Privacy Policy, Speakate

Last updated: 9 October 2026

Speakate is a voice practice app. This policy explains what it stores, where it goes, and how to get rid of it.

Who runs the app

Rafael Hernandez Vantuyl ("we") operates Speakate. Questions or requests about your data: rhernandezvantuyl@gmail.com.

What we collect

Your account. If you sign up with email, we store your email address and a password. The password is never stored as text: it is hashed by our authentication provider and we cannot read it. If you sign in with Apple, Apple gives us your email address (or a private relay address, if you choose to hide yours); we do not ask Apple for your name. If you sign in with Google, Google gives us your name and email address. We use these to identify your account and nothing else. We do not send marketing email.

Your practice log. When you finish a drill, we record which drill it was, when you did it, which day it counted toward, which module it belonged to, and the points it earned. Some drills also record a result, such as the longest breath you held or your speaking pace. Your badges are stored the same way.

Scored takes. Some drills score a recording against a target, for example the Paced Read, which checks your pace, whether you paused at the end of each sentence, and whether your volume held to the last word. For each scored take we store those measurements, whether each one hit its target, and which tip you were shown. These are numbers and labels, not audio.

Your settings and answers. Your daily goal, your reminder preferences, and what you told us about your voice: the problems you picked (for example mumbling, vocal fry, or getting stuck on words) and any voice training goal (for example feminizing or masculinizing your voice). These answers decide which modules you are given and in what order. That is the only use they have. Some of them can be sensitive, and you can change or clear them in Settings at any time.

Your voice test result. When you take the voice test, we store the voice range you chose to be compared with, your answers to its questions, and measurements taken from your recording: for example your typical pitch, how much your pitch and loudness vary, your speaking pace, how often you used filler words, and measures of the clarity and resonance of your voice. We also store the voice type it gave you. We use this to show you your result and to choose and order your modules. We do not store the recording.

How you use the app. We record a few simple events with your account: when you open the app, which onboarding screen you reach, which drills you start, when you start and finish the voice test, and when you use Sound mode. We look at these as totals across everyone (for example how many people finish onboarding, or come back a week later) to understand how the app is used and improve it. They are kept on our own database and never sent to an analytics company or any other third party.

Your points are worked out on our server from the drills you complete, so they match on every device. Everything else the app shows you, such as your streak, your level, your statistics, and your position in the course, is calculated from the above on your device. We do not store those figures.

How your voice is handled

Speakate works with your voice, because hearing and measuring how you speak is most of how the practice works. Here is exactly what happens to it.

When the microphone is on. Only during a drill or a voice test that you start: while you are recording a take, or while a drill that shows your pitch or volume live is running. The app asks for microphone permission the first time it needs it, and it never listens in the background or while the app is closed. Sound mode plays guided audio in the background; it does not record.

Recordings kept on your phone. Takes you record in drills, so you can play them back, and the "before" takes you record at the start of the course, so you can compare them with later ones, are stored in the app's private storage on your phone. They are not uploaded to us. Deleting the app deletes them.

Live feedback stays on your phone. When a drill shows your pitch or volume as you speak, that sound is analysed on your phone as it happens. It is never saved or sent anywhere.

Your voice test recording is measured on your phone and deleted as soon as it has been measured, apart from the transcription described next.

Transcription, which does leave your phone. A few features need to know the words you said: the Speech Pace Check and Paced Read (to count your words per minute), the Filler Count (to count words like "um" and "like"), and the voice test (for your pace and filler rate). For these, the recording is sent over an encrypted connection to our server, which passes it to Deepgram, a speech-to-text service, and gets the words back. Neither we nor Deepgram keep the recording or the transcript: we keep only the numbers worked out from it, such as your pace and your filler count. Our requests are opted out of Deepgram's model improvement program, so your audio is not used to train their models, and Deepgram keeps the data only as long as it needs to process the request. These features only work when you are online and signed in.

