Privacy Policy
Effective date: 12 October 2026. Version 2026-10-15.2 (consent notice 2026-10-12.2).
1. Who we are
Speaki ("we", "us"), Daffodils Inn, 823P, Sector 47, Gurugram, Haryana 122018, runs Speaki, where you practise spoken English with Tara, an AI speaking partner. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the "Data Fiduciary" for your personal data.
2. The short version
- We collect what we need to run Speaki, and app usage analytics (which screens you open and which buttons you tap) for everyone, so we can improve the app. Never what you say or type.
- If you are 18 or over, we also measure our ads, and share ad measurement data with AppsFlyer, Google and Meta. We never share the data of anyone under 18 with an ad platform, or of anyone who has not told us their age.
- If you are 18 or over, we also send app usage analytics to Google Analytics, to see how people use Speaki. Google knows you by a random ID, not your name or mobile number, and gets no advertising ID. Nothing is sent to Google Analytics for anyone under 18, or for anyone who has not told us their age.
- You can opt out of app usage analytics, ad measurement, or both, by emailing [email protected].
- If you are 18 or over, we record your practice calls (your voice and Tara's) to improve Tara's quality. We keep the recordings for 30 days, then delete them. We never record the audio of calls by anyone under 18, or by anyone who has not told us their age. To stop recording or delete your recordings, contact support or delete your account (section 10).
- We keep your chats with Tara, and the text of your calls, so you can read them again. We never keep the recording of a voice message, only its text.
- We do not use your calls, call recordings or chats to train our own AI models, and we never sell them. The service providers that process them for us are listed in section 7.
- If you are 18 or over and tap Translate under one of Tara's replies, we send the text of that reply to Google Translate. We have no contract with Google for this (section 7). Translate is not offered to anyone under 18, or to anyone who has not told us their age.
- We never sell your personal data.
- You can see, correct or delete your data, and opt out, at any time. You can delete your account yourself, in the app under Settings (section 10).
3. What we collect, and why
To run the Service (always needed)
| Data | Why |
|---|---|
| Mobile number | To send your login OTP by SMS and to identify your account. On Android, the app can fill in the code for you from that SMS with Google's SMS Retriever, which hands it only that one message; the app does not ask for permission to read your SMS. When you pay, Cashfree or Razorpay receives it (section 7). |
| Call recordings (adults only) | If you are 18 or over, we record your practice calls, your voice and Tara's, to improve the quality of Tara's calls. See section 4. |
| Your setup answers: name, age range, gender (optional), home language, English level, goals, work, how much Tara should help you in your own language; and, if you set up with an older version of Speaki, your timeline, hardest parts, practice time and reminder style | To set up your learning profile and personalise Speaki. If you answer before logging in, they stay on your phone until you log in; then we save them to your account. Your name, English level and goal also go to our LLM gateway provider to write Tara's replies in chats and calls (section 4). |
| Reminders choice (Android) | To remember if you want practice reminders. |
| Your voice and words during a call, and the text of the call in your chat: what you and Tara said and when, a short summary, the number of sentences you said and of mistakes fixed, and up to three corrections | To hear you, understand you and reply, to show you the call again in your chat, and so Tara can remember it in your next chats and calls. See section 4. |
| Call records: call ID, start and end time, length, how the call ended | To run calls, end them on time, measure use against your pass, and fix problems. |
| Your chats with Tara: what you type, the text of your voice messages, Tara's replies and when each was sent; and a short summary of your older messages, written by our AI | To hold the conversation, show it to you again and continue where you left off. See section 4. |
| Translations of Tara's replies (adults only), when you tap Translate | To show you Tara's reply in your home language. We send the reply to Google Translate to do it. See sections 4 and 7. |
| Your voice messages: the recording, only while it is turned into text | To understand what you said. We keep only the text and the length of the message. See section 4. |
| Your progress: the days you practised, minutes of practice, number of sentences, badges | To show you your progress. |
| Your passes and payments: the start and end of each pass; for each payment, our order reference, the payment provider's references, the amount, currency, status and date, the type of payment method (for example UPI or card), and the provider's error code if it failed | To sell you a pass, confirm the payment, give you the right days, handle refunds, and keep the accounts the law requires. The provider's answers can also include details of how you paid, such as your UPI ID or the last 4 digits of your card; we do not store them. See section 7. |
| Call and chat quality data: response times, errors, AI model used, amount of text processed, estimated cost | To keep calls and chats fast and reliable. Never what you or Tara said or wrote. |
| Device and app basics: web or Android, app version, rough device class and network type (for example 4G) | To make the app work well on your phone and network. Our own records never hold your device model, advertising ID or contacts. We do not read your advertising ID or your Android ID. If you are 18 or over and use the Android app, AppsFlyer's code in the app (it runs only then) collects basic details of your phone and the app, such as the phone model, Android version, app version, language and network type, and gets your IP address as any internet service does, to measure our ads (below). It does not receive your advertising ID or Android ID. |
| Login security data: a random ID for your app install, and one-way coded (hashed) forms of your number and internet (IP) address, kept for up to 24 hours | To stop OTP abuse and repeated wrong guesses. Our app does not store your IP address itself, but our network providers (Cloudflare, Google Cloud) may record it in their network logs. |
On the web, Cloudflare Turnstile uses technical information from your browser to check that you are not a bot.
