Privacy Policy

What we collect, who else sees it, how long we keep it, and how you get rid of it. In plain English, because a policy nobody can read protects nobody.

Last updated: 29 August 2026

Who we are

Tapas Talk is made and operated by Keeda Studios ("we", "us"). This policy covers the Tapas Talk mobile app and this website. Contact: support@keedastudios.com.

The short version

• An account is created for you the moment you open the app. It is anonymous unless you choose to sign in.
• Your voice is sent to a speech-scoring service to be scored, and is not stored by us.
• We use analytics, and those events are tied to your account rather than anonymous. We say so below rather than calling it "anonymised".
• We do not track you across other companies' apps or websites, there are no adverts, and we never sell your data.
• You can delete everything yourself from inside the app, in about thirty seconds.

What we collect

An account identifier — always

When you first open the app it signs you in anonymously with Firebase Authentication and creates an account identifier. This happens without being asked, because your progress has to be saved somewhere. That identifier is not your name and does not identify you personally, but it is persistent and everything below is stored against it.

Your name and email — only if you sign in

If you choose Save my progress and sign in with Google or Apple, we receive the name and email address on that account so your progress can follow you to another device. Signing in is optional and the app works fully without it. If you use Apple's Hide My Email, we only ever see the relay address.

Voice recordings

When you tap the microphone, the app records what you say and sends it to be scored. The recording is scored and discarded. We do not store your voice — not on your device after the attempt, and not on our servers. What we keep is the resulting score.

Learning data

Chapters and levels finished, quiz answers, pronunciation scores per word, XP, streaks, medals, collectibles, review schedules and your pronunciation credit balance and its history. Also the two answers you give during onboarding: why you are learning, and which Spanish you want.

Usage and diagnostics

Which screens are opened, which lessons are finished and where people stop. Crash reports, including device model and operating system version. These are recorded against your account identifier.

Support messages

If you write to us in the app, the conversation is stored so we can reply.

Notification token

A push token, so reminders and replies can reach your device. You can turn notifications off at any time in Settings.

Who else processes it

We do not sell, rent or trade your data. These are the companies that process some of it on our behalf, and the only ones:

• Microsoft Azure Speech Services — scores your pronunciation. This is the default engine, so in normal use your voice recordings go to Microsoft. See the Microsoft Privacy Statement.
• OpenAI — the fallback pronunciation engine when Azure cannot score a clip, and the voice you hear when a word is read aloud. Audio sent to OpenAI's API is not used to train their models. See OpenAI's Privacy Policy.
• Google Firebase — authentication, the database holding your progress, analytics, crash reporting, push notifications and this website's hosting. Also Google Cloud Text-to-Speech for some audio. See Firebase's Privacy and Security.
• RevenueCat — records that you bought Lifetime Access so your purchase can be restored on another device. It receives your account identifier and the purchase, never a payment card. See RevenueCat's Privacy Policy.
• Apple and Google — take the payment. We never see your card details.

Tracking and advertising

There are none. The app shows no adverts, contains no advertising SDK, and does not track you across other companies' apps or websites. Because of that, iOS never shows you the App Tracking Transparency prompt — there is nothing for it to ask about.

We do use Firebase Analytics, and those events are recorded against your account identifier rather than being anonymous. We use them to work out which parts of the app are and are not working. That is the whole purpose.

Where your data lives

On Google Cloud and Firebase servers in the United States. If you are outside the US, using the app means your data is transferred there. For users in the UK and EEA, those transfers rely on the European Commission's Standard Contractual Clauses.

How long we keep it

• Voice recordings: not kept. Scored and discarded.
• Your account and learning data: until you delete your account.
• Support conversations: deleted with your account.
• Analytics and crash reports: up to 14 months, per Firebase's own retention settings.
• Operational backups: roll off within 30 days of deletion.

Deleting your account

Open Settings → Account → Delete Account in the app. It is immediate and permanent: your account, your progress, your credit history and your support conversation all go. Uninstalling the app does not delete your account — reinstalling would bring your progress back.

Full instructions, including what to do if you have already uninstalled, are on the delete your account page.

Your rights

Wherever you live you can ask us to give you a copy of your data, correct it, or delete it. Email support@keedastudios.com and we will respond within 30 days.

If you are in the UK or the EEA (UK GDPR / GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and to object to processing. Our lawful bases are: contract for the account and learning data that make the app work, and legitimate interests for analytics and crash reporting, which we balance against your privacy by not using them for anything but improving the app. You may complain to your national supervisory authority — in the UK, the Information Commissioner's Office.

If you are in California (CCPA / CPRA)

You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We have not sold or shared personal information for cross-context behavioural advertising in the past twelve months, and we do not do so now.

Children

Tapas Talk is for users aged 13 and over. It is not directed at children and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, email us and we will delete it. Parents and guardians can reach us at support@keedastudios.com.

Security

Data is encrypted in transit with TLS. Access to your data is restricted by database rules to your own account. No system is perfectly secure, and we do not claim otherwise.

Changes

If we change this policy we will update the date above and, where the change is significant, ask you to accept it the next time you open the app.

Contact

Keeda Studios
support@keedastudios.com