Privacy Policy

📋 1. Information We Collect

We collect only the information required to deliver SpeakMate's coaching, role-play features, forced-update mechanism, and ad-supported free experience. Here is a complete breakdown:

🎯 2. How We Use Your Information

Your data is used exclusively to power the SpeakMate experience:

• Real-Time AI Coaching: Your conversation messages are sent to OpenAI (gpt-4o-mini) to generate grammar corrections, vocabulary suggestions, fluency tips, pronunciation notes, and scores in real time.
• Role-Play Missions: Your messages are sent to OpenAI with a custom role-play system prompt so the AI stays in character as the specified scenario partner.
• Progress Tracking: Scores and session records stored on-device power your Progress dashboard, skill bars, and weekly streak calendar.
• AI Voice Responses: The AI coach's text reply is sent to Google Cloud TTS to synthesise natural-sounding speech, cached locally for instant replay.
• Banner & Interstitial Ads (AdMob): Google AdMob banner ads and interstitial ads are displayed to support the free experience. Banner ads appear within content areas; interstitial ads are shown at natural transition points (e.g., after a practice session ends, before the review screen). Ad content is determined by Google based on contextual signals and, where personalisation is enabled, your Advertising ID (GAID).
• Forced / Mandatory App Updates: Firebase Remote Config is used to check whether the version of the app you are running meets the minimum required version. If your version is below the minimum, you will be shown a mandatory update prompt directing you to the Google Play Store. This ensures all users benefit from the latest security fixes and features.
• Daily & Mission Reminders: Android WorkManager schedules local device notifications — no data leaves your device for this feature.
• Crash & Stability Improvements: Anonymous crash reports help us identify and fix technical issues.
• Usage Analytics: Anonymous event counts help us understand which features are most used so we can improve the app.

We do not use your data for advertising profiling, data brokering, or any purpose beyond what is listed above.

🔐 3. App Permissions

SpeakMate requests the following Android permissions. Each is strictly necessary:

• 🎤 RECORD_AUDIO — Required for voice-to-text input. Audio is processed on-device — raw audio is never uploaded to our servers.
• 🔍 Speech Recognition Query — SpeakMate declares a <queries> intent for android.speech.RecognitionService so Android 11+ can discover the Google Speech Recognition service. No data is collected by this declaration — it is purely a visibility requirement introduced in Android 11.
• 🌐 INTERNET — Required to communicate with OpenAI, Google Cloud TTS, Google AdMob, Firebase Remote Config, and Firebase services.
• 📡 ACCESS_NETWORK_STATE — Allows the app to check connectivity before API calls and before fetching remote config.
• 🔔 POST_NOTIFICATIONS — Required on Android 13+ to send daily practice and mission reminders. You explicitly opt in via the Settings screen.
• 📳 VIBRATE — Used for haptic feedback when the microphone starts recording.
• 🔄 RECEIVE_BOOT_COMPLETED — Required to reschedule reminder notifications after device restarts. The app also listens for QUICKBOOT_POWERON (used on certain Android devices for fast-boot events) for the same purpose.
• 📢 AD_ID — Automatically added to the app by the Google AdMob SDK (play-services-ads) via manifest merging. Not manually declared — the SDK injects it at build time. Used to access your device's Advertising ID (GAID) to serve relevant personalised or contextual banner and interstitial ads. You can opt out of ad personalisation at any time via Google Settings → Ads on your device.

🔗 4. Third-Party Services

SpeakMate integrates with the following third-party services. Each processes data under their own privacy policies:

💾 5. Data Storage & Retention

On-Device Storage: Your conversation history, session records, progress scores, mission completion status, XP, achievements, streak data, and preferences are stored in an encrypted SQLite database (Room) and Android DataStore on your device. Not synced to any cloud service operated by us.

Audio Cache: TTS-generated audio files are cached on your device's internal storage. Clearable at any time via Settings → Clear Voice Cache or via Android's app storage management.

Retention Period: On-device data is retained until you:

• Use the "Reset Progress" option in Settings.
• Uninstall the SpeakMate app from your device.
• Clear the app's data via Android's App Info settings.

OpenAI API (Transient): Messages sent to OpenAI are subject to OpenAI's own data retention policies. We do not store copies on our servers.

Firebase Remote Config (Transient): Remote Config fetches configuration flags (minimum app version) from Firebase. No personal data is retained — only anonymous fetch counts are logged by Firebase.

AdMob Data: Data collected by Google AdMob (Advertising ID, ad interaction events) is retained and managed by Google in accordance with Google's Privacy Policy.

