Privacy

Last updated 8 October 2026

The short version

SpeakFix runs on an AI provider key that you supply. Your recordings go to that provider under your own account, your key is encrypted before we store it, and we never sell or share anything. You can delete your key or your whole account at any time.

Your API key

When you connect a provider, your key is encrypted with AES-256-GCM before it is written to our database. The encryption key lives only on our server and is never stored next to the data it protects, so a copy of the database on its own cannot be used to read your key.

After you save it, your key is never sent back to your browser and never shown to you again. The only thing we display is its last four characters, so you can tell which key is connected. We decrypt it in memory for the length of a single request to your provider, and nowhere else.

Removing a key in Account to API keys deletes the stored ciphertext immediately. We recommend you also revoke the key in your provider console, which is the only way to be certain it can never be used again.

Your recordings

Audio is recorded in your browser and sent to our server, which forwards it to your chosen provider for transcription using your key. We do not keep the audio: it exists only for the duration of that request and is never written to disk or to our database.

The resulting transcript and the feedback on it are saved to your account so that Progress and your practice history work. Those are visible only to you.

What your provider sees

Your recordings, transcripts and the coaching instructions we send are processed by whichever provider you connected, under your account with them and their terms and retention policy, not ours. If that matters to you, read your provider policy before connecting a key, as we have no control over what they retain.

What we store

  • Your email address and authentication details, through Supabase.
  • Your first language, so corrections come back in the right script.
  • Your encrypted provider key, the model you chose, and its last four characters.
  • Your practice transcripts, corrections and scores.
  • Words you save to your Word Bank.
  • A usage record per AI call: time, provider, model, feature and token counts. This is what fills the Usage page, and what any future paid plan would be based on.
  • Your reading position in a book, which is kept in your own browser only.

What we do not do

  • We do not sell or rent your data.
  • We do not use your recordings or transcripts to train any model.
  • We do not charge you for AI usage. You pay your provider directly.
  • We do not run third-party advertising or tracking pixels.

Deleting your data

Deleting a provider key removes it on the spot. To delete your account and everything attached to it, including transcripts, saved words and usage records, email us and we will remove it. Every record is tied to your user ID and is removed with the account.

Children

SpeakFix is not intended for children under 13, and we do not knowingly collect their data.

Changes and contact

If this policy changes in a way that affects how your key or recordings are handled, we will say so in the app rather than only editing this page. Questions about any of the above are welcome.

Add your contact address and company details here before launch.