App usage analytics and ad measurement (on unless you opt out)
| What | Who | What it means |
|---|---|---|
| App usage analytics | Everyone, including people under 18 | Which screens you open and which buttons you tap, and errors you see, so we can improve Speaki. A random analytics ID is saved on your device. It stays with us (our database and analytics storage in Google Cloud) and is never shared with an ad platform. Never what you say in a call or type in a chat. |
| Google Analytics | Only if you told us you are 18 or over | The same screen and button events as above (never what you say or type), and that you signed up, started practising, bought a pass (with the amount) or were refunded, go to Google Analytics, so we can see how people use Speaki. Google knows you by a random ID made for this (not your phone number, email or account ID) and, on the website, by the random analytics ID of your browser. On the website the events come from our servers, so Google does not get your IP address or your browser details. In the Android app, Google's analytics code also collects basic details of your phone and the app (such as the phone model, Android version, app version, language and an install ID), and gets your IP address as any internet service does. We turn off ad personalisation and ad storage for it, and it does not read your advertising ID or Android ID. It is not used to show you ads. |
| Ad measurement | Only if you told us you are 18 or over | Whether an advert brought you to Speaki (the ad campaign and the type of ad click), and whether you then signed up, made your first call or bought a pass. On Android we read Google Play's Install Referrer once after you install, which says which link brought you. If you came from an ad on the web, we also keep the ad's click ID, and for Meta the IP address and browser details of that click, for up to 90 days, so we can report your sign-up or purchase to the ad platform. |
| Sharing with ad platforms | Only if you told us you are 18 or over | We share ad measurement data with AppsFlyer (for the Android app), Google and Meta, so they can measure our ads. They use it under their own privacy policies (section 7). What they get is a random ID made only for this (not your phone number, email or account ID); that you signed up, made your first call or bought a pass (with the amount paid), if a payment was refunded, and when; the ad click ID, where there is one; and, from the Android app, AppsFlyer's own install ID. They never get your name, mobile number, email, advertising ID, or anything you said or wrote. |
We never share the data of anyone under 18 with an ad platform or with Google Analytics, or of anyone who has not told us their age. If you change your age to under 18, ad measurement, sharing and Google Analytics stop at once. Before you log in, nothing of yours goes to Google Analytics, because we do not yet know your age.
To opt out, email [email protected] with the mobile number you log in with, and say whether you want to stop app usage analytics, ad measurement, or both. We may ask you to confirm it from that number. We stop from then on, on every device you sign in to. Ad measurement data, including conversions (a sign-up or a purchase) that we have already sent to AppsFlyer, Google or Meta, cannot be recalled from them; for AppsFlyer we also ask them to delete what they hold about you. Opting out of app usage analytics also stops Google Analytics, and we ask Google to delete what it holds under your random ID. If you delete your account, that random ID is deleted with it, so what Google Analytics still holds is no longer linked to you by us; Google deletes it when its retention period ends (section 6).
We do not show a consent screen in the app; this policy is the notice for these uses.
We will ask for separate consent before we ever use your conversations or recordings to improve our own AI models. Today we do not.
4. Your calls, chats and voice messages, step by step
Calls
- When a call starts, Tara gets your name, English level and goal, a short summary of your chats, and your newest chat messages and call summaries, so Tara can continue where you left off. We send them through LiveKit locked (encrypted), so LiveKit cannot read them on the way. What Tara then says in the call travels through LiveKit like the rest of the call (point 6).
- Your voice travels through LiveKit (real-time audio) to our AI system.
