Privacy Policy
By downloading, accessing, or using any Speakify English service — including the mobile application, student portal, or any associated platform — you unconditionally accept this Privacy Policy and our Terms & Conditions. If you do not agree, you must not use any of our services.
1. Data Controller
Dr. Muskaan Advani Nayyar (Sole Proprietor)
Trading as: Speakify English
Address: Nagpur, Maharashtra, India
Email: support@speakifyenglish.com
Website: speakifyenglish.com
2. Data We Collect
We collect only the data necessary to provide our Services:
| Category | Data Collected |
|---|---|
| Identity & Contact | Full name, email address, phone number, profile photo |
| Enrolment & Academic | Course details, enrolment status, session history, attendance, progress scores, quiz results, trainer notes, materials accessed |
| Payment | Transaction IDs, payment status, and amount paid. Full card/bank details are processed solely by Razorpay/UPI and are never stored by us. |
| Device & Technical | Device model, OS version, app version, push notification token, and usage logs for diagnostics |
| AI Interaction (Speako) | Conversation inputs and AI-generated responses, retained for quality assurance and safety monitoring |
| Consent Records | Timestamp, policy version, and acceptance record — retained as a compliance record under the DPDP Act, 2023 |
3. Purpose and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Delivering training, managing bookings, tracking progress, sending session reminders | Performance of contract |
| Improving our Services, platform security, abuse monitoring, academic record keeping | Legitimate interests |
| Financial and tax record-keeping | Legal obligation (Indian tax law) |
| Retaining consent records | Legal obligation (DPDP Act, 2023) |
| Push notifications | Consent (withdrawable at any time via device settings) |
4. Third-Party Data Processors
We share data with the following processors solely to deliver our Services:
- Supabase Inc. — Database and authentication hosting (AWS infrastructure, SOC 2 Type II certified).
- Razorpay Software Pvt. Ltd. — Payment processing (RBI regulated).
- UPI / NPCI — Payment processing.
- Groq Inc. / Meta Platforms Inc. — AI inference for the Speako tutoring feature. Your conversation inputs are processed by LLaMA-based models via Groq Cloud. By using Speako, you consent to this processing.
- Expo Inc. — Push notification delivery infrastructure.
We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Enrolment and session data | Duration of enrolment + minimum 3 years |
| Consent records | Permanently retained (DPDP Act, 2023 requirement) |
| Payment records | Minimum 7 years (Indian financial regulations) |
| AI conversation logs (Speako) | 90 days, then permanently deleted unless flagged for safety review |
| Device/technical logs | 30 days |
To request deletion of your account, email support@speakifyenglish.com. Requests are processed within 30 days, subject to applicable legal retention obligations.
6. Data Security
We implement the following security measures:
- All data is transmitted over HTTPS using TLS encryption.
- Data at rest is stored on Supabase’s AES-256 encrypted infrastructure.
- Access to data is restricted to authorised personnel through Role-Based Access Control and Row Level Security policies enforced at the database level.
- Authentication is managed via Supabase Auth with secure session tokens.
No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security against all threats beyond our reasonable control.
7. Your Rights Under the DPDP Act, 2023
You have the following rights regarding your personal data:
- Right of Access — Request a summary of your personal data held by us.
- Right to Correction and Erasure — Request correction of inaccurate data or erasure, subject to legal retention obligations.
- Right to Grievance Redressal — Raise a complaint through our Grievance Officer (see Section 9).
- Right to Nominate — Nominate an individual to exercise your rights in the event of your death or incapacity.
- Right to Withdraw Consent — Withdraw consent for push notifications at any time via your device settings. Note that withdrawal may affect your ability to receive session reminders.
To exercise any of these rights, email support@speakifyenglish.com. We will respond within 30 days of receipt.
8. Children’s Data
Our primary Services are not directed at persons below 18 years of age. Where enrolment of a minor is permitted (for example, through the Fluent Buddies programme), verifiable parental or guardian consent is required prior to enrolment and before any personal data is collected. The parent or guardian must provide consent on behalf of the minor and is responsible for all data-related obligations.
If we become aware that personal data has been collected from a minor without the requisite parental consent, we will take prompt steps to delete that data and close the account.
9. Grievance Officer
As required under the Information Technology Act, 2000 and IT (SPDI) Rules, 2011:
Name: Lakshya Advani Nayyar
Designation: Operations Head & Grievance Officer
Email: support@speakifyenglish.com
Address: Nagpur, Maharashtra, India
Response Time: Within 30 days of receipt of complaint.
10. Cross-Border Data Transfers
Some of our third-party service providers (Supabase, Groq, Expo) process data on servers located outside India. By using our Services, you consent to the transfer of your personal data to these providers. Such transfers are subject to appropriate contractual safeguards and the privacy policies of those providers.
11. Cookies and Tracking
The Speakify English student portal may use session storage and local browser storage (not tracking cookies) solely to maintain your login session and user preferences. We do not use third-party advertising cookies or behavioural tracking technologies.
12. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated through the app or portal. The updated Policy will be published with a revised effective date. Continued use of our Services after the updated Policy is published constitutes your acceptance of the changes.