Your data

How we keep your data

As of 28 October 2026

This page explains in plain words what the app stores, why, for how long, and what happens to your data when you delete a room or your account. It describes how the app works today. When something changes, we update this page and the date above.

What we store

Your account: your e-mail address, your password (only as a one-way hash, handled by our sign-in provider), your name, if you give it, and the dates your account was created, your e-mail address was confirmed and you last signed in. The dates help us answer your requests. If we block your account (see the terms): the date, the reason you see in the app and our internal note.
Your rooms: name, description, the tutor’s role, goal, level, correction style, voice and accent.
Your conversations: when they started and ended, how many minutes were billed, the text of what you said (as speech recognition heard it), the tutor’s replies, translations and corrections, the lines you marked as misheard, a short summary the tutor uses later in a long conversation, what you ask the tutor for during a conversation (a hint, how to say something, what a word means…) and the cards you see then, your breaks (when they started and how long they lasted) and the correction style you chose for the conversation. We also keep whether speech recognition should hear Polish words (the “Recognise Polish words” setting).
Speech measurements for each of your lines: how long you spoke, your pauses and the words recognised with low confidence. They are used for the assessment after the conversation.
The assessment after a conversation: scores, a summary, mistakes and better ways to say things.
Your mistakes vault: the cards (including phrases, words and corrections you saved during a conversation), your reviews and when each card is due.
Your minutes and purchases: your allowance, extra minutes and what you used, and once payments start, your purchases (what, when, for how much, the Lemon Squeezy order number) and withdrawals with the refund worked out.
Technical data: the cost of each call to a paid service (speech recognition, the tutor’s reply, the tutor’s voice), the outcome and timing of those calls, and hits of the limits that protect the service from abuse. They help us keep the service running and its costs under control.
Language profile: the grammar and vocabulary topics your mistakes came up in, their state (for example healing or healed), the focus you chose and the plan of each conversation. It is built from the assessments of your conversations, including those from before it was introduced. Evidence you mark as “That was not my mistake” is left out. We also keep your ratings of the x-ray (“Spot on / Not quite”) to check and improve how well it hits. They go with the conversation. From this data, code following fixed rules builds the “What to watch today” list before a conversation and chooses what the tutor comes back to. This is profiling under the GDPR: it is used only to choose what your conversations cover and does not affect prices or access to your account. We do not infer emotions or health from your voice. You can see the whole profile in the “Tutor’s Notebook”.
What the tutor remembers about you: up to 40 short sentences from what you say about yourself in conversations (for example work, plans, interests), so the tutor can come back to them. You can delete each one or switch remembering off, which deletes all of them at once.
Consent to research: whether you gave it, and each of your decisions with its date, the place in the app and the version of the text you agreed to.

What we do not store

Recordings of your voice. Sound goes straight to speech recognition while you speak; we keep only the recognised text and the measurements, and Deepgram keeps the sound only while it processes it.
IP addresses or device details in the app’s database.
Data for advertising. The site uses no analytics or advertising tools.
Especially sensitive data: about your health, religion, political views, orientation, ethnic origin or finances. The tutor does not remember it even if you mention it, and an extra filter in the app rejects it.

Who helps us process your data

We use the providers below. Each gets only what its part of the work needs, and only the database provider, the e-mail provider and, once payments launch, the payment provider know your e-mail address. Most of them are based outside the European Economic Area.

Supabase · Supabase, Inc.

What for: The database, signing in and sign-in e-mails.
What data: All account and app data: e-mail address, password hash, rooms, conversations, assessments, the mistakes vault, minutes and technical data.
Where: Servers in London (region eu-west-2). A company based in the USA.
Legal basis for the transfer: The UK has a European Commission adequacy decision. Access from the USA: standard contractual clauses in the provider’s data processing agreement.

Vercel · Vercel Inc.

What for: The servers that run the site and the app.
What data: IP address and request details in server logs, and everything passing between the browser and the database.
Where: The USA and a worldwide server network.
Legal basis for the transfer: Transfer to the USA under standard contractual clauses or the EU-US Data Privacy Framework, as the provider’s data processing agreement sets out.

Deepgram · Deepgram, Inc.

What for: Turning your speech into text during a conversation, and the tutor’s voice.
What data: The sound of your speech during a conversation, and the text of the tutor’s replies and of vault cards you play. No e-mail address. Deepgram’s model improvement program is switched off, so data is kept only while it is processed.
Where: The USA.
Legal basis for the transfer: Transfer to the USA under standard contractual clauses or the EU-US Data Privacy Framework, as the provider’s data processing agreement sets out.

Google (Gemini API) · Google LLC

What for: The tutor’s replies, the summary of a long conversation and the assessment after it.
What data: The text of the conversation, the room settings and the speech measurements the assessment needs. No e-mail address.
Where: The USA.
Legal basis for the transfer: Transfer to the USA under standard contractual clauses or the EU-US Data Privacy Framework, as the provider’s data processing agreement sets out.

Resend · Plus Five Five, Inc. (Resend)

What for: Sending account e-mails: address confirmation, password reset and messages about the service.
What data: The e-mail address and the content of the message sent. No conversation content.
Where: The USA.
Legal basis for the transfer: Transfer to the USA under standard contractual clauses or the EU-US Data Privacy Framework, as the provider’s data processing agreement sets out.

Lemon Squeezy · Lemon Squeezy, LLC

From when payments launch.

What for: Payments for plans and top-ups, receipts and taxes.
What data: The e-mail address, payment details and billing address you give when you buy.
Where: The USA.
Legal basis for the transfer: Acts as the seller (merchant of record) and processes payment data on its own account, under its own privacy policy.

How long we keep data

An automatic job removes older data every night.

Data	How long	Then
Account, rooms, conversations with their text, assessments, mistakes vault, language profile, minutes, purchases and withdrawals	Until you delete your account	Deleted with the account.
Costs of calls to paid services	Until you delete your account	Deleted with the account. Only anonymous daily totals remain.
Speech measurements of your lines	30 to 180 days after the conversation	Cleared 30 days after an assessed conversation whose mistakes are in your vault, and 180 days after any assessed conversation. A conversation without an assessment keeps them, because the assessment may still need them. The text of the conversation stays.
Outcome and timing of service calls	90 days	Only the number of calls per day remains, not linked to any account.
History of your rooms (each version you saved)	180 days	Earlier versions are deleted. Of a room’s creation only the goal, level, style and accent remain, without its name or description.
An account whose e-mail address was never confirmed	30 days	Deleted, if no conversation ever took place in it.
Limit counters during a conversation	A few minutes	Deleted automatically.
What the tutor remembers about you	Until you delete it, switch remembering off or delete the account	Plans and events with a date are forgotten 30 days after that date. Above 40 sentences, the oldest interests make room for new ones.
Your decisions about consent to research	Until the account is deleted	Deleted with the account.
Research datasets (only with your consent)	At most 90 days	Deleted. After you withdraw consent or delete the account, your data goes into no new dataset.

Deleting a room

When you delete a room, its conversation history goes too: your lines, the tutor’s replies, the assessments and summaries. A conversation still running in that room is ended and counted first. Cards in your mistakes vault stay, because they belong to you, not to the room.

What stays, without any content, are the technical facts of those conversations: when they took place, how long they lasted, the minutes, the numeric scores and the costs. You no longer see them. The room’s name and description stay in the room history for up to 180 days from when they were saved.

Deleting your account

You can delete your account yourself in the account settings, by typing the confirmation word and your password.

Everything linked to the account is deleted at once and for good: rooms, conversations, assessments, the mistakes vault, the language profile, what the tutor remembers about you, minutes, purchases, technical data, the room history and your decisions about consent to research. This cannot be undone.

Only anonymous totals remain, such as how many minutes of conversation there were on a given day and what they cost, plus one anonymous record with the sign-up and deletion dates, the plan and the total minutes and costs. There is no e-mail address and no content in them, and they cannot tell who you were or what you talked about.

Backup copies at our database provider may still hold deleted data for a short time, at most 7 days. After that they are overwritten.

Research and improving the method

If you agree, we use your conversations for research into how to teach speaking better. Consent is voluntary and off by default. We ask once, after your first conversation, and you can change it at any time in your account settings. Without consent the app works exactly the same.

Legal basis: your consent (Article 6(1)(a) GDPR). We record every decision with its date and the version of the text agreed to, so that we can show it.
Scope: all conversations on the account, including those from before the consent: what you said and the tutor's replies, assessments, the language profile, the mistakes vault and reviews, conversation plans and rooms (goal, level, style and accent, without the name or description). Never: voice recordings (we do not keep them at all), what the tutor remembers about you, or your email address.
Protection: before any analysis we replace your account with a random code, turn dates into days counted from your first conversation, and automatically remove names, places and companies, email addresses, phone numbers and other numbers from the text. We check a sample of every dataset by hand. Most analyses need numbers only, without the text of conversations.
Purpose: finding out which exercises and tutor settings help people learn, improving how conversations are assessed, and training our own models on this data. We never sell it or use it for ads.
Storage: a research dataset is made outside the app and deleted after 90 days at the latest; after that we make a new one if needed. Only we have access. If we want to work with a research partner, we will update this page first and share data only under an agreement that protects it.
Withdrawing consent: from that moment your data goes into no new dataset, and existing ones disappear within 90 days. A model that has already learned from them does not keep your conversations, but the influence of one person cannot be removed from it. Withdrawing does not affect what we did earlier on the basis of the consent.

Cookies and browser storage

We use only what the site needs to work: the cookies of your sign-in session, a cookie with the language you chose, and your appearance settings (light or dark theme, the app’s side menu) saved in your browser. We use no advertising or analytics cookies.

Terms of service

The rules for using the service, including payments, complaints and withdrawal, are in the Terms of service