1. Introduction
Fluentra ("we", "us", "our") provides AI-assisted spoken-language coaching. This policy explains what personal data we collect, how we use it, the legal bases under GDPR, and the choices you have. By creating an account you agree to this policy.
2. Data we collect
- Account data: email address, optional first name, hashed password, authentication tokens.
- Profile data: native language, skill level, learning goals, interface language, theme preference.
- Voice recordings: audio you submit for assessment, stored in a private bucket scoped to your user ID.
- Practice data: session transcripts, scores (pronunciation, fluency, clarity, confidence), feedback, streaks, achievements.
- Billing data: Stripe customer ID, subscription status, invoice metadata. Card numbers are handled by Stripe — we never see them.
- Technical data: device type, IP address (transient), error reports, anonymized usage events.
3. How we use your data
- To deliver the speaking-practice service and generate AI feedback.
- To maintain your account, streaks, and progress history.
- To process payments and manage subscriptions through Stripe.
- To improve product quality through aggregated, de-identified analytics.
- To send transactional emails (account confirmation, password reset, receipts).
4. Sub-processors
We share the minimum data necessary with these processors:
- Supabase — managed database, authentication, and storage.
- Stripe — payment processing and subscription management.
- Google (Gemini) — AI assessment of audio recordings and transcripts.
- Cloudflare — edge hosting and DDoS protection.
We do not sell your personal data and we do not share it for advertising purposes.
5. Legal bases (GDPR)
We process account and practice data to perform our contract with you (Art. 6(1)(b)). We process billing data based on legal obligation (Art. 6(1)(c)). We process anonymized usage analytics under legitimate interest (Art. 6(1)(f)). Voice recordings are processed with your explicit consent at signup (Art. 9(2)(a)).
6. Retention
We keep account data while your account is active. Voice recordings are retained for up to 90 days, after which they are deleted automatically. When you delete your account, all personal data is permanently removed within 30 days, except where law requires us to retain invoices.
7. Your rights
- Access — request a copy of your data from Settings → Export my data.
- Rectification — edit your profile from Settings.
- Erasure — delete your account from Settings → Delete account.
- Portability — your export is provided as machine-readable JSON.
- Objection / restriction — contact us at privacy@fluentra.app.
EU residents may lodge a complaint with their local supervisory authority.
8. Children
Fluentra is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from children.
9. Microphone & audio
We only access your microphone after you explicitly start a practice session. Audio is uploaded over TLS, stored encrypted at rest, scoped to your user ID, and is never used to train third-party models.
10. International transfers
Data may be processed in the United States and the European Union. Where applicable, we rely on Standard Contractual Clauses with our sub-processors.
11. Security
We use Row-Level Security on our database, encryption in transit (TLS) and at rest, and least-privilege access for staff. No system is perfectly secure — please use a strong, unique password.
12. Changes
We will notify you of material changes by email or in-app banner at least 14 days before they take effect.
13. Contact
Questions? Email privacy@fluentra.app.