Firebase Data: Anonymous crash and analytics data is retained by Google Firebase for up to 90 days.

No Server-Side User Database: SpeakMate does not operate a user account system. There is no server-side database containing your profile or conversation history maintained by us.

🛡️ 6. Security

• Encrypted Local Storage: All on-device data is stored in an encrypted Room database protected by Android's built-in encryption.
• HTTPS Only: All network communications use TLS/HTTPS. Cleartext traffic is explicitly disabled in the app manifest.
• API Key Security: Third-party API keys are injected at build time via BuildConfig and obfuscated via ProGuard/R8 in release builds.
• Signed APK: The app is signed with v1, v2, and v3 APK signing schemes to ensure integrity.
• Forced Updates: Firebase Remote Config enforces a minimum app version so users always run a version with the latest security patches. Outdated versions are blocked with a non-dismissible update prompt.
• Minimal Data Collection: We follow the principle of data minimisation — collecting only what is strictly necessary.
• Local Audio Cache Isolation: TTS audio files are cached in the app's private internal cache directory, inaccessible to other apps.
• Ad Placement Policy: AdMob banner and interstitial ads comply with Google Play Ad Policy — banners are not overlapping interactive elements, interstitials are shown only at natural session transition points, never during active coaching.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to keep your device updated and secured with a screen lock.

👶 7. Children's Privacy

SpeakMate is designed for users aged 13 years and older. We do not knowingly collect personal information from children under 13.

Regarding Ads and Children: SpeakMate is not directed at children under 13. Google AdMob is configured to serve general audience ads in compliance with applicable laws including COPPA.

If you are a parent or guardian and believe your child under 13 has used the app, please contact us using the details in Section 12. We will take prompt steps to address any concerns.

Users between 13–17 should have a parent or guardian review this Privacy Policy before use.

⚖️ 8. Your Rights

• Access: All your data is visible directly inside the app in the Sessions, Progress, and Missions screens.
• Deletion: Use Settings → Reset Progress to delete all locally stored data. Uninstalling the app removes all remaining local data.
• Opt-Out of Ad Personalisation: Go to Google Settings → Ads on your device to reset your Advertising ID or opt out of personalised ads. Non-personalised contextual banner and interstitial ads will still be shown.
• Opt-Out of Analytics: You can disable Firebase Analytics via Google's device-level settings.
• Notification Control: Disable reminders at any time via Settings → Notifications or your device's notification settings.
• Microphone Access: Revoke microphone permission at any time in Android Settings → Apps → SpeakMate → Permissions. The app will still function in text-only mode.
• GDPR / CCPA: If you are in the European Economic Area or California, you have additional rights including data portability and the right to lodge a complaint with your local supervisory authority.

💰 9. Pricing & Ads

SpeakMate is free to download and use, supported by Google AdMob advertisements.

• The app is completely free — all coaching, missions, progress tracking, and features are available at no cost.
• Ad revenue helps cover API costs (OpenAI, Google Cloud TTS) and supports continued development.
• You can opt out of personalised ads at any time via Google Settings → Ads on your device. Non-personalised contextual ads will still be shown if you opt out.
• There are no in-app purchases or subscriptions in this version.

🔄 10. Forced / Mandatory App Updates

SpeakMate uses Firebase Remote Config combined with the Google Play In-App Updates API to deliver a two-layer forced update mechanism. This feature is in place to protect users by ensuring outdated or insecure versions of the app cannot be used indefinitely.

How it works — step by step:

• Step 1 — Version check via Firebase Remote Config: Each time you open SpeakMate, the app silently fetches a min_version_code flag from Firebase Remote Config. This is compared against your currently installed app version entirely on-device.
• Step 2 — Google Play In-App Updates (primary): If your version is below the minimum, SpeakMate first attempts to trigger an IMMEDIATE update flow using the official Google Play In-App Updates API. This shows Google's own native update UI directly inside the app, downloading and installing the update seamlessly without leaving the app.
• Step 3 — Fallback dialog (if Play update unavailable): If the Play Core update is not available or not yet rolled out to your device, a non-dismissible dialog is shown instead, directing you to open the Google Play Store manually to download the latest version. The app closes after you tap "Update Now" so you cannot bypass the requirement.
• You cannot use the app until the update is installed. This is intentional and ensures all users benefit from critical bug fixes and security patches.

We aim to minimise the frequency of forced updates and only trigger them when strictly necessary for security, stability, or compatibility reasons.

📝 11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, app features, or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display an in-app notice the next time you open SpeakMate after a material change.

Your continued use of SpeakMate after any changes constitutes your acceptance of the revised policy.

✉️ 12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out: