Privacy Policy

1. Who we are

AIccentCoach is an AI-powered pronunciation coaching platform. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), Brazil's Lei Geral de Proteção de Dados (LGPD), and the California Consumer Privacy Act (CCPA).

2. Data we collect

Account data

• Email address and hashed password (via Supabase Auth)
• Account creation date
• Subscription plan and billing status

Practice data

• Text passages you read or submit for practice
• Audio recordings you make during practice sessions
• Transcriptions and AI-generated feedback
• Conversation and presentation session history

Payment data

• Stripe customer ID and subscription details
• We do NOT store credit card numbers — Stripe handles all payment processing

Technical data

• Authentication tokens stored in your browser (localStorage and cookies)
• Session preferences stored in sessionStorage
• Custom topics stored in localStorage

3. How we use your data

• Provide the service: Process your audio, generate transcriptions, and deliver AI coaching feedback
• Authentication: Keep you signed in and secure your account
• Billing: Process subscription payments via Stripe
• Improve the service: Understand usage patterns to improve the product

4. Third-party services

To provide the service, we work with trusted third-party providers for the following purposes:

• Authentication & data storage: Your account information and practice session data are stored securely with our database provider.
• Speech processing: Audio recordings are sent to a speech-to-text service for transcription. Text may be sent for speech synthesis. Audio is processed in real-time and is not permanently stored by the provider.
• AI coaching: Your transcriptions and practice text are sent to an AI service to generate pronunciation feedback and coaching suggestions.
• Payment processing: Subscription payments are handled by a PCI-compliant payment processor. We never store your full credit card number.
• Hosting: The application is hosted on a cloud platform that may process requests in multiple regions.

All third-party providers are contractually bound to protect your data and process it only as instructed by us. For details on specific providers, contact us at privacy@aiccentcoach.com.

5. Legal basis for processing

• Contract performance: Processing necessary to provide the service you signed up for
• Consent: You consent to data processing when creating an account and using the service
• Legitimate interest: Service improvement and security

6. Your rights

Under GDPR, LGPD, and CCPA, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Update or correct your data (via Account settings)
• Deletion: Delete your account and all associated data (via Account settings)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time by deleting your account

To exercise any of these rights, use the account management features in your Account settings or contact us at the email below.

7. Data retention

• Account data is retained while your account is active
• Practice session data is retained while your account is active
• When you delete your account, all data is permanently removed from our database
• Audio recordings are processed in real-time and not stored on our servers
• Stripe retains payment records per their own retention policy

8. Cookies and local storage

We use the following browser storage mechanisms:

• Essential cookies: Authentication tokens to keep you signed in
• localStorage: Session data, custom topics, and consent preferences
• sessionStorage: Temporary practice content cleared when you close the tab

We use Google Tag Manager to manage analytics tags. You can reject non-essential tracking via the cookie consent banner shown on your first visit.

9. International transfers

Your data may be processed in the United States by our third-party providers (OpenAI, Anthropic, Stripe, Vercel, Supabase). These transfers are protected by Standard Contractual Clauses (SCCs) and each provider's data protection agreements.

10. Children

AIccentCoach is not intended for children under 13 years of age. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the website.

12. Contact

For privacy-related questions or to exercise your rights, contact us at: privacy@aiccentcoach.com