- Deepgram turns your speech into text. We have turned off Deepgram's use of it to improve its models.
- The text of the conversation, and what Tara got at the start (point 1), goes to our LLM gateway provider, which sends it to an AI model (by default Google Gemini) to write Tara's reply. The gateway provider keeps a log of these messages and replies.
- Cartesia turns Tara's reply into speech. Cartesia does not keep this data.
- The audio reply travels back to you through LiveKit.
Call recordings. If you told us you are 18 or over, we save the audio of each practice call, your voice and Tara's, in Google Cloud in Mumbai, India. We use it only to check and improve the quality of Tara's calls: our team may listen to some calls for that. We delete each recording 30 days after the call. We never use recordings to train our own AI models, and we never sell them or share them with advertisers. We never record the audio of calls by anyone under 18, or by anyone who has not told us their age. To stop recording, ask support: we stop from your next call (a call already running stops within about a minute) and delete your recordings within about 15 minutes. Deleting your account deletes them too.
Call text. We save the text of what you and Tara said in each call, with a short summary and up to three corrections, in your chat with Tara, so you can read it again and Tara can remember it. To write the summary, we send the text of the call to our LLM gateway provider. We keep the text until you delete your account (our LLM gateway provider's log of it is kept as described in point 4). We never use it to train our own AI models. Stopping call recording does not delete the text of your calls; deleting your account does.
Chats with Tara
- What you type is sent to our servers in India. While the chat screen is open, your messages and Tara's replies, including Tara's spoken replies when your sound is on, pass through LiveKit, our real-time provider, on their way to deliver the chat. LiveKit does not store them. It is the same provider we use for calls (section 7).
- To write Tara's reply, we send our LLM gateway provider Tara's instructions, the name you gave us, your English level and your goal, the summary of your chat (point 3), and your newest messages (at most 40), including the summaries of your calls. We never send your mobile number or your account details. The gateway provider passes the text to an AI model (by default Google Gemini) and keeps a log of these messages and replies.
- Chat summary. Once your chat is long, our AI writes a short summary of your older messages (about 150 words), and updates it as the chat grows, so Tara remembers them in your chats and calls. To write it, we send the previous summary and those messages, including the summaries of your calls, to our LLM gateway provider, which keeps a log of them and of the summary it returns. We keep one summary, replaced at each update, until you delete your account. If we stop using the text of calls in chats, a summary that includes a call's summary stays stored but is not used.
- We save your chat, your messages and Tara's replies, so you can read it again. It stays until you delete your account.
- Translate (adults only). If you told us you are 18 or over, you can tap Translate under one of Tara's replies. When you do, our servers send the text of that one reply to Google Translate, which turns it into your home language. Before we send it, we take out your name and the English phrases Tara has put in quotes for you to practise, and we put them back in the translation. We never send your own messages, your mobile number or any account ID, and nothing is sent unless you tap. Tara's reply can still mention things you told Tara, such as your work, your family or your plans, and that text does go to Google. We have no contract with Google for this (section 7). We keep the translation on our servers for 24 hours, so a second tap does not send the reply again; your app keeps it only while the chat is open. We do not offer Translate to anyone under 18, or to anyone who has not told us their age.
- We do not use your chats or their summary to train our own AI models.
Voice messages
- A voice message can be up to 2 minutes long. It goes to our servers, and from there to Deepgram, which turns it into text. We have turned off Deepgram's use of it to improve its models.
- Our servers hold the recording only while it is turned into text. We never save it.
- We keep the text and the length of the message. From then on the text is part of your chat, as above.
5. Opting out
- App usage analytics are on for everyone, and ad measurement and sharing are on if you are 18 or over, unless you opt out. There is no switch for them in the app: to opt out of either or both, email [email protected] (section 3). Opting out never stops you using Speaki.
- When we record your opt-out, we stop collecting for it from then on, your device drops data waiting to be sent for it the next time it checks with us, and we start deleting the data we collected for it, except anything the law requires us to keep. Conversions already sent to AppsFlyer, Google or Meta cannot be recalled.
- You can opt back in the same way.
- When you log out, your device forgets your account's choices; the next person using the phone starts from the defaults above.
- We keep a record of each opt-out and opt-back-in (what, when, and which version of this notice it was under) as proof.
