Privacy Policy

The data controller for the Service is SpeakMetry. For any privacy question or request, contact [email protected].

• To provide and operate the Service (performance of our contract with you).
• To run your sessions and generate feedback reports — your speech is processed by AI systems to conduct the conversation, transcribe your answers, and produce band-score estimates (performance of contract).
• To manage your purchases and send billing-related emails such as receipts and pass-expiry notices (performance of contract / legal obligation).
• To send product updates and exam reminders if you have opted in (consent — withdraw anytime).
• To detect and prevent fraud and account abuse, including abuse of the free tier (legitimate interest).
• To improve the Service using aggregated or de-identified data (legitimate interest).

We do not sell your personal data, and we do not use your voice recordings to train AI models.

Audio recordings of your sessions are used solely to run the session and generate your feedback report. When you take a session, your audio and transcripts are transmitted to the AI service providers listed below for real-time processing and scoring, under data-processing agreements.

Automated scoring on SpeakMetry produces practice feedback only. It is not used to make decisions with legal or similarly significant effects about you.

Recordings are stored securely and are accessible only to you via your results page.

The examiner's voice is a generic synthetic voice supplied by OpenAI. It is not modelled on any identifiable person. We do not offer voice cloning or custom voice replication of any kind, and your recordings are never used to create, train, or reproduce a synthetic voice.

We share data only with service providers who process it on our behalf:

• PayPro Global — merchant of record: payment processing for one-time purchases and tax compliance.
• OpenAI — AI examiner conversation, transcription, and scoring. Audio and transcript data is transmitted during your sessions under OpenAI's data-processing terms (API data is not used to train OpenAI models).
• LiveKit — real-time audio infrastructure that carries the voice conversation between you and the AI examiner during realistic exam sessions.
• Supabase — database, authentication, and file storage (including session recordings).
• Hetzner Online GmbH — website hosting. Our application servers are located in Finland (EU).
• Cloudflare — DNS and network delivery for speakmetry.com.
• Resend — transactional email delivery (receipts, pass-expiry reminders, account emails).
• Google Analytics and Microsoft Clarity — website analytics, loaded only if you consent to analytics cookies.

Some providers process data in the United States. Where data is transferred from the EU/UK, we rely on the providers' standard contractual clauses or equivalent safeguards.

• Account data: for as long as your account is active.
• Session data (recordings, transcripts, scores, reports): 12 months after the session date.
• Billing records: as long as required by tax and accounting law.
• Consent and purchase records: at least 3 years, as required by consumer-protection law.

The 12-month session limit is enforced automatically: a daily job permanently deletes expired recordings from storage and expired transcripts, scores and reports from the database. Deletion is permanent — expired sessions cannot be restored.

You can delete your account at any time from Settings, or request deletion by email. Account deletion permanently erases your stored audio recordings and transcripts along with your scores, reports and profile, except records we are legally required to keep (such as billing records held by our merchant of record for tax purposes).

Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to lodge a complaint with your local data-protection authority.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor the Global Privacy Control signal by treating it as a refusal of analytics cookies.

To exercise any right, contact [email protected]. We respond within 30 days.

We use essential cookies for authentication and session management — these are required for the Service to work. Analytics cookies (Google Analytics, Microsoft Clarity) are loaded only if you accept them in the cookie banner, and you can change your choice at any time. If your browser sends a Global Privacy Control signal, we treat it as a rejection of analytics cookies.

See the Cookie Policy for the full list of cookies and how to manage them.

Data is encrypted in transit (TLS/HTTPS, and encrypted WebRTC media for the live exam audio) and encrypted at rest by our infrastructure providers. Session recordings live in a private storage bucket with no public URLs: playback is served through short-lived signed links (one hour) issued only to the account that owns the recording. Every database table enforces row-level security so one account can never read another's data, and administrative keys are held server-side only, never exposed to the browser. Internal access is limited to the personnel who need it to operate and support the Service.

No method of transmission over the internet is 100% secure.

The Service is intended for users aged 16 and over. We do not knowingly collect data from children under 16; if you believe a child has created an account, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service before they take effect.

SpeakMetry

Privacy questions and requests: [email protected]