemonSqueezy billing portal, accessible from Settings.
- Regional rights — depending on where you live (e.g., under GDPR in the EEA/UK, or CCPA/CPRA in California), you may have additional rights to access, port, restrict, or object to processing of your data. Contact us using the details below to exercise these rights.
9. Children's Privacy
SpeakSmart AI is not directed at children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Security
We use industry-standard measures to protect your data, including encrypted password hashing, encrypted connections (TLS/HTTPS) between the app and our servers, and access controls on our infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. International Data Transfers
Our servers and service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where required, we will provide additional notice (such as an in-app message).
13. Contact Us
Questions about this policy or your data? Email us at privacy@speaksmartai.app.