--- title: "Privacy Policy | Speakeroo" description: "Privacy policy for Speakeroo. How we handle audio, analytics, optional advertising, cookies, and your data rights." url: "https://speakeroo.app/privacy" --- # Privacy Policy Last updated: November 4, 2026 ## Our Commitment to Privacy At Speakeroo, we believe in transparency. We collect only what we need to run the service, improve the product, and measure whether our advertising is effective. You control Analytics and Advertising choices at any time. ## No Account Required for Core Features You can complete a full practice session and read all of its feedback without creating an account. One session a day is free without one; an account is needed to keep practicing. When you use the tool without an account: - Your audio is sent for automated analysis and stored with the session it belongs to - No name, email, or other personal information is collected or stored - Your sessions are stored on our servers with no account attached, and your browser keeps the list of them so you can find them again - A random identifier generated by your browser is stored with each session so we can apply the one-a-day limit. It is not derived from you, your device, or your network, and it is removed from a session when that session is claimed to an account - Clearing your browser data removes that list, not the sessions themselves — delete a session from its own page to remove it from our servers - The next time you sign in on this browser, the sessions in that list are automatically claimed to your account ## What a Session Link Gives Access To A session created without an account has no owner for us to check a visitor against, so the session's web address is what grants access to it. Anyone who has the link — not only you — can: - Open the session page and read its transcript and practice insights - Play back the audio you recorded - Delete the session and its recording permanently - Claim the session into their own account by signing in with it, after which only they can open it and you lose access Session addresses are long random identifiers, so they cannot be guessed, and we neither list them publicly nor allow search engines to index them. But an accountless session's link does not expire and we cannot revoke it: once you share a link, everyone who has it keeps that access. Treat a session link the way you would treat the recording itself, and only send it to people you are happy to have hear your voice. If you want a session the link alone cannot open, create an account before you practice. Sessions saved to an account can only be opened while signed in to that account (and, for Team Members, by their Team Admins as described under Teams below). Claiming an accountless session to your account also stops its link from opening the session page for anyone else, but it cannot undo access already given: anyone who opened the session beforehand may have kept a copy of the recording or a direct address for its audio. The only way to remove a shared session from our servers is to delete it. ## Speakeroo MCP Server Our MCP server at mcp.speakeroo.app lets AI assistants send us a speech transcript or a recording for feedback, without an account. When you or your assistant use it: - The text or audio you send is used to produce the response and is not stored afterwards. Audio sent inline is held only while it is analysed and then deleted - Our AI providers process it the same way they process a practice session (see Third-Party Services), and our tracing records which prompt and model ran, not what you sent - We count how the tools are used — which tool, whether it worked, how long it took, and which AI client connected — in our analytics, without your text, audio, IP address or any identifier that tells one caller from another - Your IP address is used only to apply the free daily limits. We keep a salted hash of it that changes every day, never the address itself, and delete the hash after two days ## Information We Collect (Plus Users Only) If you choose to upgrade to Plus, we collect the following information: - **Account Information:** Name and email address through WorkOS authentication - **Session Data:** Your practice sessions, recordings, and analysis results (only if you choose to save them) - **Usage Data:** Progress metrics and dashboard statistics - **Payment Information:** Processed securely through Stripe (we never store your credit card details) ## Teams If you create or join a Team, additional information is collected and shared within that Team as described below. - **Team Information:** Team name, membership role (Team Admin or Member), and WorkOS Organization identity data - **Member Account Information:** Name and email address for invited and active Members, managed through WorkOS authentication and invitations - **Member Session Access:** Team Admins can view the sessions a Member hands in for assignments, the sessions a Member asks them for feedback on, and any session a Member chooses to share, including recordings, transcripts, and practice insights. A Member's other practice, and anything recorded before joining, stays private. Members are told this when they accept a Team invite. - **Team Billing:** Subscription and payment details for the Team are processed through Stripe at the Team level. We do not store credit card details on our servers. - **Recording Minutes:** Allocated and used recording-minute balances are tracked per Member and for the Team pool - **Coach Feedback and Requests:** Human feedback published by Team Admins and feedback requests submitted by Members If you paid for Plus through Stripe before joining a Team, billing for that personal subscription is paused while you remain a Member and may resume