Privacy Policy

Information we collect

• Account information. If you create an account or sign in with a social provider (e.g. Google), we receive your name, email address, and profile image (where provided). We store this so you can sign back in and so we can associate your activity with your account.
• Authentication data. We store password hashes (never raw passwords) and session tokens needed to keep you signed in.
• Usage data. We collect anonymous product analytics (e.g. which songs are played, which lessons are opened) using PostHog. Where you are signed in, this activity is associated with your user ID.
• Technical data. Standard server logs may record IP address, user agent, and timestamps for security and debugging.

How we use information

• To provide and operate the SpeakBeats player and curriculum.
• To authenticate you and keep your session secure.
• To send transactional emails (password resets, email verification).
• To understand how the product is used so we can improve it.
• To prevent abuse and meet legal obligations.

We do not sell your personal information. We do not use it for advertising.

Sign in with Google

When you sign in with Google, Google shares your name, email address, and profile image with us. We use this only to create and maintain your SpeakBeats account. We do not request access to any other Google data (no Drive, Gmail, contacts, or calendar). You can revoke our access at any time at myaccount.google.com/permissions.

Sub-processors

We rely on a small number of trusted services to operate SpeakBeats:

• Cloudflare — hosting, database (D1), and CDN.
• Resend — transactional email delivery.
• PostHog — product analytics.
• Google — OAuth identity (only if you sign in with Google).

Data retention

We keep account information for as long as your account exists. You can request deletion at any time by emailing us (see below); we will delete your account and associated personal data within 30 days, except where we are required to retain certain records by law.

Your rights

You may request access to, correction of, or deletion of your personal data. If you are in the EU, UK, or another jurisdiction with applicable privacy laws, you also have the right to data portability and to lodge a complaint with your local supervisory authority.

Children

SpeakBeats is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying signed-in users by email.

Contact

Questions, requests, or concerns: [email protected].