Privacy Policy

1. Information we process

Google or Apple sign-in provides account identifiers, your email and available profile details such as your display name. We store account settings, free-practice usage, practice session status, response transcripts, scores and feedback. If you contact support, we store the subject, message, account identifier and request status.

2. Microphone recordings and retention

Your microphone is used during practice response windows, with your permission. The recording is sent to our server for transcription. ShadowPrep does not save learner voice recordings in its audio library or database; the recording is processed transiently for that request. This does not mean that a processing provider deletes it immediately. Transcripts, scores and history currently remain stored without automatic expiry so you can review progress. You can request deletion through support.

3. OpenAI processing

We send your response audio to OpenAI’s speech-to-text API. We send practice sentence text to OpenAI’s text-to-speech API to generate the audio you hear. We do not intentionally include your name or email in either audio API request. Generated practice audio is cached and reused; it is not a recording of your voice. Response scoring compares the returned transcript with the reference sentence within ShadowPrep.

OpenAI’s processing, retention and international transfers depend on its API policies and the settings applicable to our account. We do not claim zero provider retention or that processing happens only in your country. See OpenAI’s API data controls for its current policy.

4. Why we use information

We use information to sign you in, deliver and score practice, show your history, enforce access limits, answer requests and protect the service. Depending on applicable law, processing relies on providing the requested service, legitimate interests in security and service reliability, and consent where required. Withdrawing microphone permission stops voice practice but does not automatically delete existing results.

5. Providers, storage and security

Lovable Cloud hosts account and application data. Google or Apple handles your sign-in, and OpenAI processes speech requests. Data may be processed outside your country. We restrict account history to its owner and authorised administration. Access to practice audio uses temporary links. No online service can guarantee absolute security.

6. Session storage and operational records

Browser storage maintains your sign-in session. We keep operational error records containing an operation, error category, status code when available and timestamp—not audio, transcripts, secret keys or raw provider messages. Hosting and processing providers may also maintain their own operational logs. There is currently no automatic expiry for application support and error records.

7. Your choices and requests

You can sign out, revoke microphone permission or stop using the service. Depending on applicable law, you may request access, correction, deletion, restriction or a copy of your information, and complain to a relevant data protection authority. Send requests through Support. We may verify your identity before acting and retain information where legally required.

8. Crypto payment records

For purchases we store your account-linked order, plan, exact amount, receiving destination, submitted transaction hash, verified sender and recipient addresses, blockchain timestamps, verification results and access period. These records support payment verification, access, dispute handling and security. Transaction hashes and wallet transfers are public blockchain information; linking them to your account remains restricted to you and authorised administration. Blockchain data cannot be erased by ShadowPrep. We never request or store wallet private keys, recovery phrases or seed phrases. Payment records currently have no automatic expiry; contact Support with privacy requests.