Privacy Policy — Speakate
Last updated: 3 August 2026
Speakate is a voice practice app. This policy explains what it stores, where it goes, and how to get rid of it.
Who runs the app
Rafael Hernandez Vantuyl ("we") operates Speakate. Questions or requests about your data: rhernandezvantuyl@gmail.com.
What we collect
Only two things, and only because the app cannot work without them.
Your account. An email address and a password. The password is never stored as text — it is hashed by our authentication provider and we cannot read it. We use the email to identify your account and nothing else. We do not send marketing email.
Your practice log. When you finish a drill, we record which drill it was, when you did it, which day it counted toward, which level it belonged to, and the points it earned. Your badges and your settings (levels-per-day goal, reminder preferences) are stored the same way.
Everything else the app shows you — your streak, your level, your statistics, your position on the path — is calculated from that log on your device. We do not store those figures.
What we do not collect
- No audio, ever. The app has no microphone permission and makes no recordings. Drills are self-assessed; nothing about your voice is captured, transmitted, or analysed.
- No analytics or tracking. There is no analytics SDK, no advertising identifier, no third-party tracker, and no cross-app or cross-site tracking.
- No location, contacts, photos, or health data.
- No profiling and no automated decision-making.
Reminders
If you turn on voice nudges, the reminders are scheduled by your phone's own operating system and displayed by it. Their content is chosen on your device from a list built into the app. No reminder is sent from a server, and we are not told whether one was shown or opened.
Where your data is stored
On your device, and on our hosting provider Supabase (a database and authentication service), in Canada (Montreal). Supabase processes this data on our instructions as our service provider; they do not use it for their own purposes. Their privacy terms: https://supabase.com/privacy
Data on your phone is held in the app's private storage. Your login session is encrypted, with the encryption key kept in the device keychain (iOS Keychain / Android Keystore).
Traffic between the app and the server is encrypted with TLS. Our database enforces row-level security, meaning each account can only ever read or write its own rows.
Who we share it with
Nobody. We do not sell, rent, or trade your data, and we share it with no third party other than the hosting provider named above. We would disclose data if legally compelled to, and would tell you unless prohibited from doing so.
How long we keep it
Until you delete it. There is no separate retention period: your account and practice log persist while the account exists.
Deleting your data
In the app: Settings → Privacy → Delete account. This permanently erases your account, practice log, badges and settings from our servers and from the device. It takes effect immediately and cannot be undone.
Clearing one device only: Settings → This device → Clear local copy removes the local cache. It does not delete your account, and your data downloads again on the next sync.
If you cannot access the app, email rhernandezvantuyl@gmail.com from your account's email address and we will delete it for you within 30 days.
Your rights
Depending on where you live — including under the GDPR (Europe/UK) and the CCPA/CPRA (California) — you may have the right to access your data, correct it, delete it, obtain a copy in a portable format, or object to how it is processed. We honour these requests regardless of where you live. Email rhernandezvantuyl@gmail.com and we will respond within 30 days.
Because we sell no data and run no advertising, there is nothing to opt out of for the purposes of the CCPA's "sale" or "sharing" provisions.
Our legal basis for processing under the GDPR is the performance of our contract with you: we hold your email to give you an account, and your practice log to give you the app's core function.
Children
Speakate is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
Changes
If we change this policy we will update the date at the top and, for anything that materially affects you, notify you in the app before it takes effect.