Privacy Policy

Last updated: March 27, 2026

1. Introduction

This Privacy Policy explains how SpeakForce ("Company", "we", "us") collects, processes, and protects your personal data in connection with the service provided at speakforce.app.

As a company incorporated in Türkiye, we are subject to the Law on the Protection of Personal Data No. 6698 (KVKK). For users located in the European Union, we also comply with the General Data Protection Regulation (GDPR).

2. Data We Collect

2.1 Account Data via OAuth

When you sign in through Google, Apple, or Reddit, the following information is shared by those platforms:

• Full name
• Email address
• Profile picture

We do not store your password. Authentication is managed entirely by the OAuth provider.

2.2 Voice and Conversation Data

• Voice audio: Your voice is processed in real time during conversations. Audio recordings are not stored on our servers.
• Transcripts: Text transcripts of your conversations are stored for as long as your account is active. When you delete your account, all transcripts are permanently deleted.

2.3 Usage and Technical Data

• Session logs and error reports
• Features used and session duration
• IP address and browser information

2.4 Payment Data

Payments are processed by Polar.sh. Polar.sh uses Stripe as part of its payment infrastructure. Credit or debit card information is never stored on SpeakForce servers. For details on how Polar.sh handles payment-related personal data, please see the Polar Privacy Policy.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes, based on the corresponding legal bases under KVKK and (where applicable) the GDPR:

• Providing the Service and managing your account: Performance of a contract.
• Running the AI language coach: Legitimate interest and/or your consent (where required).
• Personalized feedback and progress reports: Performance of a contract.
• Service improvement (anonymized, aggregated analysis): Legitimate interest.
• Compliance with legal obligations: Legal obligation.

4. Sharing Data with Third Parties

Your data may be shared with the following categories of third parties:

• OAuth providers (Google, Apple, Reddit) — for authentication purposes
• Payment processor (Polar.sh) — for subscription management
• AI and infrastructure service providers — for voice transcription and language processing. These providers act solely as data processors and may not use your data for their own purposes.

We do not sell your data or share it with third parties for advertising purposes.

5. Data Retention and Deletion

• Transcripts and account data: Stored for as long as your account remains active (until account deletion).
• Voice audio: Not stored — deleted after real-time processing.
• Usage logs: Stored for up to 12 months.

If you would like to delete your account, please contact us at hi@speakforce.app. After your account deletion request is processed, transcripts and account-related data associated with your account will be deleted. Data that must be retained due to legal obligations may be exempt from this rule.

6. Your Rights

Under KVKK Article 11 and the GDPR, you have the following rights:

• Right to know whether your personal data is being processed
• Right to access your data and request a copy
• Right to have inaccurate data corrected
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at hi@speakforce.app. Requests will be responded to within 30 days.

7. Cookies

The Service uses essential cookies required for session management and core functionality.

We also use Google Analytics to understand basic functional usage of the Service (for example, which pages/features are used and general usage patterns) so we can improve stability and user experience. We do not use cookies for advertising purposes.

8. Data Security

We apply industry-standard security measures including HTTPS/TLS encryption, access controls, and regular security assessments. However, no data transmission over the internet can be guaranteed to be 100% secure.

We use Cloudflare as part of our infrastructure (such as for traffic routing and protection against common web threats), which helps us improve the security and reliability of the Service.

9. International Data Transfers

Some of our service providers may operate outside of Türkiye. In such cases, we ensure that appropriate safeguards are in place under KVKK Article 9 and GDPR Chapter V (such as standard contractual clauses or adequacy decisions).

10. Changes to This Policy

We may update this policy from time to time. In the case of significant changes, we will send a notification to your registered email address. The current policy is always available at speakforce.app/privacy.

11. Contact Us

SpeakForce is operated as a sole proprietorship owned by İBRAHİM SARIKAYA.

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: hi@speakforce.app