Privacy Policy

At a glance

Forespeak helps you practice difficult conversations. We collect only the information needed to provide your account, personalize practice, operate AI-powered features, process subscriptions when offered, improve the product when analytics is enabled, and keep the service secure. We do not sell personal information or use it for third-party advertising.

Who is responsible

This policy applies to the Forespeak mobile applications, website, and related services. Forespeak is operated by Denys Petrov in Ukraine. In this policy, “Forespeak,” “we,” and “us” refer to Denys Petrov as the person responsible for the service and its handling of personal information. Questions or privacy requests can be sent to hello@forespeak.ai.

Information we collect

Account and profile information

We process your name, email address, a Forespeak account identifier, and the sign-in provider you choose. Google, Apple, or our email authentication provider may also process authentication information under their own policies. We do not receive your password from Google or Apple.

If you choose Google Sign-In, Forespeak receives the identity-token claims needed to authenticate or create your account, such as a provider user identifier, email address, verified-email status, and, when Google supplies them, name and profile-image information. Google’s iOS Sign-In SDK declares that it may also process name, email address, phone number, coarse location, user and device identifiers, other usage data, and other technical data for sign-in functionality and Google’s SDK analytics. Forespeak does not use that SDK data for advertising or cross-app tracking.

Practice and conversation information

We process onboarding choices, practice preferences, learning-path progress, practice history, scenario settings, conversation text or transcripts, session duration, and AI-generated feedback or skill assessments. If you choose the optional voice input, microphone audio is transmitted to our speech-recognition provider and converted to text to deliver the conversation. Text input remains available without microphone access.

Live roleplay history is held in memory for the active connection and is not written to Forespeak’s durable skill-analysis transcript table. Closing the conversation drops that in-memory history.

Purchases

Subscriptions are not currently offered in the production app. If we enable them, Apple, Google, and RevenueCat may process subscription and transaction information. We may receive subscription status, product, entitlement, and transaction identifiers, but not your full payment-card number.

Analytics and technical information

Product analytics is currently disabled in the production service. If we enable it, we may process a pseudonymous Forespeak user identifier, bounded onboarding choices, and product-interaction events, and we will provide any notice or choice required by law. We also process limited request and security metadata needed to operate and protect the service. Forespeak’s own product-analytics design excludes your name, email address, sign-in tokens, and advertising identifiers. Authentication providers may separately process technical and usage data as described above.

Website mailing list

If you ask for product updates, we send your email address and a website source label to Loops. We use double opt-in, so you must confirm the subscription by email. You can unsubscribe from any marketing email.

Website cookies

The current Forespeak website does not use advertising or analytics cookies. Basic network and security metadata may still be processed by our hosting provider when your browser requests a page. If we add non-essential cookies or similar tracking technology, we will update this policy and provide any choice required by law before using it.

How we use information

• create, authenticate, secure, and support your account;
• provide and personalize conversation practice, progress, and feedback;
• generate speech, avatar playback, and AI-assisted responses when those features are used;
• process subscriptions, restore purchases, and determine access to paid features when subscriptions are offered;
• measure and improve the product when analytics is enabled;
• send requested product updates and service messages;
• prevent fraud, abuse, security incidents, and technical failures; and
• comply with law and enforce our Terms of Use.

Sources of information

We receive information directly from you when you create an account, choose preferences, use practice features, contact support, or join the mailing list. We receive authentication and purchase information from Apple, Google, or our email authentication and billing providers when you use those services. We generate account, progress, session, and security records through your use of Forespeak, and receive limited technical information from the device, browser, and network used to connect to the service.

Legal bases for processing

Where applicable law requires a legal basis, we rely on:

• Contract to create and authenticate your account and provide the Forespeak features you request;
• Consent for the optional mailing list and for optional processing where consent is required;
• Legitimate interests to secure, maintain, troubleshoot, and improve the service, provided those interests are not overridden by your rights; and
• Legal obligations when we must process or retain information to comply with applicable law.

