Privacy Policy

I.E. Aleksei Iurasov, registered in Georgia, decides how and why your data is processed here. Questions, requests and complaints: support@latentstate.dev.

When you read aloud, the audio is uploaded and stored on our server. It is then sent to Deepgram, which turns it into text. The resulting transcript and the list of detected errors — not the audio — are sent to OpenAI, which reviews which of them are real, marks up the intonation of the sentences and writes the tips you see under each number.

Recordings are deleted automatically after 90 days. You do not have to wait for that: you can delete one recording, or all of them, from inside the app at any time, and the files are removed from disk, not just hidden.

A shared link never carries the recording unless you switch it on for that link yourself. It is off by default, every time.

We do not use your recordings to train models, ours or anyone else’s.

Account: your email address, your password (stored only as a hash — we cannot read it), an optional display name, your interface language and your timezone.

Practice: the texts you add, the recordings you make, their transcripts, the per-word analysis and scores, and your session history.

Technical: the IP address of each login session, kept only so we can rate-limit sign-in attempts. It is not shown anywhere and is not used for anything else.

Payment: we never see or store your card details. Paddle handles the payment and tells us only that a given package was bought, when, and how many minutes to credit.

To provide the service you asked for — that is the contract between us, and it covers your account, your texts, your recordings and their analysis.

Our legitimate interests — keeping the service secure, preventing abuse, and holding accurate records of what was billed.

Legal obligation — tax and accounting records relating to purchases.

Deepgram (United States) — receives your audio and returns the transcript. It also generates the reference pronunciation, which involves single words and none of your audio.

OpenAI (United States) — receives text and never audio: the transcript and the detected errors for the review, the sentences of the text for the intonation analysis, your results for the coaching tips, the texts you paste, a digest of the books you import, and what you ask it to generate.

Resend (United States; sends through Amazon Web Services in Tokyo, Japan) — sends the transactional email — verification, password reset, a welcome — and receives your address and the message.

Paddle (United Kingdom) — handles purchases as merchant of record, and is its own controller for the payment data you give it.

OVHcloud (Beauharnois, Quebec, Canada) — hosts the server everything runs on: the database, the recordings and the backups.

Sentry (United States) — receives a report when something breaks — the failing request, a stack trace and the software version, with addresses and tokens removed before it leaves the server. Never audio.

Telegram (Dubai, United Arab Emirates) — receives a one-line notice when an error report arrives or a backup fails: the error’s title, and nothing about you.

That is the whole list. There is no advertising, no analytics tracker, and nothing is sold to anybody.

Recordings: 90 days, then deleted automatically.

Everything else in your account: until you delete the account.

Records of what was billed and what was bought: kept afterwards, with your identity removed from them. They become anonymous rows about money rather than about you, because we have to be able to account for payments that actually happened.

Backups: the database is copied every night and each copy is kept for up to 8 weeks; the recordings are copied every night and kept for up to 4 weeks. A backup is used only to recover from a failure, and to rehearse that recovery.

Preferences → Delete account. It asks for your password, and then it is immediate: the account is gone from the live database at once and cannot be restored on request. Copies of the rows survive in the backups above until those expire — up to 8 weeks for the database and 4 weeks for the recordings.

It removes your account, your texts and collections, every practice session with its transcripts and analysis, your login sessions, your minute balance and every audio file you ever recorded.

What survives is the usage and purchase ledger, with the link to you severed — see above. Deleting your account is not a refund, and it does not return unused minutes.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it — the app lets you do the last one yourself. The progress page exports your history as CSV.

You can object to processing based on our legitimate interests, and you can complain to your local data protection authority if you think we have got this wrong. We would rather you told us first: support@latentstate.dev.

One cookie, which keeps you logged in. It is strictly necessary — without it there is no way to stay signed in — so there is no consent banner asking you to accept it.

Your theme is kept in your browser’s local storage and never sent to us. Your interface language is kept there too, and once you are signed in it is also saved on your account, so it follows you to another device. There are no analytics or advertising cookies of any kind.

The server is in Beauharnois, Quebec, Canada (OVHcloud). Deepgram, OpenAI and Sentry are in the United States, so your audio, your transcripts and our error reports are processed there under the safeguards in those providers’ data processing terms. Email is sent by Resend, a US company, through Amazon’s servers in Tokyo, Japan, so your address and the message pass through there.

The service is not for anyone under 16, or under the age of digital consent where they live if that is higher.

When this policy changes, the date at the top moves with it, and this page is the record. We do not have a way to email everyone about a change, so if it matters to you, check the date now and then.