Privacy Policy

1. Who is responsible

iSpeak, Bitarap Turkmenistan avenue 183, Ashgabat, Turkmenistan ("iSpeak"), is the controller of the personal data described here. Questions and requests go to support@ispeaktm.com.

School Owners also handle data of their Members inside their Schools (for example attendance, offline payments they record, course progress they review). For that data the School Owner is a controller in their own right and iSpeak is their processor. The School Owner Terms set out their duties.

2. What we collect

You give us

• Account details: name, e-mail address, password (stored hashed), interface language, time zone, profile photo, country and city, display name.
• Learning details you choose: subjects and language levels you study or teach, goals, native language.
• Content: posts, comments, polls, course material, class notes, uploads, feedback answers, support tickets.
• Payment details: your card is entered on Stripe's secure page; iSpeak receives only the last four digits, the card brand and expiry, and the payment result. School Owners who withdraw earnings give us bank details for the transfer.
• Connected accounts: if you sign in with Google or Microsoft we receive your name, e-mail and avatar from them; if you link Telegram we receive your Telegram ID and username.

We collect automatically

• Usage: pages opened, classes booked, lessons completed, points earned, time of activity, which notifications you open.
• Device and connection: browser type, device type, approximate location from your IP address, the identifier of each device you link for messages.
• Cookies and similar technologies, as described in the Cookie Policy.

We do not collect

• The content of your private messages. They are end-to-end encrypted; we store only the encrypted data and the time and participants of a conversation.
• Your full card number or security code.

3. Why we use it (and the legal basis)

| Purpose | Examples | Basis | |---|---|---| | Running your account and the Schools you join | sign-in, memberships, bookings, progress, leaderboards | performing our contract with you | | Payments and payouts | charging a membership, refunding it, paying a School Owner, preventing fraud | contract and legal obligations | | Communication | class reminders, digests, receipts, security notices, support replies | contract; marketing e-mails only with your consent, which you can withdraw in Settings | | Safety and security | rate limits, abuse detection, security audits, moderation of reported content | our legitimate interest in a safe platform | | Improving iSpeak | understanding which features are used, fixing errors, measuring performance | our legitimate interest; analytics cookies only with your consent | | AI features | speaking practice feedback, the assistant's answers, drafting help | performing the feature you asked for | | Legal | tax records, responding to lawful requests, enforcing our Terms | legal obligation and legitimate interest |

We do not sell personal data and we do not use it for advertising networks of our own.

4. Who can see what

• Other Members of your School see your profile as you set it: name, photo, level, city, subjects, points, and what you post. Settings › Profile lets you hide fields; hidden fields are hidden on the server, not only on screen.
• School Owners, their admins and teachers see the Members of their School, attendance, progress in their courses, payments to their School and the e-mail address of Members who joined by invitation or paid. They do not see your payment card, your other Schools, your private messages or your data in other Schools.
• Platform administrators at iSpeak see account and payment records as needed for support, fraud prevention and payouts. Every administrator read of private records is logged.
• The public sees only a School's public page and a Member's public profile card, and nothing when a School is private.

5. Who we share it with

We share personal data only with providers that help us run iSpeak, under contracts that limit what they may do with it:

• Hosting and database: Base44, which hosts the application and stores its data.
• Payments: Stripe, which processes cards and holds the card data; Stripe's own privacy policy applies to the checkout page.
• E-mail delivery: the e-mail service that sends notifications and receipts.
• Telegram: when you link Telegram, messages from the bot and notifications you switched on are sent through Telegram.
• Sign-in providers: Google and Microsoft, when you choose them.
• AI providers: speech recognition, speech synthesis and language-model providers that process your voice and text for the AI features, only for the request you make and not to train their models on your data where their terms allow us to require this.
• Video platforms: YouTube and Vimeo serve embedded lessons and may set their own cookies, which the Cookie Policy explains.
• Integrations chosen by a School Owner: a School may add a Facebook or Google pixel, webhooks or Zapier to its School. Those fire only after you consent to marketing cookies, and the School Owner is responsible for them.
• Authorities, when the law requires it, and successors if iSpeak is sold or merged, under this policy.

6. International transfers

iSpeak is operated from Turkmenistan. Our providers process data in the United States and the European Union. Where data leaves the country you live in, we rely on the provider's standard contractual protections and on the safeguards in their contracts with us.

7. How long we keep it

• Account data: while your account exists, then deleted within 30 days of closure.
• Payment and payout records: 7 years, as tax law requires, in a form that no longer identifies you where possible.
• Content you posted in a School: until you delete it or the School is deleted; after account closure your name is removed from it.
• Encrypted messages: until either participant deletes the conversation, or 30 days after the account that holds them is closed.
• Security and audit logs: 12 months.
• Support tickets and feedback: 24 months.

8. Your rights

Wherever you live, you can:

• See and export your data: Settings › Account › Export gives you a file of everything we hold about you.
• Correct it: most fields are editable in Settings; write to us for the rest.
• Delete your account: Settings › Account › Delete account. We keep only what the law requires (section 7).
• Object or restrict processing based on our legitimate interests, and withdraw consent for marketing e-mails, Telegram notifications and non-essential cookies at any time, from Settings or the cookie banner.
• Complain to your data-protection authority if you think we have handled your data unlawfully. We would rather hear from you first at support@ispeaktm.com.

We answer requests within 30 days and never charge for them unless they are clearly excessive.

9. Security

• Private messages are end-to-end encrypted with keys that exist only on your devices.
• Connections use TLS. Passwords are stored hashed. Card data never touches our servers.
• Every table and server function has access rules, and we re-run a security audit after every major release that tests those rules from an ordinary member account and from outside.
• Administrator access to private records is limited and logged.
• No system is perfectly secure. If a breach affects your data, we tell you and the authorities as the law requires, without undue delay.

10. Children

iSpeak is not directed at children under 13. Learners under 16 may use iSpeak through a School with the permission of a parent or guardian; the School Owner is responsible for obtaining it. If you believe a child has given us data without permission, write to support@ispeaktm.com and we will delete it.

11. Changes

We may update this policy. For material changes we tell you by e-mail or in the app at least 14 days before they apply. The current version is always at /legal/privacy with its effective date.

12. Languages

This policy is written in English and provided in Russian and Turkmen for convenience. If the versions differ, the English text is the legally binding one.

13. Contact

iSpeak · Bitarap Turkmenistan avenue 183, Ashgabat, Turkmenistan · support@ispeaktm.com