if you are removed from the Team. A Plus subscription bought through the App Store or Google Play is not paused; you manage it in your store settings. For what Members share with their Team, the Team decides how it is used and we process it on the Team's behalf under our [Data Processing Addendum](https://speakeroo.app/dpa). ## How We Use Your Information For Plus users, we use your information to: - Store and sync your practice sessions across devices - Display your progress and analytics in the dashboard - Process payments and manage your subscription - Send important service updates and billing notifications - Check that each person receives a free Plus trial or a referral's free week only once, and stop the same person claiming them again with a new account For Teams, we additionally use information to: - Manage Team membership, invitations, and admin roles - Let Team Admins review Member sessions and publish coach feedback - Track assignment progress, recording-minute allocations, and Team billing - Send service and billing notifications related to the Team subscription ## Data Storage and Security We take security seriously: - All data is encrypted in transit and at rest - We use Convex for secure backend storage, in the United States - Authentication is handled through WorkOS, a secure identity platform - Payment processing is handled by Stripe, meeting PCI compliance standards - We regularly review and update our security practices ## Third-Party Services We use the following trusted third-party services: - **WorkOS:** For secure authentication and Team identity, membership, and invitations - **Stripe:** For payment processing for Plus subscriptions and Team billing - **Convex:** For backend data storage (Plus and Team users) - **OpenAI, Google (Gemini API), AssemblyAI and Deepgram:** To transcribe and analyse your recordings. Data is processed in the United States, and Google may process it wherever it runs the Gemini API - **Langfuse:** To check the quality of our automated analysis, using transcripts and analysis results but no audio. Data is processed in the European Union - **Cloudflare:** For content delivery, DDoS protection and email delivery - **Expo:** For push notifications to the Speakeroo mobile app - **Sentry:** For error and crash reports from the Speakeroo mobile app. Data is processed in the United States - **RevenueCat:** For Plus subscriptions bought through the App Store or Google Play. Data is processed in the United States - **PostHog:** For product analytics (browser and server) and browser error reports. Data may be processed in the European Union. See the [PostHog Privacy Policy](https://posthog.com/privacy). - **Meta Platforms:** For advertising measurement via Meta Pixel (browser) and Conversions API (server), unless you turn Advertising off. Data may be processed in the United States. See the [Meta Privacy Policy](https://www.facebook.com/privacy/policy/). Each service has its own privacy policy and security measures in place. ## Analytics, Advertising, and Cookies We use cookies and similar technologies to run the service, understand how it is used, and measure the effectiveness of our advertising. - **Essential cookies:** Required for authentication, session management, and security (Plus and Team users). - **Analytics (PostHog):** Helps us understand product usage and improve the service. Analytics runs on our servers by default, and in your browser only after you answer the privacy notice and leave Analytics on. When Analytics is off, we stop sending analytics events to PostHog; error and crash reports needed to keep the service working are still sent, including before you answer the notice. You can change Analytics at any time via **Privacy choices** in the site footer. - **Advertising (Meta Pixel and Conversions API):** Helps us measure whether our ads lead to sign-ups, first practice sessions and subscriptions. Advertising is on unless you opt out, and the privacy notice on our website tells you so. This includes accounts created in our mobile apps, which have no notice. You can turn Advertising off at any time via **Privacy choices** in the site footer or your profile; once you save that choice we send nothing to Meta. We do not use advertising measurement to collect practice audio, transcripts, calibration content, or other sensitive practice data. ## What We Send to Meta Unless you have opted out of Advertising, we send only these events: | Event | When | Data sent | | --- | --- | --- | | `CompleteRegistration` | You create a free account (self-serve sign-up) | Event identifier, pseudonymous user identifier, Meta browser cookies (`_fbp`/`_fbc` if present), page URL, action source | | `FirstPracticeSession` | You finish your first practice session, with or without an account (once only) | Event identifier, pseudonymous user or visitor identifier, the Meta browser cookies kept from our ad pages or sign-up, page URL, action source. Never what you said or how you scored | | `Subscribe` | You start a personal Plus subscription (first time only) | Same as above, plus subscription value (AUD $10) and currency | We never send to Meta: - Your email or name - Practice recordings, transcripts, or calibration data - Free-text content or payment card details - Campaign tracking parameters (UTMs) Meta Pixel runs only on our campaign landing page and sign-up or subscription confirmation pages. Server events are deduplicated with browser events using a shared event ID. To match a first practice session to the ad you came from, we keep your Meta browser cookies for up to 90 days. ## Overseas Disclosure Your account, sessions and recordings are stored in the United States (Convex), and your recordings are transcribed and analysed by OpenAI, AssemblyAI