The live reading highlight in some reading drills follows along as you read using speech recognition built into your phone. If your phone cannot do that without going online, the highlight does not run. It never falls back to an online service.

What we do not collect

• No recordings on our servers. We never store your audio or a transcript of it. Recordings sent for transcription are processed and discarded.
• No third-party analytics or tracking. The usage events above stay on our own database. There is no analytics SDK, no advertising identifier, no third-party tracker, and no cross-app or cross-site tracking.
• No location, contacts, photos, or health records.
• No selling and no advertising.

Reminders

If you turn on voice nudges, the reminders are scheduled by your phone's own operating system and displayed by it. Their content is chosen on your device from a list built into the app. No reminder is sent from a server, and we are not told whether one was shown or opened.

Where your data is stored and who processes it

On your device, and on our hosting provider Supabase (a database and authentication service), in the United States (US East, Northern Virginia). Supabase processes this data on our instructions as our service provider; they do not use it for their own purposes. Their privacy terms: https://supabase.com/privacy

If you are in Europe or the UK, this means your data is transferred to the United States. We rely on the standard contractual clauses in Supabase's data processing agreement to cover that transfer.

Deepgram. Transcribes the recordings described above. It receives the audio of those recordings only, processes it on our instructions, and keeps it only as long as needed to return the words. Their privacy policy: https://deepgram.com/privacy

Cloudflare. Sign-in and sign-up are protected by Cloudflare Turnstile, an anti-bot check. Cloudflare receives your IP address and basic browser signals to confirm you are not a bot. It does not track you across sites and the data is not used for advertising. Their privacy policy: https://www.cloudflare.com/privacypolicy/

Resend. The confirmation code and password reset emails are delivered by Resend, an email service. Resend receives your email address and the contents of that message so it can send it, and uses your address for nothing else. Their privacy policy: https://resend.com/legal/privacy-policy

Apple and Google. If you choose to sign in with Apple or Google, they confirm who you are and share the details listed under "Your account".

Data on your phone is held in the app's private storage. Your login session is encrypted, with the encryption key kept in the device keychain (iOS Keychain / Android Keystore).

Traffic between the app and the server is encrypted with TLS. Our database enforces row-level security, meaning each account can only ever read or write its own rows.

Who we share it with

Nobody. We do not sell, rent, or trade your data, and we share it with no third party other than the service providers named above. We would disclose data if legally compelled to, and would tell you unless prohibited from doing so.

How long we keep it

Until you delete it. There is no separate retention period: your account, practice log, scored takes, usage events, settings and voice test result persist while the account exists. Each new voice test replaces the previous result. Audio sent for transcription is not kept at all.

Deleting your data

In the app: Settings → Privacy → Delete account. This permanently erases your account, practice log, scored takes, usage events, voice test result, badges and settings from our servers and from the device. It takes effect immediately and cannot be undone.

Clearing one device only: Settings → This device → Clear local copy removes the local cache. It does not delete your account, and your data downloads again on the next sync.

If you cannot access the app, email rhernandezvantuyl@gmail.com from your account's email address and we will delete it for you within 30 days.

Your rights

Depending on where you live, including under the GDPR (Europe/UK) and the CCPA/CPRA (California), you may have the right to access your data, correct it, delete it, obtain a copy in a portable format, or object to how it is processed. We honour these requests regardless of where you live. Email rhernandezvantuyl@gmail.com and we will respond within 30 days.

Because we sell no data and run no advertising, there is nothing to opt out of for the purposes of the CCPA's "sale" or "sharing" provisions.

Our legal basis for processing under the GDPR is the performance of our contract with you: we hold your email to give you an account, and your practice log, scored takes, answers and voice test result to give you the app's core function of coaching your voice. For the usage events, it is our legitimate interest in understanding how the app is used so we can improve it; you can object by emailing us.

Children

Speakate is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.

Changes

If we change this policy we will update the date at the top and, for anything that materially affects you, notify you in the app before it takes effect.