Privacy Notice
Last updated: September 18, 2026
This Privacy Notice explains how Speaking+ ("we," "us," or "our"), handles personal information when you use the Speaking+ website, applications, speaking-practice features, and related services that link to this notice (the "Services"). Open World Group LLC is responsible for the processing described in this notice.
1. Our privacy-first approach
Speaking+ is designed around data minimization. We collect only the limited personal information reasonably necessary to create and secure accounts, provide requested features, manage organizations and subscriptions, understand website use, respond to users, and comply with law.
2. Scope of this notice
This notice applies when you:
- visit speaking.plus or another Speaking+ site that links to this notice;
- use Speaking+ applications or speaking-practice features that link to this notice;
- create or manage a Speaking+ account;
- purchase or use a Speaking+ subscription or service;
- contact us for support, submit a privacy request, or communicate with us; or
- participate in a Speaking+ event, survey, or optional communication.
This notice does not govern third-party websites, applications, or services that have their own privacy practices.
3. On-device AI, audio, and learning analysis
Speaking+ uses artificial intelligence and related technologies for English speaking practice, pronunciation and fluency analysis, practice scores, and personalized learning feedback. The features available to you depend on the application version and plan.
What remains on your device
- raw microphone audio and voice recordings;
- speech segments and temporary audio buffers;
- transcripts, practice scores, and personalized feedback generated by on-device speech analysis;
- voice embeddings, acoustic features, or similar technical representations, if the feature creates them locally;
What Speaking+ does not do with audio
- We do not store speaking-practice audio on our servers.
- We do not send audio to external AI, speech-recognition, or analytics providers.
- We do not use voice data to authenticate you.
- We do not receive device-only speech data for training server-side AI models.
You control device permissions through your browser or operating-system settings. You may also delete locally stored data using available in-app controls, by clearing the application's browser storage, or by uninstalling the application. The exact result depends on your device and operating system.
Model files and software components needed for on-device processing may be downloaded to your device. Downloading those components does not require sending your audio.
4. Information we collect
We collect a limited set of server-side information. The categories below apply only when relevant to the feature you use.
Account, authentication, and organization information
- name or display name;
- email address;
- account identifier, profile image, and account role;
- authentication tokens, verification records, and two-factor authentication information when enabled;
- account status, plan, settings, and communication preferences; and
- information needed to prevent unauthorized access to your account.
Organization information
If you create or join an organization, we process its name, identifier, logo and settings, your membership and role, and invitation information such as an invitee’s email address. Authorized organization administrators may manage memberships and invitations and access member information needed for that purpose. Organization membership does not itself grant access to device-only audio or learning analysis.
Subscription and transaction information
If you purchase a subscription, our payment processor collects your payment-card details directly. Speaking+ does not receive or store your complete payment-card number or card security code. We may receive limited transaction information such as:
- transaction and invoice identifiers;
- payment status and subscription status;
- purchase date and amount;
- card brand and the last four digits of the card, where provided by the processor;
- billing country or billing address details needed for invoices and tax compliance; and
- refund, dispute, or chargeback status.
Support and communication information
When you contact us, we collect the information you choose to provide, such as your email address, the content of your request, and any files or screenshots you choose to attach. Please do not send microphone recordings, confidential workplace or client material, or sensitive personal information in support requests. Information you deliberately include in a message or screenshot is received by us and is not device-only.
Limited technical and security information
Our servers and infrastructure providers may process limited technical information needed to deliver and protect the Services, including:
- IP address;
- date and time of access;
- browser, application version, operating system, and device type;
- requested page, response status, and basic service events;
- authentication, fraud-prevention, and security logs;
- approximate country or region inferred from an IP address
Microphone permission
Speaking-practice features may request microphone permission. You can grant or revoke that permission in your browser or operating-system settings. Revoking permission may prevent speech features from working.
