Privacy policy

The short version

• What people say goes through our server to Soniox. Soniox turns it into text and translates the text if you choose a language. We do not keep any audio or text.
• You can listen without an account. We then only know a random code for your device and how many minutes you listen.
• If you sign in, we also keep your email address and how you sign in: with Apple, Google or your email address.
• You pay through the App Store or Google Play. We never see your payment details.
• We do not sell data, show ads or use trackers.

Who we are

Leo Speak is made by Thomas Oomens, a sole trader using the name HonestDev. Address: Regulierstraat 43 J, 6511 DN Nijmegen, the Netherlands. KvK (Dutch trade register) number: 52326470. He is responsible for your data (the data controller). Questions about privacy? Email [email protected].

Listening: audio and text

When you tap Start, the app records sound with the microphone. That sound goes encrypted to our server and straight on to Soniox. Soniox turns speech into text. The text comes back to your screen. After Stop, the app records nothing.

We do not store audio or text, not even in log files. The text is only on your screen until you start again or close the app. Names you give to speakers stay on your device.

Soniox, Inc. (United States) turns the audio into text on its servers in the United States. If you choose a language to translate the text, Soniox does that in the same stream. According to Soniox, audio and text from live transcription are not stored and are never used to train their systems, and that also applies to the translated text. Soniox gets no name or email address from us. It only gets a short code derived from your device or account code, so we can trace a problem.

Please note: the app also hears the people around you. Let them know you use Leo Speak.

Without an account

The first time you open it, the app creates a random device code and a secret key. Both are stored securely on your device. On our server we keep:

• the device code, and the key only as a hash (a code that cannot be reversed);
• the kind of device: iPhone, Android or web;
• when the device was created and when it was last active;
• a hash of your IP address at the moment the device was created. This limits abuse: at most 10 new devices per IP address per day;
• for each time you listen: the start and end time, the number of seconds, your plan at that moment and why it stopped.

We need this to count your free minutes each month. You can find your device code in the app on the Subscription tab, under Device code.

With an account

You do not need to sign in to listen, buy or restore a plan. If you sign in anyway, we keep:

• your email address. If you choose "Hide My Email" at Apple, we only get that hidden address;
• how you sign in (Apple, Google or email) and the code Apple or Google uses for you. We do not ask for your name;
• whether your email address is confirmed, your language (Dutch or English) for our emails, when your account was created and when you last signed in;
• which devices are or were linked to your account, and how many free minutes from a device were carried over to your account;
• your sign-in keys, only as a hash. They expire after 90 days without use, and always after one year;
• if you sign in with Apple: an encrypted key from Apple. We only use it to end the link with Apple when you delete your account.

If you sign in with your email address, we send you a 6 digit code. We send that email through Brevo. We keep the code only as a hash, together with your email address, the device and a hash of your IP address. We delete this after 24 hours.

If you sign in with Apple or Google, we keep a hash of the sign-in proof until it expires. This way nobody can use the same proof twice.

Plans and purchases

You buy a plan in the App Store (Apple) or in Google Play (Google), with or without an account. They handle the payment. We do not see your name, address or payment details.

We use RevenueCat to check purchases. RevenueCat gets your device code for a purchase without an account, and your account code for a purchase with an account, plus the purchase details from the store. That code is random, without your email address. We keep your plan (Light, Medium or Max), the product, the end date and the store against that code. If you sign in later, we link the plan from your device to your account. We also keep the messages RevenueCat sends us about your purchases, with details such as the product, the price, the country and the transaction number.

This website and the web app

This website uses no analytics, no ads and no trackers. There is only one cookie, which remembers your language. The fonts come from our own server.

The web app at app.leospeak.app keeps your device code and sign-in key in your browser storage. The sign-in page of the web app shows the Google sign-in button. That button comes from Google, so Google receives data under its own privacy policy.

Security and log files

All connections are encrypted. Our server writes technical log lines, such as "session started" or "sign-in succeeded". They contain no audio, no text, no email addresses, no keys and no full device or account codes. They only contain short codes derived from them.

Cloudflare sits between the internet and our server and this website. Because of that, Cloudflare sees your IP address and protects us against attacks. Our own server only uses your IP address briefly in memory to limit abuse, and only stores it as a hash.

Who helps us

These companies process data for us. They may only use it to provide their service to us.

Hetzner Online GmbH, Germany

our server and database. Your data is stored in Germany.

Cloudflare, Inc., United States

network and security for our server and this website.

Soniox, Inc., United States

turns audio into text and translates the text if you choose a language. This happens in the United States.

RevenueCat, Inc., United States

checks and manages purchases.

Brevo (Sendinblue SAS), France

sends the email with your sign-in code.

If you sign in with Apple or Google, or buy something in the App Store or Google Play, you also use services from Apple or Google. They are responsible for those services themselves, under their own privacy policies.

Data outside the EU

Soniox, RevenueCat and Cloudflare are American companies. Audio and text go to Soniox in the United States. Other data, such as how much we use the service, can also be processed in the United States. That is only allowed with extra protection: the EU-US Data Privacy Framework when the company has signed up for it, or otherwise the standard contractual clauses of the European Commission.

Why we are allowed to do this

To make the app work

turning audio into text, counting minutes, your account and your plan. This is needed for our agreement with you (GDPR article 6(1)(b)).

To prevent abuse and keep the service safe

such as the limits per IP address, blocking reused sign-in proofs and the log lines. This is our legitimate interest (GDPR article 6(1)(f)).

When the law requires it

for example when we must keep or hand over data (GDPR article 6(1)(c)).

How long we keep data

• Audio and text: not at all. They only pass through our server.
• Email codes: 24 hours.
• Hashes of Apple and Google sign-in proofs: until they expire, usually within a few hours.
• Sign-in keys: until 7 days after they expire for good. That is at most one year and 7 days after you signed in.
• Your account, email address and plan: until you delete your account.
• Device code and listening sessions: as long as you use the app on that device. We need them to count the free minutes per device. Want us to delete them sooner? Email us your device code.
• Log lines: only as long as we need them to look into problems and abuse.

Your rights

You can ask us which data we have about you. You can also ask us to correct it, delete it or give you a copy. And you can object or ask us to process less. Email [email protected]. We reply within one month.

You can also delete your account yourself. The page Delete your account explains how.

Not happy with how we handle your data? You can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or with the authority in your own country.

Children

Leo Speak is not made especially for children. Are you under 16? Then ask a parent or guardian for permission before you create an account or buy something.

Changes

If we change this privacy policy, we update the date at the top. We also announce big changes on this website.