Privacy policy
What we collect, why, who processes it for us, how long we keep it, and your rights.
Last updated: 25 September 2026
This policy explains how FluentVerify handles your information. We wrote it in plain English on purpose. If anything is unclear, contact us.
Who we are
FluentVerify is operated by [Operator legal name], [postal address]. We are the "controller" of your personal data: we decide why and how it is used.
What we collect
Your voice recordings. When you take an assessment, we record you reading short texts and speaking freely. A voice recording can identify you. In some countries it counts as biometric or sensitive data, so we only record after you tick the consent box, and you can stop at any time.
Measurements and your report. Numbers we measure from your recordings (for example speed, pauses, pitch, and pronunciation scores) and the report built from them.
Account details, if you create an account. Your email address, an optional display name, and a password. We store only a scrambled form of your password (a bcrypt hash) that cannot be turned back into the password.
Payment records, if you buy credits. Which pack you bought, the amount, and the payment status. Your card details go to Stripe, not to us. We never see or store your card number.
Messages you send us. What you write in the contact form or to a teacher in our directory, with your name and email.
Security information. Your IP address and browser type, used for rate limits, fraud prevention and our security log.
We do not use advertising trackers, analytics cookies or social media pixels.
Why we use it
- To record, measure and score your speech — your consent, given with the checkbox before recording.
- To run your account and keep your history — our contract with you.
- To take payment and keep financial records — our contract with you, and legal obligations (tax and accounting).
- To answer your messages — our legitimate interest in helping you.
- To keep the service secure and stop abuse — our legitimate interest in a safe service.
- To email you product news — your consent, only if you opted in. You can opt out at any time.
You can withdraw consent at any time. This does not affect what we did before you withdrew it.
Who processes data for us
We use a small number of service providers. They process data only on our instructions.
- Microsoft Azure AI Speech — scores pronunciation. It receives your recordings (not your name or email). Its servers may be outside your country, including in the United States.
- Stripe — takes card payments. See Stripe's own privacy policy.
- Amazon Web Services — hosts our servers, database and backups.
- Cloudflare — runs our domain name (DNS).
- Our email provider — sends account and report emails.
No language model or AI chatbot ever receives your recordings. The speech-to-text step runs on our own server.
When data leaves the UK or European Economic Area, we rely on the provider's standard contractual clauses or an equivalent legal safeguard.
We do not sell your data, and we do not share it for advertising.
How long we keep it
- Recordings: deleted 30 days after your assessment finishes. Recordings from unfinished assessments are deleted after 7 days.
- Backups: encrypted backups are kept for up to 35 days and then deleted, so a deleted recording can survive in a backup for up to 35 more days.
- Measurements and reports: kept while you have an account, so you can compare later tests. Reports from assessments without an account are kept for up to 12 months.
- Account details: kept until you ask us to delete your account.
- Payment records: kept for as long as tax law requires (usually up to 7 years).
- Security logs: up to 90 days.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of your data
- correct it
- delete it
- limit or object to how we use it
- give it to you in a portable format
To make a request, use the contact page. We reply within one month. You can also complain to your data protection authority.
Cookies
We use only cookies that the site needs to work: to keep an assessment running in your browser, to keep you signed in, and (while the site is in private preview) to remember that you entered the access code. We do not use advertising or analytics cookies, so we do not show a cookie banner.
Children
FluentVerify is not meant for children under 16. Do not use it if you are under 16.
Security
Recordings are encrypted when stored. Connections to the site use HTTPS. Access to our systems is limited and logged. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a serious breach as the law requires.
Changes
If we change this policy in a way that matters, we will say so on this page and, if you have an account, by email.