Privacy Policy
Effective October 10, 2026
VocaLecta (“we”) is a website where adults practice speaking a language out loud with an AI tutor. This policy explains what we collect, why, who helps us run the service, and the choices you have. Questions: support@vocalecta.com.
What we collect
| What | When | Why |
|---|---|---|
| Email address, and if you continue with Google, your name and profile picture | When you create an account | To sign you in, and to send sign-in links, receipts and the messages you ask for |
| Your confirmation that you're 18 or older | At sign-up | The service is for adults |
| Your learning profile: who you want to speak with, how much you understand, what usually stops you, level, daily goal, time zone | The questions before sign-up, and Settings | To pitch conversations at your level and count your streak in your own time zone |
| What your tutor remembers: what to call you, people you mention and how they're related to you, where your family is from, interests, and a one-line summary of each of your last five sessions | Onboarding, Settings, and the review after each session | To make conversations personal. You can see, edit and delete every item in Settings |
| Before you sign up: your answers to the first questions and the transcript of the 60-second warm-up, kept against a random ID in a cookie on your browser, with a one-way scrambled (hashed) copy of your network address | When you answer the questions or do the warm-up, before you have an account | To show your starting point and keep your answers if you come back. Added to your account when you sign up; deleted after 7 days if you don't. The hashed address limits warm-ups per network |
| Your email choices: a daily practice reminder, and product news (both off unless you tick them) | At sign-up and in Settings | To send only the emails you asked for |
| How a session felt (“too easy”, “about right”, “too hard”) and, if you answer, how you heard about VocaLecta | After a session | To pitch sessions better and learn which channels bring people |
| Your voice, during a session | While a session is running | Sent live to our voice AI provider so the tutor can hear and answer you. We don't record or store your voice. |
| Transcripts of your sessions and the feedback on them | After each session | For your corrections, saved phrases and progress. You can delete them in Settings |
| Saved phrases and your review history | When phrases are saved and reviewed | For spaced-repetition review |
| Practice statistics: minutes, sessions, streak, scores, the lessons you finish and your answers in them, words you got wrong in word practice, hearts and points | As you practice | Progress, daily limits (30 voice minutes a day on paid plans) and the free allowance |
| A one-way scrambled (hashed) copy of your email and of your network address | When you use the free allowance | So each person gets one free allowance. The hashed email is kept even after you delete your account, and can't be turned back into your address |
| Usage events: pages and actions such as starting a session or reviewing phrases, the answers you pick before sign-up, a random visitor ID, device type, country and region | As you use the site | To understand how the service is used and improve it |
| Ad measurement: the pages you visit, the ad that brought you, the Meta Pixel's browser IDs, your IP address and browser details, and your email address in hashed form | Only while ad measurement is on for you (see Your choices) | To see which ads work and show our ads to people likely to find VocaLecta useful |
| Payment details | When you buy a plan | Entered in Whop's secure payment form. We never see your card number |
| A record of what you agreed to when you bought a plan: the plan, the price, the exact wording shown above the pay button, the time, your IP address and browser | When you open checkout | To show what you agreed to, as auto-renewal laws require |
| IP address and basic device information | On every request | To keep the site secure, limit abuse and fix errors |
| Messages you send us | When you contact us or report something the tutor got wrong | To reply and to fix content |
We never put the content of your sessions (transcripts, phrases, names you mention, your voice) into analytics or ad tools, and we don't sell personal information.
Who we share it with
These companies help us run VocaLecta and get only what they need for their part. Except for advertising (see below), they may use it only to provide their service to us.
| Company | What they do | What they get |
|---|---|---|
| OpenAI | The AI tutor's voice and understanding, the review after each session, translations and suggestions, and phrase audio | Your voice during sessions, the tutor's instructions (including what your tutor remembers about you), transcripts, and the phrases being spoken. OpenAI doesn't use API data to train its models; it may keep it for up to 30 days for abuse monitoring |
| Clerk | Sign-up and sign-in | Your email address, your name and profile picture if you continue with Google, and the IP address and browser of each sign-in |
| Sign-in, only if you choose “Continue with Google” | That you're signing in to VocaLecta. Google sends us your name, email address and profile picture, never your Google password | |
| Whop | Payments and plans | Your payment details (in Whop's own form), email, purchase history, and the ad campaign that brought you, if any |
| Neon | Our database | The account, learning and practice data described above, stored for us |
| Vercel | Hosts the website and stores phrase audio | Requests to the site, IP addresses and server logs |
| PostHog | Product analytics | Usage events, a random visitor ID, device type, your approximate location (country and region) and the ad that brought you. Never session content, names or emails |
| Meta (Facebook and Instagram) | Runs and measures our ads | Only while ad measurement is on for you: the pages you visit, the ad that brought you, browser IDs, IP address and browser details, your email address in hashed form, the version of our homepage you arrived on, and these events: taps on the homepage's buttons and video, sign-up (with who you want to speak with, how much you said you understand and your daily goal), your first completed session, opening checkout, subscribing, and each charge with its amount |
| Resend | Sends our emails | Your email address and the email's content |
We may also share information if the law requires it, or to protect our users, the service or our rights.
How long we keep it
| Your account, profile, tutor memory, transcripts, phrases and progress | Until you delete them or your account |
| Usage events (PostHog) | Up to 24 months |
| Browser IDs saved for ad events | While ad measurement is on for you; removed when you turn it off |
| Payment records | As long as tax and accounting rules require |
| Hashed free-allowance records | Kept, so one free allowance per person holds |
| Answers and warm-up from before sign-up, if you never sign up | 7 days |
| Purchase agreement records | At least 3 years after the purchase |
Your choices
- Ad measurement. Turn it off on Your privacy choices. We also honor the Global Privacy Control signal from your browser. In the UK, the EU, Switzerland and Quebec, it's off unless you choose Accept on our cookie notice.
- Tutor memory. See, edit or delete each item, or forget everything, in Settings.
- Transcripts. Delete them all in Settings.
- Emails. We email you only about your account and purchases, plus a daily reminder if you turn it on (one-click unsubscribe).
- Delete your account in Settings: this removes your profile, transcripts, phrases, progress and tutor memory, and cancels any plan.
- Access or correct your data, or ask us anything about it: support@vocalecta.com.
Cookies and similar storage
We use cookies and your browser's storage to keep you signed in, remember your choices, run analytics (PostHog, under names starting with ph_) and, when ad measurement is on, the Meta Pixel (_fbp and _fbc). The ad tags that brought you are kept for 90 days.
Adults only
VocaLecta is for people 18 and older. If you believe someone younger has signed up, tell us and we'll delete the account.
Where your data is processed
We're based in the United States, and our providers process data in the US. If you're in the UK or the EU, we rely on your consent for analytics and ad cookies, on our contract with you to provide the service, and on our legitimate interests to keep it secure; transfers to the US use the safeguards our providers offer. You may have rights to access, correct, delete or move your data, to object, and to complain to your data protection authority.
Changes
If we change this policy in a meaningful way, we'll update the date above and tell signed-in learners in the app or by email.