SpeakUp Coach is operated by SpeakUp LLC ("we," "our," or "us"), which provides an AI-powered public speaking coaching platform at speakupcoach.com. We are a website only — we do not publish a mobile or native app. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account Information

When you create an account, we collect:

Email address and password (password is hashed and stored securely by Supabase)
If you sign in with Google — or another sign-in provider we offer — we receive your email address and name from that provider instead, and we never see or store a password for you.
Display name
Language preference (English or Spanish)

Speech & Practice Data

Audio recordings: When you practice, your speech is recorded and sent to our transcription provider (AssemblyAI) for processing. Audio recordings are not stored — the bytes exist only for the length of that one request and are never written to our database or to file storage. As soon as AssemblyAI returns the text, we call their deletion endpoint to erase their copy of the transcript — on every take, whether the transcription succeeded or failed.
Transcripts: The full text of your speech — everything you said — is shown to you right after you record, and is not stored. It exists only for as long as it takes to score that recording. What we keep from it is the measurements — overall score, dimension scores, filler word count, words per minute, and duration — plus the short quotations described next.
Short phrases you said, quoted inside your feedback: The coaching quotes your own words back to you. The rubric is required to cite exact phrases from your speech as evidence for each judgment, and the top tip either quotes a phrase verbatim or cites one of your measured numbers. Those quotations are saved along with your score. So while we do not keep the full transcript, we do keep the fragments of it that your feedback quotes.
How your speech was scored: We store the intermediate results behind each score — the measurements we computed, the rubric judgments and the phrases they quote, which AI model produced the score, and whether the AI step succeeded or failed. This exists so a score can be explained and audited rather than taken on trust.
Your first score: One score is kept as a starting point, so later scores can be compared against where you began. It used to come from a diagnostic recording inside a sign-up questionnaire; that flow no longer exists. It now comes from the practice you did on this device before creating an account: when you sign up or sign in, recordings made anonymously in that browser are attached to your account, and the most recent scored one becomes your starting point. If you never practised before signing up, there is no starting point and none is invented.
Time zone: Your time zone is stored so that daily streaks are counted against your local day rather than a server's.

Practice Before You Have an Account

You can record on our public practice pages without an account. To keep practicing after that, we ask you to create a free one. We record the analysis of every recording made there on our server: the measurements, the written feedback, the phrases that feedback quotes, and the practice prompt you spoke on. Those records carry the visitor identifier described below and the page you recorded on — not a name or an email address, because at that point we have not asked you for either.

If you later create an account, that practice follows you into it. This matters, so we would rather spell it out than let the paragraph above imply something it no longer means. When you sign up or sign in, we look for practice recorded in the same browser — matched on the visitor identifier below, and only from the previous 30 days — and attach it to your new account. From that moment those records are associated with your name and email address like any other practice of yours, and the phrases your feedback quotes travel with them. If you never create an account, that association never happens. The match is made on a cookie the browser sends, which identifies a browser rather than a person: if you share a browser profile with someone else, practice they did in it can be attached to your account.

We count the free practice takes made in a browser. To enforce the limit on practicing without an account, we keep one record per take that counted, containing: the visitor identifier, the time, how many words you said, the language, and which page it came from. That is the whole record. It holds no audio, no transcript and no phrases from your speech — the word count is a number, not what you said. If a take produced no usable feedback, the record is marked as refunded so it does not count against you. If you go on to create an account, these records are marked as yours, so we can tell how many people the limit actually converted.

Progress & Gamification

We store your lesson progress, XP points, gems earned, streak data, and awards to provide a continuous learning experience. Your display name, XP, tier and streak also appear on the leaderboard, which anyone can see — see Data Storage & Security.

Usage Analytics

We collect usage events (e.g., pages visited, lessons started, recordings completed) to understand how the app is used and improve it. Events are associated with your user ID, a session identifier, and the visitor identifier below. To be accurate rather than reassuring: because these events are linked to your account, they are not anonymous.

Page views. For each page view we also record the address of the page, the page that referred you to it, your browser's user-agent string, any campaign (utm_*) parameters in the link you followed, and an approximate location our host derives from your IP address: a two-letter country code, and the state or province within it. We do not store the IP address itself alongside a page view.

Why we record approximate location, and where we stop. Two reasons. It tells us where the people using SpeakUp actually are, which is how we decide what to build next. And on the practice page it decides which languages we offer first when we ask which language you speak best — a visitor in Tamil Nadu and a visitor in Delhi should not be shown the same list. We stop at the state or province. We do not store your city or your coordinates, although our host offers both, because an IP address often points at your internet provider rather than at you, so a more precise figure would look exact without being true. The location is never shown to you, never sent back to your browser, and never shared or sold. If you would rather it were not recorded at all, the contact address at the end of this policy reaches a person.

Visitor cookie. We set a first-party cookie (su_vid) containing a random identifier, so we can tell whether the same browser visited more than once and so we can apply the abuse limits below. It contains no personal information and is not readable by JavaScript on the page. If you later create an account, activity recorded under that identifier before you signed up — such as trying a practice recording on our public demo pages — can be connected to your account. We do this to understand which parts of the site actually help people, not to build a profile of you, and we do not use it for advertising or share it with advertisers.

Abuse limits and IP addresses. Our recording and analysis endpoints work without an account, so we count requests per browser to stop automated scripts from draining them. That counter is normally keyed on the visitor cookie above. When the cookie is absent, it is keyed on your IP address instead, and that address is stored in the counter row. The counters hold nothing else about you.

