Privacy Policy
Last updated: 14 September 2026
In short: Speakly records what you say during practice so an AI coach can understand you and give you feedback. To do that, your recordings and conversation text are processed by our AI providers, OpenAI and Anthropic. We do not sell your data, we do not show ads, and we do not use third-party tracking or advertising tools.
1. Who we are
This policy explains how the Speakly mobile app for iOS and Android and the website speaklys.site (together, “Speakly”) handle personal data. Speakly is operated by MEGAHOST LLC, 36 South 18th Avenue, Brighton, CO 80601, United States (“we”, “us”). We are the controller of your personal data. You can reach us at support@speaklys.site.
On the Apple App Store, the Speakly iOS app is currently listed under the individual developer account of Amine Lahmar, who publishes it on behalf of MEGAHOST LLC. On Google Play, Speakly is published by MEGAHOST LLC. On both stores, MEGAHOST LLC provides the service and is the controller of your personal data.
2. Information we collect
Account information
- Your name and email address.
- Your password, which we store only as a one-way cryptographic hash. We cannot see your password.
- Your timezone (so reminders and daily goals follow your local day) and your app language.
- If you reset your password, a temporary six-digit code that we email to you.
Learning profile
Information you give us during onboarding or later in Settings: your English level, learning goal, how confident you feel speaking, your interests, your native language (used for translations and explanations), your daily practice goal, the AI coach you choose, and your notification and reduced-motion preferences. We also record whether you have granted microphone access.
Voice and conversation data
- Voice recordings of what you say in practice sessions and pronunciation exercises. The app only records while you are practising.
- Transcripts of your recordings, and the coach’s replies as text and as generated audio, including translations and suggested phrases.
- Feedback we create from your speech: corrections and explanations, scores (fluency, pronunciation, grammar, vocabulary, confidence), session summaries, speaking measures such as words per minute, filler words and pauses, pronunciation results, recurring grammar patterns, and vocabulary you used, including the sentence you used it in.
Progress
Session history, practice time, points, levels, streaks, achievements, daily and weekly progress, and in-app notifications.
Subscription information
If you subscribe, the Apple App Store or Google Play processes your payment. We never receive your card or bank details. We receive and store the plan you bought, which store you used, product and transaction identifiers, the purchase token or receipt data the store provides, and the start, renewal, cancellation and expiry dates, so we can confirm your subscription with Apple or Google.
Device and technical information
- Your IP address, which is processed by our hosting and network providers and our server to deliver the service, protect it against abuse and apply rate limits.
- Basic technical details such as your device platform (iOS or Android) and app version.
- If push notifications are enabled in the app and you allow them, a push token for your device.
Product usage events
We record a small set of events on our own server, such as app opened, onboarding started or completed, conversation started or completed, minutes spoken, correction viewed, vocabulary reviewed, subscription screen viewed, and trial or subscription started, renewed or cancelled. Each event is linked to your account and plan. These events never contain what you said, your transcripts, your corrections, your name or your email address. We do not use any third-party analytics or advertising SDK.
Messages you send us
If you contact support, we keep your email and our reply so we can help you.
What we do not collect
We do not collect your precise location, contacts, photos or advertising identifiers.
3. How we use it and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Creating and running your account, signing you in, password resets | Performance of our contract with you |
| Holding AI conversations, transcribing your speech, generating the coach’s voice, giving corrections, scores and pronunciation feedback | Performance of our contract with you, and your consent to AI processing of your voice and conversations (see section 4) |
| Personalising practice: planning sessions around your level, interests and recurring mistakes; vocabulary review; progress and reminders | Performance of our contract with you |
| Verifying subscriptions and applying plan limits | Performance of our contract with you |
| Security, preventing abuse, rate limiting, fixing problems | Our legitimate interest in keeping Speakly safe and working |
| Understanding how Speakly is used (the usage events above) | Our legitimate interest in improving the app |
| Keeping records we are legally required to keep, and responding to legal requests | Legal obligation |
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Scores and feedback are practice aids only.
4. AI processing and your consent
Before your first conversation, the app asks for your consent to send your voice recordings and conversation text to our AI providers. You can withdraw this consent at any time in Settings. Without it, you can still use your account, but AI conversations and pronunciation feedback will not be available. Withdrawing consent does not affect processing that already took place.
When you practise, this is what is sent and to whom:
- OpenAI receives your voice recordings to turn them into text (speech-to-text), and the coach’s reply text to turn it into speech (text-to-speech). If Anthropic is temporarily unavailable, OpenAI may also receive the conversation and learner-profile information described below so your session can continue.
