Effective date: July 20, 2026
This Privacy Policy explains how PodFlyy LLC ("PodFlyy," "Spokit," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Spokit mobile application for iOS (the "App") and related services, and when you contact us or visit spokit.app (together, the "Service"). This policy is published at spokit.app/privacy.
Spokit is a language-learning application. It turns typed or spoken practice prompts into phrase cards, translations, word-by-word ("token") analysis, optional audio pronunciation, and spaced-repetition review.
If you have questions about this policy or your personal information, contact us at support@spokit.app.
The controller responsible for your personal information is:
PodFlyy LLC Email: support@spokit.app Website: spokit.app
For users in the European Economic Area ("EEA"), the United Kingdom ("UK"), and other regions with similar laws, PodFlyy LLC is the "controller" of your personal information. Our third-party service providers described in Section 6 act as our "processors" or independent controllers as noted.
This policy applies to personal information we process through the Spokit iOS App and the Service. It does not apply to third-party services that operate under their own privacy policies, including the Apple App Store, Apple ID, and any third-party website you reach through a link. We encourage you to review those third parties' privacy notices.
We collect only the information we need to operate Spokit's language-learning features, manage your account and subscription, keep the Service secure and reliable, and provide support. We describe each category below, including its source and the purposes for which we use it.
Source: you and your chosen sign-in provider (Apple or Google). Purpose: create and secure your account, authenticate you, and enable subscription restore and cross-device continuity.
Source: you, during onboarding and in settings. Purpose: personalize your learning experience, generate relevant practice content, and deliver reminders you enable.
Spokit's current version does not ask for your age range, date of birth, or free-text location.
Source: you, and content generated for you by the Service in response to your input. Purpose: provide, store, and synchronize your learning content and progress.
Source: you (microphone), and audio generated for you. Purpose: transcribe your speech into practice text and provide audio pronunciation. See Section 7 for audio-specific handling and retention.
Source: Apple's App Store and our subscription processor (RevenueCat). Purpose: activate and manage your Spokit Pro subscription, enforce your credit allowance, send subscription-related notices, and support billing questions. We do not receive or store your full payment-card number; Apple processes all payments.
Source: your use of the App. Purpose: operate credit and rate-limit systems, prevent abuse, diagnose failures, and improve reliability.
Source: your device and our backend. Purpose: keep the Service secure, functional, and reliable.
We do not use third-party advertising, we do
not track you across other companies' apps or websites,
and our iOS privacy manifest declares no tracking
(NSPrivacyTracking = false).
We use personal information to:
We do not use your learning content, voice recordings, or transcripts to serve advertising, and we do not sell them.
If you are in the EEA or UK, we rely on the following legal bases under the GDPR and UK GDPR:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account; providing the core learning features you request; processing your subscription | Performance of a contract (Art. 6(1)(b)) |
| Security, abuse prevention, rate limiting, reliability, diagnostics, and service improvement | Legitimate interests (Art. 6(1)(f)) |
| Sending service/transactional emails; managing subscription lifecycle notices | Performance of a contract and/or legitimate interests |
| Local reminders and optional preferences you enable | Consent (Art. 6(1)(a)), which you can withdraw at any time in settings |
| Retaining billing and tax records; responding to lawful requests | Compliance with a legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have balanced those interests against your rights. You may object to processing based on legitimate interests as described in Section 10.
We share personal information with a limited set of service providers who process it on our behalf to operate specific features. We do not sell this information, and providers are permitted to use it only to provide their service to us. The following are the only third-party processors Spokit uses in this version:
| Provider | Role / purpose | Data shared |
|---|---|---|
| Convex | Backend host, application database, server functions, and file storage; stores your account, learning content, generated pronunciation audio, and usage data | Account and profile data, learning content, generated audio, identifiers, usage data |
| Apple | Sign in with Apple; App Store payment processing, billing, renewals, cancellations, and refunds | Authentication identifiers, name/email you share, purchase and subscription data |
| Google sign-in (OAuth) | Authentication identifiers, and name/email you share | |
| RevenueCat | Subscription-entitlement management and processing of App Store purchase-lifecycle events | Subscription/purchase identifiers and lifecycle data, app user identifier |
| ElevenLabs | Speech-to-text transcription of your voice recordings, and text-to-speech generation of pronunciation audio | Voice recordings you submit for transcription; phrase text submitted for audio generation |
| OpenRouter | AI language model gateway used to generate phrases, translations, and token/grammar analysis | The prompt/phrase text you submit for analysis and your selected language pair |
| Cloudflare | Delivery of transactional and service emails (for example, password-reset and subscription notices) | Your email address and the contents of the message |
We may also disclose personal information (a) to comply with law, legal process, or lawful government requests; (b) to enforce our Terms or protect the rights, safety, and security of our users, the public, or PodFlyy; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.
Audio is handled carefully and only when you choose to use a speech feature:
Please do not record sensitive, confidential, or regulated information as practice content.
