Privacy Policy
Last updated 12 October 2026.
Short version: your recordings and writing are processed only to create your feedback and are not stored by us. We do not sell your personal information. We use no advertising, analytics or tracking cookies.
1. Data controller
SpeakTCF (speaktcf.com) is operated by an independent developer. Privacy contact: loveyou346810@gmail.com. We have not appointed a Data Protection Officer because we are not required to.
2. What we collect
- Submissions: the audio you record or upload and the text you write for a task.
- Network and usage data: a salted, one-way hash of your IP address (we never store the raw address); technical request records (time, task type, file size, audio duration, AI model used, processing time and token usage). These records contain no submission content.
- Access code: after purchase, a random code stored in your browser's local storage and sent with your requests.
- Order data (when you buy): order identifier, status, time, expiry of access and refund status, received from our payment processor. We do not receive or store card details.
- Support communications: emails you send us.
We do not collect your name or create accounts, and we do not use device fingerprinting.
3. Why we use it and our legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Generate your practice feedback | Submissions | Performance of our contract with you |
| Free tries, rate limits, abuse prevention | IP hash, request records | Legitimate interest in a fair, secure service |
| Provide and restore paid access, refunds | Access code, order data | Performance of contract |
| Accounting and tax records | Order data | Legal obligation |
| Cost monitoring and reliability | Request records | Legitimate interest |
| Answer your questions | Support emails | Contract or legitimate interest |
We do not send marketing emails. If we ever do, we will ask for your consent first and every message will include an unsubscribe link.
4. Payments
Payments are processed by Waffo Pancake, our reseller and Merchant of Record, under its own privacy policy. Card data is entered on Waffo Pancake's checkout and is never sent to or stored on our servers.
5. Who we share data with
We do not sell your personal information. We share data only with service providers that process it on our behalf to run the Service:
- Groq (United States) — transcribes spoken French. Groq states inputs are not retained by default and may be logged for up to 30 days only to investigate reliability or abuse, or longer if required by law.
- Google, Gemini API paid tier (United States and other regions) — produces feedback. Under Google's paid-service terms, prompts and responses are not used to train its models; limited retention can apply for abuse monitoring and legal obligations. We delete each uploaded audio file from Google immediately after use and check that it is gone.
- Cloudflare — hosts the website and database and keeps standard security logs.
- Waffo Pancake — payment processing, receipts and tax.
We may also disclose data if required by law or to protect our rights, to a successor if the Service is transferred (you would be notified), or with your consent.
6. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on the providers' standard data protection terms, including Standard Contractual Clauses.
7. How long we keep data
| Data | Retention |
|---|---|
| Submissions, transcripts, reports | Not stored by us: processed in memory and discarded when the request ends. Audio files at Google are deleted immediately after use. |
| Rate-limit records | Deleted automatically after 1 day |
| Free-try counters and request records | Deleted automatically after 12 months |
| Order and refund records | Up to 7 years, for accounting and tax obligations |
| Access code in your browser | Until you clear site data in your browser |
| Support emails | Up to 24 months after the conversation ends |
Deleted records are permanently removed from our database.
8. Cookies and local storage
| Item | Type | Purpose | Can you turn it off? |
|---|---|---|---|
| Access code (local storage) | Strictly necessary | Keeps your paid access in this browser | Yes, by clearing site data; paid access then needs restoring |
We set no cookies and use no analytics or advertising tools.
9. Your rights
Depending on where you live (for example under the GDPR, Canada's PIPEDA or California law), you can ask to access, correct, delete, restrict or port your personal data, object to processing, and withdraw consent. Email loveyou346810@gmail.com; we reply within 30 calendar days. You can also complain to your local data protection authority.
10. Children
SpeakTCF is intended for adults and is not directed at children under 16. We do not knowingly collect data from children under 16; if you believe we have, contact us and we will delete it.
11. Security and breach notification
Connections use HTTPS, secrets are kept in protected server settings, and access to stored records is restricted. If a personal data breach is likely to affect you, we will notify the relevant authority and, where required, affected users within 72 hours of becoming aware of it.
12. Changes
We will post changes here with a new date and give at least 15 days' notice on the website before material changes take effect.
13. Contact
Privacy and support: loveyou346810@gmail.com (monitored daily; replies within 2 business days).