What we know about you, why, and how long we keep it. Version dated November 1, 2026.
We never see your card number.
Only two of your voice recordings ever reach our server: the ones from day 1 and day 30. All the others stay on your phone.
We do not identify people by voice, and we do not train any software on your voice.
Your data is not sold to anyone, under any circumstances.
Orange Leopold Ltd, registration number HE364800, Anthimou Panaretou 4, Universal Area, 8036 Paphos, Cyprus.
For any question about your data, write to help@speak-and-learn.com. We have not appointed a data protection officer: we are a small company, and the law does not require one.
| What | Where it comes from |
|---|---|
| Your email | you enter it when you pay; we send your login link there |
| The name the lessons use for you | you enter it yourself; it can be any name |
| Your country | needed for tax |
| Recordings of your voice | you record them during the lessons |
| Your progress: which day you are on, the answers you chose, the tasks you have completed | generated automatically as you study |
| Your Telegram name | when you join the group |
| Payment details: amount, date, last four digits of the card | sent to us by Stripe |
| How you work through a lesson: which days are done, whether you pressed “listen again”, whether you opened the text and the translation, how long you paused before answering | generated automatically during lessons |
| Technical logs: your IP address, your browser, software errors | generated automatically when you visit the site |
We never see or store your card number. Stripe takes it directly; it never reaches us.
Your voice is personal, so here are the facts, briefly and precisely:
On the home page you can tap the microphone, say a phrase out loud and immediately hear yourself alongside the speaker. That recording goes nowhere. It lives in your browser’s memory, it is never sent to our server, and we neither receive nor keep it. Close or reload the page and it is gone. Your browser itself asks for permission to use the microphone, and saying no affects nothing else: the rest of the page works exactly the same.
| Why | Legal basis |
|---|---|
| Giving you access, guiding you through the lessons, reviewing your two recordings | performance of the contract, Art. 6(1)(b) GDPR |
| Emails about your lessons, your access and your payment | performance of the contract |
| Accounting and tax | legal obligation, Art. 6(1)(c) |
| Security, protection against attacks, backups | legitimate interest, Art. 6(1)(f) |
| The Meta pixel and advertising | your consent, Art. 6(1)(a) — only after you press “Accept” in the cookie banner |
| Emails with news and offers | your consent; every email has an unsubscribe link |
You can withdraw your consent at any time. This does not affect anything done with your consent before you withdrew it.
| What | How long |
|---|---|
| Your day one recording, if you did not pay | 7 days, then it is deleted automatically, together with everything else we hold about you. If you come back and pay within that time, the recording is kept and becomes your “point A”, which we compare your voice with at the end of the month |
| The “point A” and “point B” recordings | while you have access, and for 6 months after the end of the last month you paid for. If you renew, your series of recordings is kept and continues |
| Email, name, lesson progress | 12 months after your access ends, so that you can come back and pick up where you left off |
| Payment records and accounting documents | as long as Cypriot tax law requires |
| Server logs | 30 days |
Until you record something, we hold nothing about you on our server. You can open day 1, choose how the lessons address you and leave: that choice stays in your phone’s memory and never reaches us. A record of you is created only when you record your voice.
If you ask us to delete your data sooner, we will delete everything except what tax rules require us to keep.
You can download your own recordings. The trainer has a “Download my recordings” button: save the files and keep them for as long as you like. We are not allowed to keep them forever, but you are.
Only those we need in order to provide the service. We have a data processing agreement with everyone who processes data on our behalf. Telegram and Meta are independent companies with rules of their own, so we list them separately.
| Who | What for | Where |
|---|---|---|
| Hetzner | server, database, storing the recordings | Germany and Finland, EU |
| Stripe | payment processing | EU and USA |
| Resend | sending emails | EU and USA |
| Sentry | error reports, with no voice recordings and no personal data | EU |
| Umami | visit counter, on our own server, with no cookies | EU |
| Telegram | the group | outside the EU, under their own rules |
| Meta | pixel and advertising — only after you consent | outside the EU |
| Teachers of Russian as a foreign language who work with us | they listen to “point A” and “point B” and prepare your review | they work under contract and are bound by a confidentiality obligation |
We do not sell your data to anyone or share it for anyone else’s advertising.
Some of these services are in the United States. Those transfers are made under the standard contractual clauses approved by the European Commission and under the EU–U.S. Data Privacy Framework.
Telegram is a separate company with its own rules. Everything you write and say in the group is seen by the other members. We are not responsible for how Telegram handles your data, and we cannot stop another member from taking a screenshot. So do not say anything there that you would not say in front of strangers.
You can:
Write to help@speak-and-learn.com and we will answer.
You can complain to the Commissioner for Personal Data Protection of the Republic of Cyprus, or to the equivalent authority in the country where you live.
The site runs over a secure connection. The database and the recordings are stored on a server in Europe, and only people who need them for their work can access them. Backups are made every day.
If a data breach ever occurs that could harm you, we will notify you and the Commissioner, as the law requires.
The trainer is for adults. You must be 18 or older to buy access. We do not knowingly collect children’s data.
If this policy changes, the new version will be posted here. We will email you about any important changes.