6. How long we keep data
| Data | How long |
|---|---|
| Account (mobile number) and onboarding answers | Until you delete your account. New answers replace old ones. |
| Call records and usage records | Until you delete your account. |
| Chat messages (yours and Tara's, including the text of your voice messages) | Until you delete your account. |
| Chat summary | Until you delete your account. Each update replaces the one before. |
| Translations of Tara's replies | 24 hours on our servers, then deleted; in the app only while the chat is open. How long Google Translate keeps the text: we do not know (section 7). |
| Call transcripts and call summaries | Until you delete your account. |
| Voice message recordings | Not kept: deleted as soon as they are turned into text. |
| Call recordings (adults only) | 30 days. Deleted within about 15 minutes if you ask support to stop recording or delete your account. |
| Your progress (practice days, minutes, sentences, badges) | Until you delete your account. |
| OTP | Stored only in coded form, for 5 minutes. |
| Login sessions | Deleted 30 days after the session ends. |
| Login security data | Up to 24 hours. |
| Product analytics, and call and chat quality data | Up to 13 months. |
| Ad measurement data | Up to 6 months. |
| Usage events in Google Analytics (adults only) | Up to 14 months, the longest Google Analytics keeps them. |
| System logs (no phone numbers, OTPs, conversation text or payment details) | Up to 1 year, as Indian cyber-security rules (CERT-In) require. |
| Database backups | Deleted data is gone from backups within 30 days. |
| Proof of your consent choices | 7 years after your last choice, even after your account is deleted, to show we followed the law. |
| Passes and payment records | As long as tax and accounting law requires, even after you delete your account. |
7. Who we share data with
We share personal data only with service providers who process it for us, and only as needed. Each of them works for us under a contract, except Google Translate (below):
| Provider | What for |
|---|---|
| Google Cloud (Mumbai, India; backups in Delhi) | Hosting, database, storage, analytics |
| LiveKit | Real-time call audio, the live text of the call shown on your screen, and your home language (to choose speech-recognition languages). Also your chat messages and Tara's replies, including her spoken replies, in transit while the chat is open; it does not store them |
| Deepgram | Speech-to-text, for calls and voice messages |
| Cartesia | Text-to-speech |
| LLM gateway provider and the AI model provider it uses (Google by default) | Writing Tara's replies in calls and chats, and the summary of each call. It also receives the name you gave us, your English level and your goal, and the summaries of your chats and of each call |
| Google Translate (only if you are 18 or over and tap Translate; no contract with us) | Translating Tara's chat replies into your home language. It receives the text of the reply you tapped, without your name or the English phrases you are practising, and never your own messages, mobile number or account ID |
| MSG91 | Sending OTP SMS |
| Cloudflare | Website delivery, security, bot checks |
| Razorpay | Payments. It receives your mobile number to fill in its checkout form |
| Cashfree | Payments. It receives your mobile number, which it requires |
| Google Analytics (only if you are 18 or over, unless you opt out; never for anyone under 18) | Seeing how people use Speaki: the screens and buttons used, and sign-ups, first practice, purchases and refunds, under a random ID. In the Android app, Google's analytics code also collects basic details of your phone and the app |
| Meta, Google, AppsFlyer (only if you are 18 or over, unless you opt out; never for anyone under 18) | Ad measurement |
Meta, Google and AppsFlyer use what they receive under their own privacy policies; Google Analytics uses what it receives under Google's terms for Analytics, for us and not for advertising. We also share data when the law requires it, for example with a court.
Google Translate. To translate Tara's replies we use a free Google Translate service that is open to everyone. Google does not provide it to us under a contract, so we have no agreement with Google about this text: Google handles it under its own terms and privacy policy. We do not know whether Google keeps the text, for how long, where it processes it (it may be outside India) or whether it uses it to improve its services, and we cannot ask Google to delete it. The text travels inside the web address of the request, which web servers often record. The request comes from our servers, not from your phone, and carries no ID. We take out your name and the quoted English phrases first, but a reply can still mention other things you told Tara. Translate is only for people who told us they are 18 or over: we do not offer it to anyone under 18, or to anyone who has not told us their age. If you do not want a reply sent to Google, do not tap Translate: nothing is sent until you do.
When you buy a pass, you pay in the secure checkout of Razorpay or Cashfree, which opens from Speaki. You enter your card, UPI or bank details with them, not with us. We send them the amount, our order reference, and your mobile number (Cashfree requires it; Razorpay uses it to fill in the checkout form), and Cashfree also a customer reference. The customer reference is made from your account ID with a secret key, so it is not your account ID and cannot be turned back into it without that key. While you pay, the payment provider also collects information about your device and network, such as your IP address, to check for fraud. On Android, Razorpay's checkout can also check which UPI apps are installed on your phone, to show them to you. They handle your payment details and this device information under their own privacy policies and the rules for payments in India.
