Privacy Policy

About ShadowSpeak

ShadowSpeak is a product of Elenchus LLC, a limited liability company registered in the State of Illinois, United States (File Number 17746634). You can reach us at support@shadowspeak.io.

This Privacy Policy explains what data ShadowSpeak collects when you use the iOS app and the shadowspeak.io website, how we use it, where it is stored, and the rights you have over it.

Eligibility

ShadowSpeak is intended for users aged 13 and over. If you are under 13, please do not use the service or submit any personal information to us.

What We Collect

Account information

• Sign-in identifier — when you sign in with Apple or Google, we receive an identity token and your email address (or the relay address you choose with Sign in with Apple). We do not receive your password.
• Display name — optional; whatever you set in the app.

Practice data

• Audio recordings — short voice clips (up to 60 seconds each) you record while practicing a flashcard. Recordings are used to generate your 4-axis feedback (pronunciation, chunking, stress, pitch) and to let you review your own attempt history.
• Feedback scores and metrics — the per-axis pass/fail and quantitative scores computed by our ML pipeline (MFA alignment, GOP, CREPE pitch tracking, stress detection).
• Episode + flashcard history — which episodes you claimed, which flashcards you practiced, and when.

Subscription + billing

• Apple in-app purchase receipts — when you subscribe to Premium, Apple sends us a signed transaction receipt so we can grant access. We do not see your credit card number or payment details; that information stays with Apple.
• Subscription state — tier (free / premium), expiry date, and notifications from Apple when your subscription renews, lapses, or is refunded.

Device + notifications

• Apple Push Notification device token — if you allow notifications, we store the device token so we can tell you when an episode is finished processing.
• App version, iOS version, device model — included in crash reports.

Diagnostic + operational data

• Error and performance telemetry — when something crashes or fails on the server, we record the stack trace and minimal context so we can fix it. We use Sentry and Better Stack as our providers for this; we configure them to not capture request bodies or PII fields by default.
• App store crash reports — Apple shares anonymized crash data through App Store Connect.

Website (shadowspeak.io)

• Waitlist email — if you submit the waitlist form, we store your email address (and optional podcast preference) so we can tell you when the app is available in your region.
• Aggregate site analytics — basic page-view counts and referrer information. We do not use third-party advertising trackers.

How We Use Your Data

• Provide the service — process episodes you claim, run ML feedback on your recordings, save your practice history, and return the right content to your device.
• Authenticate you — match your Apple or Google sign-in identifier to your account.
• Process subscriptions — verify your Apple receipt, keep your entitlement up to date, and surface usage information in the app.
• Notify you — push notifications when an episode is ready to practice, and occasional product or service announcements by email.
• Detect and fix problems — debug crashes, identify failed pipeline runs, and improve reliability.
• Comply with the law — respond to subpoenas or other valid legal requests when required.

We do not use your audio recordings, practice data, or account information to train third-party machine-learning models or to serve advertising.

Where Your Data Is Stored

ShadowSpeak runs on a combination of US- and EU-region cloud infrastructure:

• Application database (Amazon Web Services RDS, PostgreSQL) — account, subscription state, practice history. United States region. Encrypted at rest.
• Audio storage (Cloudflare R2) — your episode source audio and your shadowing recordings. United States region. Encrypted at rest.
• Compute (Fly.io, Modal) — backend API, Celery worker, ML inference. United States region for primary workloads.
• Error tracking (Sentry) — United States region.
• Log shipping (Better Stack) — European Union region (Frankfurt).
• Apple Push Notifications — APNs servers operated by Apple.

If you access ShadowSpeak from outside the United States, your data will be transferred to and processed in the regions listed above.

Third-Party Service Providers

To deliver the service we work with the following vendors. We share only the minimum data each one needs to do its job, and they are contractually prohibited from using that data for anything else:

• Apple (Sign in with Apple, App Store, in-app purchases, push)
• Google (Sign-In with Google)
• Amazon Web Services (RDS — application database)
• Cloudflare R2 (audio object storage)
• Fly.io (application hosting)
• Modal (GPU compute for transcription and diarization)
• Groq (Whisper transcription)
• OpenRouter (LLM inference for episode segmentation)
• Sentry (crash and error tracking)
• Better Stack (log search and uptime)
• UptimeRobot (external uptime monitoring)

We do not sell or rent your personal information to anyone, ever.

Audio Recordings — Important Notes

• Each recording is associated with your account and the flashcard you were practicing.
• Recordings are processed automatically by our ML pipeline to produce the 4-axis feedback you see in the app. No human listens to your recordings as part of normal operation.
• You can delete an individual recording from inside the app at any time. Deleting your account purges all of your recordings within 30 days (see "Your Rights" below).
• We do not use your recordings to train external machine-learning models, and we do not share recordings with any third party except as described in this Policy.

Cookies and Tracking

The iOS app does not use cookies. The shadowspeak.io website uses only essential first-party storage required for the site to work (for example, remembering your waitlist consent). We do not use third-party advertising trackers, cross-site identifiers, or fingerprinting.

Your Rights

You can:

• See what we have — request a copy of the data associated with your account.
• Correct it — ask us to update inaccurate information.
• Delete it — delete your account from inside the app or by emailing support@shadowspeak.io. When you delete your account, your audio recordings, practice history, and account record are scheduled for deletion. We complete the purge within 30 days. During that window you can email us to cancel the deletion; after the window your data cannot be recovered.
• Opt out of email — every product email has an unsubscribe link, or email us to be removed.

California residents have additional rights under the CCPA, and residents of the European Economic Area / United Kingdom have rights under the GDPR. To exercise any of these, email support@shadowspeak.io and we will respond within 30 days.

How Long We Keep Your Data

• Account, subscription, practice history: as long as your account is active.
• Recordings: until you delete the individual recording or your account.
• Deleted accounts: full purge within 30 days, as described above.
• Diagnostic logs: 30 days (Better Stack default), then deleted automatically.
• Crash and error events: 90 days (Sentry default).
• Apple receipts and billing records: kept for as long as required by US tax and financial-records law (typically 7 years).

Security

Connections between your device and our servers use TLS. Sensitive values such as Apple identity tokens are encrypted at rest in our database. Access to production systems is limited to the owner of Elenchus LLC. No system is perfectly secure, but we take reasonable industry-standard measures to protect your information.

Children

ShadowSpeak is intended for users aged 13 and over. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us information, email support@shadowspeak.io and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change, we will update the "Last updated" date at the top of this page and, if appropriate, notify you in the app or by email before the change takes effect.

Contact

Questions about this Privacy Policy, requests to access, correct, or delete your data, or privacy-related concerns: support@shadowspeak.io.

Elenchus LLC
State of Illinois, United States
File Number 17746634