Privacy notice

• Account data — email address, password hash, and optionally your name. Used to create and secure your account and to link your purchases to you. Legal basis: performance of a contract.
• Entitlement data — plan, subscription status, and the count of sessions granted and used. Used to give you what you paid for. Legal basis: performance of a contract.
• Session audio — captured in short chunks, sent to our AI transcription provider, converted to text and then discarded. We do not store audio.
• Transcripts, cues and debriefs — stored in your own browser's local storage. They are not uploaded to our servers or kept after you clear your browser data.
• Technical and security data — IP address, device and browser information, and error logs. Used for security, abuse prevention and fixing faults. Legal basis: legitimate interests.
• Support messages — used to answer you. Legal basis: legitimate interests.

• Hosting, database and authentication providers who run the service for us.
• AI providers who transcribe audio and generate coaching output, processing it on our instructions.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting, where necessary.
• Authorities where we are legally required to disclose.

We do not sell personal data or use it to train models.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

Account and entitlement data is kept while your account is open and for up to seven years afterwards where tax or accounting law requires it. Technical logs are kept for up to twelve months. Audio is never retained. Everything else is deleted or anonymised once it is no longer needed.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You can also complain to your local supervisory authority. Email support@plainspoken.app and we will respond within one month.

We use encryption in transit, access controls and row-level database security so an account can only read its own records. No system is perfectly secure, but we take appropriate technical and organisational measures.

We use essential cookies and local storage only: to keep you signed in, to remember your install and offline preferences, and to hold your session history on your device. We do not run advertising or cross-site tracking cookies. Clearing your browser storage removes your local session history permanently.