SpeechPolish Privacy Policy

Effective date: June 10, 2026

SpeechPolish (“we”, “us”) takes your privacy seriously. This policy explains what data we collect, how we use it, and your rights — with specific detail on how voice recordings and speech drafts are handled.

1. Information We Collect

1.1 Account information

At sign-up we receive only the anonymous identifier provided by Sign in with Apple or Google OAuth, plus an optional display name. We do not collect your real name.

1.2 Speech drafts and AI content

• Draft text: Stored locally on your device (SQLite). We do not proactively upload draft text to our servers.
• AI writing inputs: Your occasion type, audience description, and talking points are sent to the AI service to generate the draft. The AI service does not retain these inputs after processing.
• AI-generated drafts: Returned by the AI service and stored locally on your device; not backed up to the cloud.

1.3 Voice recordings

• Audio files (m4a): Always stay on your device. We never upload your recording files to our servers.
• Whisper transcription: After you tap Stop, the audio signal is sent over an encrypted connection to the Whisper transcription service. The audio is discarded by the transcription service after processing; it is not stored on any server. The resulting transcript is stored locally on your device.

1.4 Call metadata

We collect only the minimum metadata needed to operate the service: timestamps, error codes, subscription status, and quota usage counts. This metadata does not contain draft text or audio content.

2. How We Use Information

Your information is used solely to:

• Deliver AI speech writing, rehearsal scoring, and the rewrite → re-record loop;
• Manage your subscription and quota;
• Send essential service notifications (quota alerts, feature updates).

We do not sell, rent, or share your personal information with third-party advertisers.

3. Microphone Access

Microphone permission is requested only when you tap the Record button and remains active only while you are recording. We do not use the microphone in the background.

4. Third-Party Services

Service	Purpose	Data received
Supabase	Authentication and account data	Account identifier, subscription status, quota records
newapi (Whisper)	Voice transcription	Audio signal (discarded after transcription)
newapi (AI)	Speech drafting and rewrite suggestions	Occasion type, talking points (no real name or email)
RevenueCat	Subscription management	Subscription status and purchase records

5. Data Security

All network transmissions use TLS/SSL encryption. We review our security practices regularly. Keeping speech drafts and recordings on your device reduces the attack surface for data breaches.

6. Data Retention and Account Deletion

You may delete your account at any time via App → Profile → Account → Delete account:

• Server-side account information and metadata will be permanently erased within 30 days.
• On-device drafts, recording files, and SQLite cache are deleted immediately when you initiate account deletion.

7. Children’s Privacy

SpeechPolish is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated within the app before they take effect. Continued use constitutes acceptance of the updated policy.

9. Contact Us

For privacy-related questions: privacy@sanva.tk