- Anthropic receives the text of your conversation (transcripts of what you said and the coach’s earlier replies) together with learner-profile information needed to coach you, such as your English level, interests, native language and the grammar or vocabulary you are working on. It uses this to write the coach’s replies and, after a session, to analyse your speaking for corrections, scores and a summary.
We do not include your name or email address in what we send to AI providers. However, anything you say out loud in a session is part of the recording and transcript, so please avoid sharing sensitive personal information while you practise.
Under their terms for business API customers, OpenAI and Anthropic state that they do not use data submitted through their APIs to train their models by default. They may keep that data for a limited period, for example to detect abuse, as described in their own policies: OpenAI Privacy Policy, OpenAI business data commitments, Anthropic Privacy Policy, Anthropic Commercial Terms.
AI feedback can be wrong. See our Terms of Use.
5. Service providers we share data with
We share personal data only with providers that help us run Speakly, and only for that purpose:
- Hetzner Online GmbH (Germany): hosts our server, database and stored recordings.
- Cloudflare, Inc.: DNS and network protection for our domains. Traffic to our server passes through Cloudflare, which processes IP addresses and request data.
- OpenAI and Anthropic: AI processing, as described in section 4.
- Apple and Google: app distribution and in-app subscription payments. When we verify your purchase, we exchange the purchase receipt or token with Apple or Google. If push notifications are enabled, notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging using your device’s push token.
- Our email delivery provider: to send password reset codes and replies to support requests.
We may also disclose data if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy continues to protect your data. We do not sell or rent personal data and we do not share it for cross-context behavioural advertising.
6. International transfers
Our server is located in Germany. Some providers, including OpenAI, Anthropic, Cloudflare, Apple and Google, are based in the United States or process data in other countries. Where personal data from the EU, EEA or UK is transferred to a country without an adequacy decision, the transfer relies on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU–U.S. Data Privacy Framework. You can ask us for more information about these safeguards.
7. How long we keep data
- Account, learning profile, conversations, feedback and progress: kept for as long as your account exists, so you can see your history and so your coaching can build on it.
- Voice recordings (yours and the coach’s generated audio): deleted automatically from our server 30 days after they were made. The text of your conversations, your feedback and your progress stay with your account. Recordings are not included in our backups.
- Backups: we make daily backups of our database and keep each backup for 7 days. After you delete data, it can remain in a backup until that backup expires.
- Subscription records: kept as long as needed to provide your subscription and to meet legal, tax and accounting obligations.
- Support emails: kept as long as needed to handle your request and any follow-up.
Deleting your account
You can delete your account in the app under Profile → Settings → Delete account. This permanently erases your account, conversations, recordings, feedback and all other account data from our systems straight away, and signs you out on every device. Copies in our database backups expire within 7 days. If you can no longer sign in, email support@speaklys.site from the address on your account and we will erase it for you within 30 days. Deleting your account does not cancel a subscription billed by Apple or Google; cancel it in your store settings (see Support).
8. Your rights and choices
Depending on where you live, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate data. You can change your name, level, interests, native language, daily goal and preferences in the app.
- Delete your data (see “Deleting your account” above).
- Export your data in a portable, machine-readable format. Email us and we will send it to you.
- Withdraw consent to AI processing at any time in Settings.
- Object to processing based on our legitimate interests, and ask us to restrict processing.
- Complain to a data protection authority. In the EU/EEA, that is the authority where you live or work; in the UK, the Information Commissioner’s Office.
To exercise a right, email support@speaklys.site from the address on your account. We will reply within one month (this can be extended in complex cases, and we will tell you if it is). We may need to confirm your identity first. You can also turn off notifications and microphone access in your device settings at any time.
9. Security
We use encryption in transit (HTTPS/TLS) between the app and our server. Recordings are stored privately and are only played back through short-lived signed links. Access to our systems is restricted, passwords are stored as hashes, and Speakly runs isolated from other applications on its server. No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires it.
10. Age requirement
Speakly is intended for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has given us personal data, contact us and we will delete it.
11. California residents
If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, use and disclose, to request deletion and correction, and not to be discriminated against for exercising these rights. The categories we collect are described in section 2 (identifiers, commercial information about subscriptions, audio recordings, internet and device activity, and inferences about your English skills), the purposes in section 3, and the recipients in section 5. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information for purposes that would give you a right to limit its use. To make a request, email support@speaklys.site. You may use an authorised agent; we may ask for proof of the agent’s authority and verify your identity.
12. Changes to this policy
We may update this policy. We will change the “Last updated” date and, for significant changes, tell you in the app or by email before they take effect.
13. Contact
MEGAHOST LLC
36 South 18th Avenue, Brighton, CO 80601
United States
Email: support@speaklys.site