Cookies, local storage, and website analytics
We use cookies and browser storage for sign-in sessions, security, preferences, and local feature operation. We also use PostHog to understand website use and diagnose usability and performance problems. This can include page views and exits, page addresses, clicks, interaction and heatmap events, browser and device information, IP addresses, and cookie or device identifiers. Depending on the enabled configuration, PostHog may also collect session replay data representing page content and interactions. Website analytics is separate from on-device speech analysis and must not include your microphone audio, speech transcripts, practice scores, or personalized learning feedback. Browser controls can restrict cookies or clear stored data, but may also affect sign-in and preferences; clearing cookies does not delete information already received. You may contact us to exercise applicable rights to object or withdraw consent. Where applicable law requires consent for non-essential analytics or device storage, that processing requires your consent.
5. Information we do not request
We do not request precise GPS location, address-book contacts, government identification numbers, or sensitive personal details such as health, religious beliefs, or political opinions for speaking practice. We do not use voiceprints to identify or authenticate you. Payment-card details are collected directly by the payment processor.
Avoid including sensitive information or other people’s personal or confidential information in support messages, profile fields, or other information you send to us. If you choose to include it, it will be handled as part of that submission.
6. Sources of personal information
We receive the limited personal information described above from:
- you, when you create an account, make a purchase, change settings, or contact us;
- your browser or device, for technical, session, security, and website analytics information;
- authentication providers, if you choose a third-party sign-in option, such as Google;
- organization administrators, for invitations and membership information;
- payment processors, for limited subscription and transaction records; and
- service providers, for operational events such as delivery status, authentication status, or security alerts.
Third-party sign-in
If you choose to sign in using a third-party provider, we receive only the information the provider makes available for authentication, typically your name, email address, profile image, and provider-specific account identifier. We do not request your contacts or friends list.
Where Google user data is involved, our use and transfer of that data will comply with the Google API Services User Data Policy, including its Limited Use requirements.
7. How we use personal information
We use server-side personal information only for the following purposes:
- create, authenticate, maintain, and secure your account, and administer organization memberships and invitations;
- provide requested features and maintain service availability;
- process subscriptions, payments, refunds, invoices, and taxes;
- respond to support inquiries and privacy requests;
- send account, security, billing, and service communications;
- send optional product communications when you have chosen to receive them;
- detect, investigate, and prevent fraud, abuse, security incidents, and technical problems;
- understand website use, identify usability problems, measure performance, and diagnose errors;
- enforce our terms and protect the rights, safety, and integrity of users and the Services; and
- comply with applicable legal, tax, accounting, and regulatory obligations.
8. Legal bases for processing
Where a law requires us to identify a legal basis, we rely on one or more of the following:
- Performance of a contract. We process account, authentication, organization, subscription, and support information to provide the Services you request.
- Legitimate interests. We process limited technical and security information to operate, protect, troubleshoot, and improve the reliability and usability of the Services, including analytics where permitted without consent, provided those interests are not overridden by your rights.
- Legal obligations. We retain or disclose limited information when required for tax, accounting, regulatory, court, or lawful government obligations.
- Consent. We rely on your consent for optional communications, non-essential cookies and analytics where required, and other processing for which consent is required by law. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
On-device AI analysis does not require Speaking+ to receive the speech content being analyzed. Device permission for microphone access is controlled by you.
10. How long we retain information
| Information | Retention approach |
|---|---|
| Device-only audio and learning analysis | Speaking+ does not retain this information on its servers. Temporary data may be discarded when processing or a session ends. Any saved local data remains until removed by the application or by you, including through browser storage controls, subject to your device’s behavior. |
| Account, authentication, and organization information | Retained while your account is active and for a limited period after closure when needed to complete deletion, protect account security, resolve disputes, prevent fraud, or comply with law. |
| Subscription and transaction records | Retained for the period required for billing, refunds, disputes, accounting, tax, and legal compliance. |
| Security logs, operational records, and website analytics | Retained only for the limited period reasonably necessary to detect security incidents, investigate errors, prevent abuse, understand website usage, and maintain service integrity. |
| Support communications | Retained as needed to resolve the request, maintain an appropriate support history, establish or defend legal claims, and meet legal obligations. |
| Privacy-request verification data | Used only to verify and complete the request, then deleted when no longer reasonably necessary for verification, recordkeeping, or legal compliance. |
When information is no longer needed, we delete it, anonymize it, or securely isolate it until deletion is technically possible. Copies in backups may persist until the applicable backup cycle completes. Deleting an account does not clear data stored only on your device; use browser or application controls for that information.
