Privacy Policy - How We Handle Your Data

Last updated: October 31, 2026

This Privacy Policy explains which personal data SpeechReader ("we", "us") processes when you use our website, web app, mobile apps and browser extension (together, the "Service"), why we do it, how long we keep it and what rights you have.

1. Who is responsible

SpeechReader is responsible for the processing of your data. You can reach us at info@speechreader.io.

2. Your account

You need a free account to use the reader. You can sign in with Google, Apple, GitHub or a one-time link sent to your email address.

What we store: your email address, your name and profile picture if the sign-in provider shares them, which sign-in methods you use, and the dates your account was created and changed. Accounts that use the same email address are linked.
Sign-in: we keep you signed in with a session cookie for up to 14 days (in the mobile apps, up to 90 days). Sign-in links sent by email expire after 15 minutes.
Why: to provide the Service you signed up for (Art. 6(1)(b) GDPR).

3. Your documents and audio

Documents: the text you write, paste or import is saved in your library, together with its title, the name of an imported file, the voice you chose and where you stopped, so you can continue on any device. Your current text is also kept in your browser's local storage. We keep a document until you delete it or your account is deleted; documents you have not opened for 12 months may be deleted automatically. The free plan holds up to 5 documents.
Speech synthesis: to turn text into speech, the text and the chosen voice are sent to our cloud speech-synthesis provider.
Generated audio: audio and its word timings are stored temporarily so you can play them again without waiting. They are deleted automatically a few days after they were last used.
Imported files (paid plans): PDFs, images, Word and PowerPoint files you import are sent to our text-recognition provider to extract the text. We do not keep the file itself, only the text that ends up in your document.
Imported web pages (paid plans): when you import a web page by its link, the link is sent to our web-page provider, which loads the page for us. We keep only the text that ends up in your document, and the link as its source. To apply the daily limit we count the pages you import each day, and we keep statistics of imports and of websites that could not be imported, which do not identify you, for up to 6 months.
Downloads (paid plans): when you download a document as one audio file, the parts are joined on our servers. We keep the file name and the purpose you chose so the download appears in your history. The finished file is deleted after about 7 days.
Why: to provide the Service (Art. 6(1)(b) GDPR).

We do not use your text, files or audio to train AI models, and we do not sell them.

4. Plans, payments and usage

Payments: subscriptions on our website are sold by Polar, which acts as merchant of record; older subscriptions are billed by Stripe. Subscriptions in our mobile apps are billed by Apple or Google, and we use RevenueCat to confirm them. These providers process your payment details under their own privacy policies. We never see your full card details; we receive your subscription status and a customer reference.
Daily credits: we count the credits you use each day to apply your plan's daily limit and keep these counts for 40 days.
Why: to fulfil the contract (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c) GDPR).

5. Messages you send us

When you use the contact form or send feedback from the app, we receive your message, your email address and, for feedback, the page it was sent from. Feedback is stored with your account and forwarded to us by email. We use it only to answer you and to improve the Service (Art. 6(1)(f) GDPR).

6. Analytics, security and cookies

Analytics: we use a self-hosted instance of Plausible Analytics, which counts page views and downloads without cookies and without building profiles of individual visitors.
Security: to protect the Service against abuse, we count requests per IP address for a few minutes and keep a log of blocked requests for 7 days.
Cookies and local storage: we only use what the Service needs: the sign-in cookies, a cookie that remembers whether the sidebar is collapsed, and local storage for your current text, voice and import settings and theme. We do not use advertising or tracking cookies.
Why: our legitimate interest in a secure, working Service and in understanding how it is used (Art. 6(1)(f) GDPR).

7. Service providers

We use the following categories of providers, bound by data-processing agreements where required:

Hosting: Vercel (website and app) and our own servers in the European Union for the database, generated audio and analytics
Speech synthesis: a cloud speech-synthesis provider (text you have played)
Text recognition: a document-recognition provider (files you import)
Web pages: Firecrawl (links to web pages you import, and their content)
Email: Mailgun, EU region (sign-in links and messages to us)
Payments: Polar, Stripe, Apple, Google and RevenueCat (see section 4)

Some of these providers process data outside the European Union. Where they do, the transfer is based on an adequacy decision of the European Commission or on the EU standard contractual clauses.

We do not sell your personal data, and we only disclose it to authorities where the law requires us to.

8. How long we keep your data

We keep your account data for as long as your account exists. Documents, audio and usage data are deleted on the schedules described above. When your account is deleted, we delete your account, documents, download history and subscription records, except where tax or accounting law requires us to keep invoices.

9. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to receive it in a portable format. To use any of these rights, or to delete your account, write to info@speechreader.io.

You also have the right to lodge a complaint with a data protection supervisory authority.

10. Children

The Service is not intended for children under 16, and we do not knowingly collect data from them.

11. Changes to this policy

We update this policy when the Service changes. The date at the top shows the latest version; if a change affects you significantly, we will tell you on the website or by email.

12. Contact

Questions about this policy or your data: info@speechreader.io