2. How We Use Your Data

Provide AI-powered speech feedback and coaching
Track your progress and display performance analytics
Power gamification features (XP, gems, streaks, leaderboards, awards)
Generate lesson demonstration audio via text-to-speech
Send you practice emails — a welcome message, and up to three reminders in the week or so after you sign up if you stop practicing
Improve the app based on aggregated usage patterns

About those emails. They are sent through Resend, our email provider. We log whether each one was sent, delivered, opened, clicked, bounced, or unsubscribed from, so we can tell whether they are worth sending and stop mailing addresses that bounce. Every one carries an unsubscribe link, and unsubscribing puts your address on a do-not-send list that we keep so we do not mail you again.

3. Third-Party Services

We use the following third-party services that process your data. As stated in our Terms of Service, by using SpeakUp you agree that your recording and your transcript are processed by the AI providers named here:

Supabase — hosts our database and authentication. All user data is stored in Supabase with row-level security enforced. We also use its file storage, but only for generated lesson audio — never for your recordings. See Supabase Privacy Policy.
AssemblyAI — transcribes your audio recordings into text. Your recording is sent to AssemblyAI, transcribed, and we then call their deletion endpoint to erase their copy of the transcript — both when transcription succeeds and when it fails partway through. We do not turn on AssemblyAI's speaker-identification (diarization) features, so we never ask it to build a voiceprint or a speaker profile from your recording. See AssemblyAI Privacy Policy.
Google — two separate roles. It generates your AI feedback (Gemini): your transcript (not your audio) is sent to Google to produce the written coaching notes on your score. And if you choose to sign in with Google, Google handles that sign-in and tells us your email address and name. See Google Privacy Policy.
Groq — a backup provider for AI feedback. When Google is unavailable or at capacity, your transcript (not your audio) is sent to Groq instead, so you still get a score rather than nothing. Groq no longer transcribes your audio. See Groq Privacy Policy.
Cerebras — a further backup provider for AI feedback, used when both Google and Groq are unavailable. Your transcript (not your audio) is sent to Cerebras, so you still get a score rather than nothing. Cerebras states that it does not retain the inputs and outputs of its inference service and does not train on them. See Cerebras Privacy Policy.
Resend — sends the emails described above. Your email address, your first name and the contents of the message are sent to Resend, which reports back whether the message was delivered, opened, clicked, or bounced. See Resend Privacy Policy.
ElevenLabs — generates text-to-speech audio for lesson demonstrations. Only lesson text is sent; no user data is shared. See ElevenLabs Privacy Policy.
Vercel — hosts the website and provides its own visitor and performance analytics (visits, page views, page load times, Core Web Vitals). The country code we record on a page view comes from Vercel's edge network. See Vercel Privacy Policy.

We do not sell or share your personal data with advertisers or data brokers.

4. Data Storage & Security

All data is transmitted over HTTPS/TLS encryption
Passwords are hashed using bcrypt via Supabase Auth
Database access is protected by row-level security — your practice data, scores and progress are readable only by you
The leaderboard is the deliberate exception. It shows your display name, XP, tier and streak, and it is public: anyone can load it, including people without an account. Nothing about your recordings, scores or feedback appears there. If you would rather not be listed, pick a display name that does not identify you.
API keys and secrets are stored as server-side environment variables and are never exposed to clients

5. Data Retention

Audio is never stored. Your recording is sent for transcription and discarded once the transcript comes back. It is not written to our database or to file storage, and there is no way for us — or anyone else — to play back a past recording.

We do not keep the full transcript. Once a recording has been scored, the complete text of what you said is gone. What survives is the measurements and the short phrases your feedback quotes, as described in Section 1.

Your scores and metrics are kept for as long as your account exists — we do not delete them automatically after a period of time, because they are what your progress chart is made of. If you want a specific practice session removed, contact us and we will delete it.

Deleting your account (see below) permanently removes all of it — scores, progress, awards and analytics events, including practice that was recorded before you had an account and later attached to it.

One thing deletion does not remove. The count of free practice takes described in Section 1 outlives the account. The record stays; the link to you is erased, so what is left is a word count and a timestamp against a browser identifier with no account attached to it. It contains nothing you said. We keep it because deleting it would hand out a fresh set of free takes, which is the one thing it exists to prevent.

6. Your Rights

Access & export: You can view all your practice data, scores, and progress within the app. If you want a copy of everything we hold about you, contact us and we will provide it. Note that this will not include full transcripts of what you said, because we do not keep them — only the phrases your feedback quotes.
Delete a single session: If you would rather a particular recording's score and quoted phrases not be kept, contact us and we will remove that session without affecting the rest of your account.
Delete your account: You can delete your account from the Settings page. This permanently deletes your analytics events, practice sessions, awards, progress, your written feedback, and your profile. This action cannot be undone. One deliberate exception: if you had unsubscribed from our emails, your address stays on the do-not-send list described below, with its link to your account removed. Deleting it would mean we could start emailing that address again, which is the opposite of what unsubscribing asked for.
Stop the emails: Every email we send carries an unsubscribe link, and one click stops them. We keep your address on a do-not-send list afterwards, which is the only way to guarantee we do not mail you again.

7. Children's Privacy

As stated in our Terms of Service, the Service is intended for users who are 18 years of age or older, and it is not directed to children. We do not ask for your age, and we do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe we hold data about someone under 18, contact us at the address below and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have questions about this Privacy Policy or want to request data deletion, contact SpeakUp LLC at rahul.iyengar@speakupcoach.com.