11. How we protect information
We use reasonable administrative, technical, and organizational safeguards designed to protect the limited personal information we process. Depending on the system, safeguards may include access controls, encryption in transit, encryption at rest, account authentication, least-privilege access, logging, monitoring, secure development practices, and service-provider reviews.
The most important privacy safeguard for speech content is architectural: microphone audio and device-only learning analysis are processed locally and are not transmitted to our servers.
No system can be guaranteed to be completely secure. You are responsible for protecting your device, email account, sign-in codes, and other account credentials.
12. International data transfers
Speaking+ is based in the United States. If you access the Services from another country, the limited server-side personal information described in this notice may be processed in the United States or in other countries where our service providers operate.
Where required, we use legally recognized transfer safeguards and contractual protections. Privacy and data-protection laws in the receiving country may differ from those in your country.
13. Your privacy rights
Depending on your location and applicable law, you may have the right to:
- know whether we process your personal information;
- request access to and a copy of your personal information;
- correct inaccurate personal information;
- request deletion of personal information;
- receive certain information in a portable format;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- opt out of sale, targeted advertising, or qualifying profiling, if applicable;
- appeal a decision concerning a privacy request where applicable; and
- receive equal service and not be discriminated against for exercising a privacy right.
Speaking+ does not make decisions based solely on automated processing that produce legal or similarly significant effects. Language feedback and learning scores are educational features, not employment, credit, housing, insurance, medical, or legal decisions.
How to submit a request
Submit a request through speaking.plus/data-request or email email@speaking.plus.
We may need to verify your identity before completing a request. We use verification information only for verification, security, fraud prevention, and legally required request records. You may use an authorized agent where applicable law permits it.
Regional information
Residents of the European Economic Area, United Kingdom, or Switzerland may also have the right to lodge a complaint with their local data-protection authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator. Other jurisdictions may provide similar complaint or appeal rights.
14. United States state privacy disclosures
Where applicable state privacy laws apply, the information described in this notice includes identifiers and contact information; account and authentication information; commercial and transaction information; internet or network activity, including website analytics; approximate location derived from IP addresses; organization affiliations and roles; and images or other information you voluntarily submit, such as a profile image or support screenshot. Authentication information may qualify as sensitive personal information and is used to secure and administer access.
Sections 4 through 10 explain the categories of information, sources, purposes, recipients, and retention criteria. These categories may be disclosed to the service providers described in Section 9 to perform those functions, to authorized organization administrators where relevant, and for the legal or business circumstances described there.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing. We do not use sensitive personal information to infer characteristics about you.
You may submit an access, correction, deletion, portability, opt-out, or other applicable request through our Data Request page. You may use an authorized agent where permitted. If we deny a request, you may appeal by contacting us and identifying the request you want reviewed. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.
We honor legally applicable universal opt-out signals as required by law. A legacy browser “Do Not Track” setting does not itself disable website analytics. You may contact us about applicable privacy choices.
15. Minors
The Services are intended for adults and are not directed to children under 18. You must be at least 18 years old to create an account or use the Services.
We do not knowingly collect server-side personal information from anyone under 18. If we learn that a person under 18 created an account, we will take reasonable steps to deactivate the account and delete the related server-side information, subject to legal and security requirements.
Contact email@speaking.plus if you believe a minor has provided personal information to us.
16. Changes to this notice
We may update this Privacy Notice to reflect changes in the Services, our practices, or applicable law. We will update the "Last updated" date when we make changes. If a change materially affects how we handle personal information, we will provide additional notice when required, such as through the Services or by email.
If a future feature would transmit information that this notice currently describes as device-only, we will provide clear notice before that transmission begins, request consent where required, and update this notice.
17. Contact us
Questions, concerns, or privacy requests can be sent to: