Privacy Policy: How We Handle Your Data

Last updated: 2026-11-03

PracticeSpeaking (practicespeaking.app) is an English speaking practice tool. You listen to a short passage, retell it from notes, and an AI compares what you said with the original. This page explains what that involves for your data.

What we collect

Account details: your email address, a display name (by default the part of your email before the @), and, if you sign in with Google, the basic profile Google shares with us. Passwords are stored hashed, never in plain text.
Your recordings: only while you practice. See "Your voice recordings" below.
Practice results: for each practice round we keep the lesson, your scores and how many mistakes you fixed, so your progress page works. We do not keep the transcript or the written feedback.
Accent test results: the accent you sounded closest to, the first language the AI heard, and the sounds to practice. We keep the result (not the recording) so you can share it if you choose.
Shared cards: if you share a practice result or accent result, we keep the card's contents (scores, a phrase, the story title) so the link works for the people you send it to.
Phrasebook: the words and phrases you save, with their review schedule.
Your settings: your practice goal, listening accent and the language you want notes and explanations in.
Marketing consent: whether you chose to receive product emails, and when.
Billing status: which plan you are on and the subscription status we receive from our payment provider. We never see or store your card number.
Technical data: IP address and browser type, used to keep the service secure and to enforce daily practice limits. We store limit counters as one-way hashes, not as readable IP or email addresses.
How you found us: on your first visit we store, in a cookie, the website you came from, any campaign tags in the link (such as utm_source) and the page you landed on. If you create an account, we save these with it so we know which channels bring people who find the tool useful.
Messages you send us through the contact form.

Your voice recordings

A recording is sent from your browser to our server only when you submit a practice round, a pronunciation attempt or an accent test.
We process it to get a transcript and feedback, and we do not store the audio file. Playback of your own take happens in your browser and disappears when you leave the page.
Your recordings are not used to train any AI model, ours or anyone else's, and they are never made public.

AI processing

PracticeSpeaking is an AI product. To give you feedback, your recording, its transcript and the practice passage are sent to third-party speech recognition and AI model providers, who process them to return the transcript, feedback or accent result to us. They do not receive your name or email address.

Who processes your data

We use service providers to run PracticeSpeaking. Each receives only what it needs for its job:

Speech recognition and AI model providers: to transcribe your recordings and write feedback, as described above.
Hosting and infrastructure: Cloudflare hosts the website, the application and the database, provides bot protection (Turnstile) and delivers our emails.
Payments: Dodo Payments sells paid plans as the merchant of record. That means Dodo Payments is the seller in your purchase: it takes your payment details directly, handles billing, tax and receipts, and keeps its own records under its privacy policy and buyer terms. We receive your email, the plan and the payment status, never your card details.
Sign-in: Google, only if you choose to sign in with Google.
Internal notifications: when someone buys a plan, our team gets a short notice (name or email and amount) in an internal messaging tool.

We do not use third-party analytics or advertising tools. We do not sell your personal data and we do not share it for advertising.

Emails we send

Account emails (email confirmation, password reset and renewal reminders) are needed to run your account, so they are always sent. Payment receipts come from Dodo Payments.
Product emails (practice tips and updates) are opt-in: we only send them if you tick the box when you sign up or turn them on later. You can turn them off anytime in Settings, then Email, and every product email will include an unsubscribe link.

Cookies

We use the cookies needed to keep you signed in, remember your language, protect forms from bots and remember how you first found us. See the Cookie Policy.

How long we keep data

Recordings: not kept (see above).
Account, practice results, phrasebook, settings and your accent results: until you delete your account. When you do, they are removed from our database right away and disappear from our automatic database backups within 30 days.
Accent results from tests taken without an account: deleted after 30 days, unless you shared them.
Shared cards: until you stop sharing them or delete your account.
Daily limit counters: deleted after 2 days.
How you found us: the first-visit cookie expires after 90 days; if you sign up, the details stay with your account.
Contact messages: kept as long as needed to answer you and follow up.
Payment records: kept by Dodo Payments as the law requires for tax and accounting; we delete our copy of your plan status with your account.

Deleting your data

You can delete your account in Settings, then Security. If you have a paid plan, deleting your account also cancels it. To ask for a copy of your data or for anything we could not delete automatically, use the contact form at /contact.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. Use the contact form at /contact and we will reply within 30 days.

Security and data breaches

We protect your data with encryption in transit, hashed passwords and access limited to what is needed to run the service. If a data breach is likely to put your rights at risk, we will tell affected users and the relevant authority within 72 hours of becoming aware of it, where the law requires it.

Privacy Policy