They tell us whether the payment went through, when we ask them and in messages they send us when a payment changes. Their answers can also include details of how you paid: your UPI ID, your card's last 4 digits, network and the name on it, your bank or wallet, the bank's reference for the payment, and the email address and mobile number you gave them. We take from an answer only what section 3 lists (references, amount, currency, status, date, type of payment method, error code). The rest is only held in memory while our servers read the answer: we never store it or write it to our logs. Of each message they send us, we keep only its references and a one-way coded (hashed) fingerprint of it, and delete these about 90 days after we have processed the message.
8. Data outside India
We store your account data in India. Some providers process data outside India, including your call audio and voice messages (Deepgram), Tara's reply text (Cartesia), the text of your calls and chats (the AI model provider behind our LLM gateway), the usage events sent to Google Analytics (Google processes them in many countries), and the text of Tara's replies you choose to translate (Google Translate). Indian law allows this except to countries the Government restricts. We choose providers that protect data under contract, except Google Translate: we have no contract with Google for it, so we do not know where it processes that text (section 7).
9. How we protect your data
- Data sent between your phone and us is encrypted.
- Our database is encrypted at rest. OTPs and login tokens are stored only in coded (hashed) form.
- On Android, your login token is protected by the phone's secure key store.
- Our app's logs never contain your phone number, OTP, login token, what you say or write, or your payment details.
- We limit who in our team can access personal data.
- If a data breach affects you, we will tell you and the authorities as the law requires.
10. Your rights
Under the DPDP Act you can:
- Access: ask for a summary of your data and how we use it, and who we shared it with.
- Correct or update your data.
- Delete your account and data, yourself in the app (below) or by asking us. Some records may be kept where the law requires (see section 6).
- Opt out of app usage analytics or ad measurement, by emailing [email protected] (section 5).
- Stop call recording and have your recordings deleted, by asking support (section 13).
- Nominate someone to use these rights for you if you die or cannot act.
- Complain to our Grievance Officer (section 13). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Delete your account in the app. On Android and on the web, open Settings, then Delete account, read what we delete and what we keep, type the confirmation word and confirm. It cannot be undone. Your account is closed at once: you are logged out on every phone, your mobile number is freed (if you log in with it again, you start a new account), and we start deleting your call recordings. About 15 minutes later we erase the rest (your chats, call records and text, progress, badges, name and setup answers). If you are on a call, or your last call is still closing, end it, wait a minute and try again. If you ever paid for a pass, we keep those payment records without your name or number, and a record of your consent choices, as section 6 says. Without the app, ask us (section 13) and follow the Data Deletion page.
To use another right, contact us (section 13). We may ask you to confirm the request from your registered mobile number. We reply within 30 days. The Data Deletion page lists the steps to delete your account and data, and the Grievance Redressal page says how to complain and how fast we answer.
11. Children
Speaki is open to everyone, including people under 18. We ask for your age range to set up your learning profile. If you are under 18, please use Speaki with the knowledge of a parent or guardian. We never record the audio of calls by anyone under 18, or by anyone who has not told us their age, and we never share their data with an ad platform (AppsFlyer, Google or Meta). App usage analytics (screens and taps, section 3) do include people under 18; that data stays with us. We do not offer Translate (section 4), which sends Tara's replies to Google Translate with no contract, to anyone under 18 or to anyone who has not told us their age.
From 13 May 2027 the Digital Personal Data Protection Act requires the verifiable consent of a parent or guardian before we process a child's personal data, and does not allow tracking, behavioural monitoring or advertising aimed at children. We will put this in place before then, and we will update this policy when we do.
If you are under 18, or have not told us your age, we never record the audio of your calls, but we keep their text, like your chats, until you delete your account.
12. Changes to this policy
When we change this policy, we publish a new version with a new date and show it in the app. If a change affects how we use your data, we will ask for your consent again where the law requires.
13. Contact us
- Grievance Officer: Grievance Officer, Speaki, [email protected]
- Support email: [email protected]
- Post: Speaki, Daffodils Inn, 823P, Sector 47, Gurugram, Haryana 122018
The Grievance Redressal page has the full process and the times in which we answer.