Privacy Policy
Last updated: 5 November 2026
This policy explains which personal data the ProvaSpeak mobile app and provaspeak.webasist.com process, why, and how. It serves as our notice under the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK).
1. Controller
Webasist Teknoloji Limited Şirketi ("Webasist", "we"). Contact: destek@webasist.com
2. In short
- Your voice recordings are used only to score your speaking and are deleted automatically after 30 days. You can delete them any time in the app.
- We ask for your explicit consent before any recording; without it nothing is recorded.
- No ads, no advertising or tracking SDKs, and we never sell your data.
- Our providers do not use your voice to train AI models.
- You can delete your account and all your data from the app in one step.
3. Data we process
| Data | When | Purpose |
|---|---|---|
| Random user ID and device ID | First launch | Provide the service without sign-up; link purchases to your account |
| Profile: target exam, exam date, target band, weak areas, language | If you enter it | Personalise your plan and explanations |
| Voice recordings | When you speak in the Exam Room | Transcription, pronunciation and fluency measurement, scoring |
| Transcripts, word timings, scores and reports | After scoring | Show your report and progress |
| Mistake bank and phrase notebook | When you save items | Spaced-repetition review |
| Live Coach: live speech audio, session length, session summary (corrections, new phrases, short notes) | When you use the Live Coach | Run the voice conversation, track your quota, personalise the next session. Live Coach audio is not recorded. |
| Purchase records (product, date, renewal status) | When you buy | Unlock Pro/Pro+. We never receive your card details; Apple or Google takes the payment. |
| Your official test result (optional) | If you share it | Measure our accuracy (stored as unverified, self-reported) |
| Apple or Google account ID and email (optional) | If you link an account as a backup | Restore your account on a new device |
| Technical logs (IP address, request time, errors) | Every request | Security, abuse prevention, debugging |
4. Providers and international transfers
Voice and text are processed only for the purposes below and under each provider's data processing terms. We ask for your explicit consent to these transfers in the app.
| Provider | Location | Purpose |
|---|---|---|
| Deepgram, Inc. | USA | Speech-to-text; Live Coach speech recognition and voice replies |
| Microsoft (Azure Speech) | EU (West Europe) | Pronunciation assessment |
| Anthropic, PBC (Claude) | USA | Writing the report from transcripts and measurements; Live Coach replies |
| RevenueCat, Inc. | USA | Subscription and purchase status (keyed by your random user ID) |
| Apple, Google | — | App distribution and payments |
| OneProvider (hosting) | Germany | Our servers, database and recording storage |
| Cloudflare | Global | DNS and website delivery |
5. Retention
- Voice recordings: 30 days, then deleted automatically.
- Transcripts, scores, reports, mistake bank, profile: until you delete your account.
- Purchase records: as long as tax and consumer law require.
- Technical logs: up to 90 days.
6. Legal bases
Performance of our contract with you (GDPR Art. 6(1)(b)), your explicit consent for processing and transferring voice recordings (Art. 6(1)(a), Art. 49(1)(a)), legal obligations (Art. 6(1)(c)) and our legitimate interest in keeping the service secure (Art. 6(1)(f)).
7. Your rights and deletion
You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time.
- Delete recordings: App > Profile > Delete my recordings.
- Delete account: App > Profile > Delete my account. Your account, reports and recordings are permanently deleted. If you can't access the app, email destek@webasist.com and we delete it within 30 days. Details: Account deletion.
- Deleting your account does not cancel your subscription; cancel it in the App Store or Google Play.
- Send requests to destek@webasist.com; we answer within 30 days. You may also complain to your data protection authority.
8. Children
ProvaSpeak is not directed at children under 13 and we do not knowingly collect data from them. If you are under 18, use the app with a parent's or guardian's permission.
9. Security
All connections use TLS. Provider keys live only on our servers, never in the app. Recordings are kept in private storage that is not publicly reachable.
10. Changes
When we update this policy we change the "Last updated" date and announce important changes in the app.