You may withdraw consent at any time for future processing. Providing account identity information is necessary to use account-based features; the mailing list and any optional analytics or voice features are not required to use the core service.

Service providers and disclosures

We disclose information only as needed to operate the service, including to:

• AWS for hosting, database, authentication, and transactional email;
• Apple and Google for sign-in, app distribution, store billing, and Google Gemini-generated roleplay responses;
• RevenueCat, if subscriptions are enabled, for subscription and entitlement management;
• PostHog, if product analytics is enabled, for pseudonymous product analytics;
• Soniox for real-time speech recognition and generation when speech features are used;
• Modal for short-lived avatar rendering sessions; and
• Loops for the optional website mailing list.

We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We require service providers that receive personal information from Forespeak to protect it consistently with this policy and applicable law, including providing the same or equivalent protection for that information.

AI and conversation privacy

Conversation content can be sensitive. Do not include information you do not want processed, such as another person’s confidential information. Conversation content is used to provide the requested roleplay, speech, avatar, and feedback features. We do not use it for third-party advertising. Soniox states that its real-time audio and transcripts are not retained or used to train its models. For paid Gemini API use, Google states that prompts and responses are not used to improve its products, but standard abuse monitoring may retain prompts, context, and output for up to 55 days and may permit authorized review of flagged content. Forespeak has not obtained project-level zero-data-retention approval.

Retention

Account, profile, practice, progress, and feedback information is generally retained while your account is active and removed when the account is deleted. Authentication sessions expire after 30 days, and expired authentication challenges are removed after 24 hours. Avatar sessions are configured with a 15-minute lifetime. Short-lived speech and avatar streams are processed for the session rather than kept as a user media library.

Forespeak does not persist live-roleplay audio or conversation history. Soniox documents no retention for real-time content. Google’s standard paid Gemini API abuse-monitoring retention is up to 55 days unless project-level zero data retention is approved; that approval is not currently in place.

Deleted information may remain for up to seven days in encrypted automated database backups. Limited records may be retained longer when reasonably necessary for fraud prevention, security, dispute resolution, tax or accounting obligations, or another legal requirement. We isolate that information from ordinary product use and delete or de-identify it when the applicable purpose ends. Mailing-list information is kept until you unsubscribe or ask us to delete it; unconfirmed sign-ups may be removed as part of routine list maintenance.

Logs from the email-authentication service are retained for 30 days. Other Forespeak service logs use bounded, size-based rotation, so their exact lifetime varies with service activity. We avoid placing passwords, authentication codes, sign-in tokens, conversation transcripts, or generated audio in operational logs.

Your choices and rights

You may access or update profile information in the app, use any analytics choice offered in the app, unsubscribe from marketing, withdraw consent, request access to or a portable copy of your information, request correction or deletion, and object to or restrict certain processing. Depending on where you live, you may also appeal our response and complain to your local data-protection authority. We do not sell personal information or share it for cross-context behavioral advertising. Rights vary by location, and we may need to verify your identity before fulfilling a request.

Deleting a Forespeak account does not automatically cancel an Apple App Store or Google Play subscription. Manage the subscription in the store where you purchased it.

If you used Sign in with Apple and automated token revocation is unavailable, you can remove Forespeak from the apps connected to your Apple Account by following Apple’s account-access instructions after deleting your Forespeak account.

Automated decisions

Forespeak may use automated systems to generate practice content or feedback, but the current service does not make a decision based solely on automated processing that produces legal or similarly significant effects about you.

Security and international processing

We use access controls, encryption in transit, protected credential storage, and other technical and organizational measures appropriate to the information we process. No system is completely secure. Our providers may process data in countries other than yours, including the United States, subject to contractual and legal safeguards appropriate to the transfer. You may contact us to ask about the safeguards applicable to your information.

Children

Forespeak is not directed to children. You may use the service only if you are old enough to consent to its use under the law where you live. If we learn that we collected a child’s personal information without required authorization, we will delete it.

Changes and contact

We may update this policy as the product or law changes. We will update the date above and provide additional notice when a change materially affects your rights. Contact us at hello@forespeak.ai.