We keep personal information only as long as needed for the purposes described in this policy, then delete or de-identify it. Specific practices include:
| Data | Retention |
|---|---|
| Account, profile, and learning content (phrases, tokens, reviews, journal, decks) | While your account is active; deleted when you delete your account (see Section 10) |
| Voice recordings submitted for transcription | Deleted immediately after transcription; unused uploads expire and are purged within a short window |
| Generated pronunciation audio | Stored for playback while the associated content exists; deleted on account deletion |
| Purchase and subscription records | Retained as needed to operate your subscription and to meet billing, tax, and legal obligations; records may also persist with Apple and RevenueCat under their policies |
| Transactional email records | Personal data in email delivery records is scrubbed within 30 days of sending |
| Usage and reliability events | While your account is active; removed on account deletion, except where retained for security or legal reasons |
| Backups and system logs | Kept for a limited period for security and disaster recovery, then overwritten or deleted |
We may retain limited information longer where required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.
We are based in the United States, and our service providers may process and store personal information in the United States and other countries that may have data-protection laws different from those in your country. Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), or another lawful transfer mechanism. You may contact us at support@spokit.app for more information about these safeguards.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
Delete your account and data in the App. You can delete your account at any time from Profile → delete account. This removes your Spokit account and associated learning data, including your phrases, tokens, reviews, journal entries, language decks, saved and generated audio, usage events, and sign-in records, except limited information we must retain for legal, security, tax, billing, or fraud-prevention reasons.
Deleting your Spokit account does not cancel an active App Store subscription. Manage or cancel your subscription in your Apple ID settings (Settings → your name → Subscriptions), and see the Terms of Use for subscription details.
Contact us. For access, correction, portability, or any other request, email support@spokit.app. We will verify your request and respond within the time required by applicable law. You may use an authorized agent where the law permits; we may ask for proof of authorization.
We will not discriminate against you for exercising your privacy rights.
EEA/UK residents may lodge a complaint with their local data-protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concerns first.
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, provides the rights described below.
Categories of personal information we collect (as defined by California law):
| Statutory category | Examples in Spokit |
|---|---|
| Identifiers | Email, name, account/session/provider identifiers, RevenueCat app user ID |
| Customer records / commercial information | Subscription and purchase history |
| Audio, electronic, or similar information | Voice recordings you submit for transcription; generated pronunciation audio |
| Internet or other electronic network activity | Product-interaction and usage events |
| Other information you provide (user content) | Typed prompts, phrases, token analysis, journal/review entries |
Sources, purposes, and disclosures. We collect these categories from the sources and for the business purposes described in Sections 3–7. We disclose personal information to the service providers listed in Section 6 for those business purposes only.
We do not sell or share your personal information. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the preceding 12 months. Because we do not sell or share personal information, there is nothing to opt out of; however, you may still exercise the request below.
Do Not Sell or Share My Personal Information. Spokit does not sell or share your personal information. If our practices ever change, we will update this policy and provide an opt-out mechanism before doing so.
Sensitive personal information. We do not use or disclose sensitive personal information for purposes that would require offering a right to limit under the CPRA.
Your California rights include the right to know, the right to delete, the right to correct, and the right to non-discrimination for exercising your rights. To exercise them, delete your account in the App or contact support@spokit.app. We will verify your request as required by law. Authorized agents may submit requests with proof of authorization.
Residents of other U.S. states with comprehensive privacy laws may have similar rights and can exercise them the same way.
Spokit is intended for a general audience and is not directed to children. You must be at least 13 years old (and at least 16 in the EEA, or the minimum age of digital consent in your country) to use Spokit, or older where required by local law and the App Store.
We do not knowingly collect personal information from children under 13 (or under the applicable minimum age in your region). If you believe a child has provided us personal information, contact support@spokit.app and we will delete it. Spokit is not part of the Apple Kids Category and does not use content directed to children.
We use managed, industry-standard providers for our backend, authentication, storage, and email delivery, and we apply access controls, encryption in transit, short-lived upload credentials, and rate limiting to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your device and sign-in credentials secure, and avoid submitting sensitive or confidential information as practice content.
Consistent with Spokit's iOS privacy manifest, the App collects the following data types, each linked to your identity, not used for tracking, and used only for App Functionality:
| App Store data type | What it covers in Spokit |
|---|---|
| Email Address | Account contact and authentication |
| Name | Optional display name from Apple/Google sign-in |
| Audio Data | Voice recordings and generated pronunciation audio |
| Other User Content | Phrases, saved cards, token analysis, journal/review entries, transcripts |
| User ID | Spokit and RevenueCat identifiers |
| Product Interaction | App usage and reliability events |
| Purchase History | App Store / RevenueCat purchase-lifecycle data |
Spokit declares no tracking and no data used for third-party advertising.
Spokit does not display third-party advertising, does not use advertising identifiers, and does not track you across other companies' apps or websites for advertising. We do not sell your personal information.
We may update this Privacy Policy from time to time to reflect changes in our features, service providers, or legal requirements. When we make material changes, we will update the "Effective date" above and, where appropriate, provide additional notice in the App or by email. Your continued use of Spokit after an update takes effect means you accept the revised policy.
For any privacy question or request, contact:
PodFlyy LLC Email: support@spokit.app Website: spokit.app