Privacy policy

1. Who is responsible for your data?

This policy applies to the elokeo app and its presentation website. The publisher is elokeo (legal details being finalised).

For a question about your data: visit the support page.

2. Data used by the app

• Account: email address, name when provided, verification status and sign-in identifiers. If you choose Google or Apple, elokeo receives the identity information needed for that sign-in.
• Speaking attempts: audio sent for analysis, transcription, timestamps, recording measurements and exercise feedback. The content of your voice may itself contain personal information.
• Practice: completed exercises and sessions, preparation and vocabulary answers, selected course, history, practice dates, points, badges and daily streaks.
• Preferences and reminders: language, time zone, reminder preferences and, if you allow notifications, the technical delivery identifier associated with your device.
• Operation and security: session information, IP address during sign-in, technical records and analysis-service usage data such as duration, model and processing cost.
• Support: email address and the content of messages you choose to send to the team.

Do not include secrets or sensitive information about yourself or others in your exercises. The microphone is used when you start recording, after system permission. elokeo does not transmit a continuous stream while you speak: uploading starts after the recording ends.

3. Why data is processed

Account and practice data provide the service you request: signing in, analysing an attempt, retrieving progress and continuing your course. The legal basis is performance of the service where the GDPR applies.

Microphone and notification permissions are your choice. You can withdraw them in your phone's settings and turn off reminders in your profile. Without microphone access, you cannot record a new attempt.

Technical data protects sign-ins, prevents abuse, resolves incidents and monitors analysis operation. This processing relies on the legitimate interest in maintaining a secure, functional service where that basis applies.

Automated observations support practice. They may be wrong and do not measure your personality, emotions or confidence.

4. Who receives data?

People authorised by the publisher may access the data needed for maintenance, support and service operation.

• Voice analysis: audio and relevant exercise information are sent to OpenRouter for transcription and automated feedback. The current configuration uses Microsoft and Google models. Analysis providers receive the data needed for their processing.
• Sign-in: Google or Apple are involved only if you choose their sign-in method.
• Notifications: Expo and Apple or Google notification services receive the information needed to deliver reminders you allow.
• Hosting and email: the publisher's providers host the service and deliver sign-in codes or support replies. Their contact details will be added before publication.

Audio files are not published or shared with other learners. The presentation website includes no advertising or advertising tracking tools.

5. Retention and deletion

Account and practice: account information, analyses, transcriptions, sessions, progress and badges are retained while the account is used. Deleting the account removes this data from active application tables, along with sign-in sessions and reminder subscriptions.

Audio file: uploaded audio is used temporarily for analysis and is not added to an audio-file history on elokeo's servers. A local copy may remain in your device's temporary cache; this does not let you retrieve previous audio from your online history.

Analysis cache: attempt results may also remain in a technical cache for up to one hour after creation, including if the account is deleted during that time.

Processing records: some technical analysis usage and cost data may remain after deletion. The direct reference to your account is then removed. Their retention period will be specified before publication.

Backups: The hosting backup rotation and deletion periods will be specified before publication.

Analysis providers: Retention and deletion terms for data already sent to providers will be confirmed before publication. The absence of an audio archive at elokeo does not mean these providers retain no data.

Support and deletion requests: Request processing and retention periods will be specified before publication.

6. Security and transfers

Account access is authenticated. Email codes expire; mobile session credentials are kept in the system's secure storage. Administrative access is restricted to authorised people.

Some providers may process data outside your country, including transcription, analysis and notification services. Processing countries and applicable transfer safeguards will be confirmed before the service is published.

7. Your choices and rights

You can turn off reminders, change preferences and delete your account in the app. An account deletion request page is also provided if you no longer have the app.

Where the GDPR applies, you can request access, correction, erasure, restriction or portability of your data and object to certain processing under the regulation's conditions. You can also withdraw consent and contact the competent data protection authority.

Use the contact at the start of this page. Your identity may need to be verified to protect your account.

8. The website and updates

This landing page does not create accounts, record your voice or set tracking cookies. Fonts and images are served with the site. Contact forms prepare an email in your mail application and do not store your input on this website.

Pages and links may change with the service. The date at the top of this policy shows its latest update. Significant changes to data processing will be communicated through an appropriate channel.