What the app collects, what we do with it.

Last updated: 24 May 2026 · This policy applies to the SpeakM mobile application. For the marketing website (speakm.com), see our site privacy notice.

Who we are

The SpeakM mobile app is operated by SpeakM Ltd, a company registered in England and Wales at 71–75 Shelton Street, London, WC2H 9JQ. For any privacy question or to exercise the rights described below, write to support+legal@speakm.com.

What we collect, and why

Account information

When you sign in we receive your email address and (where Apple or Google Sign-In provides it) your display name. We assign you a stable account identifier. We need these to create and authenticate your account and to send you essential service messages.

Voice during pronunciation exercises

When you complete a pronunciation exercise, your microphone audio is transmitted in real time to Microsoft Azure Speech for assessment. The recording is processed and then discarded — we do not retain pronunciation audio unless you explicitly choose to share a clip with us when reporting a problem. Voice recordings are used solely to give you feedback on what you said and how you said it.

Voice clips you choose to share

If, on a specific pronunciation result, you tick “share this recording with us” to help us improve, we store that one short clip in our object storage (Cloudflare R2). We use it to debug scoring accuracy and improve our pronunciation models. This is always opt-in per clip; nothing is shared in the background.

Learning progress

We record which lessons and exercises you complete, the scores you receive, and the language pair you are learning. This lets you pick up where you left off across devices and lets us tailor what to show you next.

Device information

We collect a device ID that's specific to our app (it can't be used by other apps or by advertisers to track you across apps), the device model, OS version, app version, and language. We use device information to detect bugs in specific environments and to support you when you report problems.

Purchase information

If you subscribe to a paid plan, the App Store or Google Play handles the payment — we never see your card details. We do receive, from RevenueCat acting as our subscription-management partner, whether you have an active subscription, the product identifier, and the expiry timestamp. We use this to grant or revoke access to paid features.

Crash and performance data

When the app crashes or hits a serious bug, we send a crash report to Firebase Crashlytics. The report contains a stack trace, your device model, OS version, app version, and a breadcrumb of the screens you visited in the minute before the crash. We use crash data to fix bugs.

Product analytics

We send event data — things like “exercise completed”, “subscription started”, “tab opened” — to Statsig so we can understand which features people use and which need work. Each event is associated with your account identifier. We do not use this data for advertising and we do not enable Statsig's third-party integrations.

Who processes your data

The following companies process your data on our instructions to deliver the service. Each has a data-processing agreement with SpeakM Ltd and is contractually limited to the purposes listed.

• Microsoft Azure Speech — assesses your voice during pronunciation exercises and returns the score. Processing region: EU. Audio is transient and discarded after assessment.
• Cloudflare — content delivery network and object storage (R2). R2 holds voice clips you have explicitly chosen to share, along with static media. Processing region: global edge.
• MongoDB Atlas — database hosting for your account, learning progress, and subscription state. Processing region: EU.
• Google Firebase Authentication — authenticates sign-ins with Apple, Google, and email. Receives only the data needed for authentication.
• Google Firebase Crashlytics — receives crash reports tagged with your account identifier. After account deletion, those reports age out within 90 days per Crashlytics' default retention.
• RevenueCat — receives purchase events from the App Store and Google Play and provides us with your current subscription state.

The following companies also receive data from us. They process it for purposes beyond simple delivery (analytics, message routing), so we list them separately for transparency.

• Statsig — receives the product-analytics events described above, associated with your account identifier and email address. After account deletion, those events age out per Statsig's retention policy.
• Discord — receives a one-time notification to our internal team channel when a new account is created (email and display name). This is a chat message, not a profile; after account deletion it remains in our message history.
• Apple and Google — receive subscription purchase information directly when you buy in their stores. Their respective privacy policies apply to those flows.

How long we keep your data

While your account is active, we keep your account information, learning progress, and any clips you chose to share for as long as the account exists. Pronunciation audio that is not explicitly shared is never retained.

When you delete your account from within the app, your personal data is removed immediately. If you delete by email, removal is completed within 30 days. In both cases, we keep a minimal record of your account's existence (account identifier, last-known subscription state, deletion date) for seven years from deletion — six years to cover the UK contract limitation period (Limitation Act 1980) and HMRC's business-records requirements, plus a one-year safety margin. This record exists solely for those purposes and is never used for anything else. After seven years it is permanently purged by an automated database process.

Your rights

Under the UK GDPR, the EU GDPR, and similar regimes (including the California Consumer Privacy Act for California residents) you have the right to:

• Access — ask what personal data we hold about you and receive a copy.
• Correct — ask us to fix anything that is wrong.
• Delete — ask us to delete your account and your data (subject to the seven-year financial-record retention described above).
• Portability — receive your data in a common, machine-readable format that you can take elsewhere.
• Object — object to specific processing (for example, analytics).
• Restrict — ask us to pause processing while a complaint is investigated.
• Withdraw consent — for any processing that relies on your consent, withdraw it at any time.
• Lodge a complaint — with the Information Commissioner's Office (UK) or your local supervisory authority.

To exercise any of these rights, email support+legal@speakm.com. We respond within 30 days. You will not be charged for a reasonable request, and we will not treat you differently for asking.

How to delete your account

From within the app: open Settings → Account → Delete account, and confirm. Your data is removed immediately. If you cannot access the app, see our account-deletion page for the email path; deletions requested by email are completed within 30 days.

Children

SpeakM is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, write to support+legal@speakm.com and we will delete it.

Changes to this policy

We may update this policy as the app or the law changes. The version displayed here, with the date at the top, is always the current one.

Contact

Privacy questions, rights requests, complaints: support+legal@speakm.com. Postal: SpeakM Ltd, 71–75 Shelton Street, London, WC2H 9JQ, England.