Privacy Policy

1. Data We Collect

We collect different types of information depending on how you interact with our platform:

Account Information

• Full name, email address, and phone number
• Password (stored in encrypted form)
• Profile photo (optional)
• Language preferences and learning goals

Learning & Session Data

• Session history, attendance records, and scheduling information
• Learning progress, assessments, and feedback
• Messages and communications with teachers or support
• Session recordings (video, audio, and chat logs) as described in Section 4

Technical & Usage Data

• IP address, device type, browser type, and operating system
• Pages visited, features used, and time spent on the platform
• Referring website or source
• Crash reports and performance data
• Cookies and similar tracking technologies (as described in Section 8)

2. How We Use Your Data

We use your personal information for the following purposes:

• To create and manage your account and provide access to our services
• To facilitate and deliver tutoring sessions and learning experiences
• To process payments and manage your session credits
• To communicate with you about your account, sessions, and service updates
• To improve our platform, services, and user experience
• To ensure platform safety, prevent fraud, and enforce our Terms & Conditions
• To comply with legal obligations and respond to lawful requests
• To send promotional communications (only with your consent, and you may opt out at any time)

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you (e.g., providing tutoring services, managing your account, processing payments).
• Consent: Processing based on your explicit consent (e.g., marketing communications, session recordings). You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving services, platform security, fraud prevention), provided these interests do not override your rights.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations (e.g., tax records, responding to legal requests).

4. Session Recordings

To ensure quality, safety, and support dispute resolution, sessions conducted on our platform may be recorded. By participating in sessions, you acknowledge and consent to the following:

• Video, audio, and chat communications during sessions may be recorded
• Recordings are stored securely and retained for up to 90 days after the session date
• Access to recordings is strictly limited to authorized Speexify personnel for quality assurance, safety monitoring, training, and dispute resolution purposes
• Recordings will not be shared with third parties except as required by law or for dispute resolution involving session participants

If you do not consent to being recorded, you must notify us before participating in any session. Please note that this may limit your ability to use certain platform features. You may not record sessions using external tools without the express written consent of all participants.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are as follows:

• Account Data: Retained for the duration of your active account plus 3 years after account deletion or last activity, to handle any post-termination inquiries or disputes.
• Session Recordings: Retained for up to 90 days after the session date, unless a longer period is required for ongoing dispute resolution or legal compliance.
• Payment & Transaction Records: Retained for 7 years after the transaction date, as required by tax and accounting regulations.
• Communication Logs: Support tickets and messages retained for 2 years after resolution to improve service quality and handle follow-up inquiries.
• Technical & Usage Data: Aggregated analytics data may be retained indefinitely; identifiable usage logs are retained for up to 12 months.

Upon expiration of the retention period, your personal data will be securely deleted or anonymized. You may request earlier deletion of your data by contacting us, subject to our legal obligations.

6. Payment Data Handling

Payments on Speexify are processed through Paymob and other authorized payment providers. We do not store your full credit card or debit card details on our servers. Payment providers collect and process payment-related information (such as card details) according to their own privacy and security practices, which comply with PCI-DSS standards.

We may receive and store limited payment information from our payment providers, including: payment status (success/failure), transaction reference numbers, last four digits of your card (for identification purposes), and basic billing information. This data is used for transaction records, customer support, and compliance with tax and accounting requirements.

7. Third-Party Service Providers

We work with trusted third-party service providers to operate our platform and deliver our services. These providers process data on our behalf and are contractually obligated to protect your information. Our current service providers include:

• Paymob: Payment processing and transaction management
• Brevo (formerly Sendinblue): Email communications, including transactional emails and marketing (with consent)
• WebRTC / Video Providers: Real-time video and audio communication for tutoring sessions
• Cloud Hosting Providers: Secure data storage and platform infrastructure
• Analytics Providers: Website usage analytics to improve user experience (data is anonymized where possible)

We do not sell your personal data to third parties. We only share data with service providers as necessary to operate our platform, or as required by law.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. The types of cookies we use include:

• Essential Cookies: Required for the platform to function properly, including maintaining your login session, remembering your language preference, and ensuring security (e.g., CSRF protection). These cannot be disabled.
• Functional Cookies: Help us remember your preferences and settings to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with our platform so we can improve functionality and user experience. Data collected is aggregated and anonymized where possible.

We do not currently use advertising or third-party tracking cookies for targeted advertising purposes.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform. For more information, please see our Cookie Policy.

9. Children's Privacy

Protecting children's privacy is important to us. Our platform is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use our platform or provide any personal information.

Users between 13 and 17 years old may use the platform only with verified parental or legal guardian consent and supervision. Parents or guardians who provide consent are responsible for monitoring their child's use of the platform and ensuring compliance with our Terms & Conditions.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take immediate steps to delete that information. If you believe we may have collected information from a child under 13, please contact us immediately at the address provided below.

10. Your Rights

Depending on your location and applicable law (including GDPR for EEA/UK residents), you may have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, and to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing and storage
• Role-based access controls limiting data access to authorized personnel only
• Regular security assessments and monitoring for vulnerabilities

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law.

12. International Data Transfers

Speexify is based in Egypt. If you access our platform from outside Egypt, please be aware that your data may be transferred to, stored, and processed in Egypt or other countries where our service providers are located. These countries may have data protection laws that differ from those in your country.

For users in the EEA, UK, or other jurisdictions with data transfer restrictions, we ensure appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized mechanisms. By using our platform, you consent to the transfer of your data as described in this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by posting the updated policy on this page with a new "Last Updated" date and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.

14. Contact Information

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at:

General Inquiries: support@speexify.com

Data Protection Officer: privacy@speexify.com