and Deepgram in the United States and by Google wherever it runs the Gemini API. Other service providers process data outside Australia, including PostHog and Langfuse (European Union) and Meta, WorkOS, Stripe, Expo, Sentry and RevenueCat (United States). We take reasonable steps to ensure overseas recipients handle personal information in line with applicable law. ## Your Data Rights You have the right to: - Turn Analytics on or off via Privacy choices - Turn Advertising on or off via Privacy choices (default: on for new website visitors) - Turn Advertising off at any time. When you do, we immediately stop all Meta Pixel and Conversions API sends (browser and server; no queued or retroactive events) - Access your personal data - Request data deletion - Export your data - Cancel your subscription at any time - Opt out of marketing communications To exercise these rights, use Privacy choices on the site or email [support@speakeroo.app](mailto:support@speakeroo.app). ## Data Retention Completed sessions are retained until you delete them, whether or not you have an account — we do not remove them on a schedule. The one exception is a Conversation session started without an account and never completed, which we delete after 7 days. Without an account, your browser holds the list of your sessions, so clearing it removes your way back to them rather than the sessions themselves. For Plus users: - Session data is retained as long as your account is active - You can delete individual sessions or all data at any time - Deleting your account permanently deletes your sessions, recordings, stored audio, analyses, practice history, and support tickets - Apart from the record below, a few records outlive the account with every identifier stripped from them, so nothing left behind points back at you: your consent records for the window below, and anything you produced for someone else — feedback you wrote on a Team Member's session, a recording you added to a shared library, an assignment you set - If your account ever received free Plus (a Plus trial or a referral reward) or used someone's referral code, deleting it keeps one coded record: a one-way, keyed code made from your email address, with your name, account and sessions removed. We can't turn it back into your email. It can only be matched if the same email signs up again, and we use it only to check whether that sign-up can receive another free week or apply a referral code. We keep it for 12 months after deletion, then delete it. We rely on our legitimate interest in preventing the same person claiming a free week more than once. You can ask us about this record, or object to it, at [support@speakeroo.app](mailto:support@speakeroo.app). - Cancelling your subscription does not delete anything — your account and its data remain until you delete the account - Billing records are retained as required by law For Team Members: - Team Admins can see your assignment work, feedback requests, and shared sessions while you are an active Member - If you delete your account, your sessions and their feedback go with it, including the Team Admin's view of them, and any assignment set for you alone is removed - If your Team sets an audio retention period and you agreed to it when you joined, recordings the Team can see are deleted after that period. Their transcripts and scores are kept - If you are removed from a Team, your personal account data follows the Plus retention rules above unless you request deletion - Team billing records are retained as required by law For Analytics and Advertising: - **Consent records** (your Analytics and Advertising choices, with timestamps) are kept for 2 years. Deleting your account strips your account and browser identifiers from them, leaving the choice and its date - **Advertising delivery and deduplication logs** are kept for 90 days, and are deleted outright when you delete your account - **Failed delivery retry queues** are kept for 7 days, then deleted - Meta may retain event data according to its own policies (currently up to two years for Event Data). We delete derived advertising audiences when no longer needed ## Children's Privacy Our service is not directed to children under 13, and we do not support accounts for them, even with a parent's permission. We do not knowingly collect information from children under 13. Coaches, teachers and Team Admins must not invite anyone under 13. If we learn that a child under 13 has an account, we delete it along with its recordings. If you believe a child under 13 is using Speakeroo, email [support@speakeroo.app](mailto:support@speakeroo.app). ## Health Information Speakeroo is a speaking practice tool, not a health record or medical device. Its scores are practice feedback, not clinical or diagnostic measures. We do not sign HIPAA business associate agreements, so HIPAA covered entities and their business associates must not use Speakeroo with protected health information. If a therapist or coach asks you to practise here, your recordings may be health information under the law that applies to you. Your therapist's Team decides how what you share with it is used, and we handle it under our [Data Processing Addendum](https://speakeroo.app/dpa) and this policy. Diagnoses, treatment plans and clinical notes belong in your therapist's own records, not in Speakeroo. ## Changes to This Policy We may update this privacy policy from time to time. We will notify Plus users and Team Admins of any material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised. ## Contact Us If you have any questions about this privacy policy or our practices, please contact us at: [support@speakeroo.app](mailto:support@speakeroo.app) © 2026 Simple Pi Pty Ltd. All rights reserved.