Privacy Policy

Who we are

SoloSpeak is operated by PolySail Co., Ltd. (“we”). Contact: polysail@163.com.

What stays on your device

Practice recordings, raw and edited transcripts, native-language input, confirmed intent, reference English, practice history, Speak calendar data, your selected native locale, and successfully generated reference-audio cache are stored locally in the app’s container. You can delete individual practices or clear history in the app. Reference audio is cached by revised English, voice preset, model, and synthesis settings so it can be reused across practices and app launches.

Uninstalling the app normally removes its local container, subject to iOS behavior. Device backups are governed by your Apple settings.

Microphone, Speech, and Translation

We request Microphone access only when you start recording and Speech Recognition access for transcription. Speech and Translation use on-device capabilities when supported and prepared. Availability depends on device, language, and downloaded resources; not every locale has been individually verified.

An older server-based Speech fallback is used only for languages that require it and only after a separate explicit permission alert. If you decline, your recording remains available and you can enter text manually. No audio is silently sent to a third-party model. You may deny either permission; manual English entry and existing local content remain available where the workflow permits.

Optional cloud reference speech

When you explicitly generate reference speech, the app sends the following to our Cloudflare gateway:

• your revised English text only;
• a server-approved voice-preset identifier, idempotency key, and synthesis parameters;
• signed StoreKit transaction data and a stable appAccountToken used to verify entitlement and maintain your character balance;
• when App Attest enforcement is enabled, App Attest key, challenge, and assertion data used to protect paid endpoints.

Your original practice recording and raw native-language audio are not sent to ElevenLabs. ElevenLabs receives the revised English and voice/synthesis parameters to generate audio. The API key remains on the controlled server.

Cloudflare D1 stores entitlement, account, transaction, request-digest, character-usage, quota, App Attest, and timing metadata needed to operate and secure the service. Private Cloudflare R2 stores generated reference audio for idempotent replay and is configured for approximately 24-hour lifecycle deletion; actual deletion timing is controlled by R2. Successful audio retained in the app’s persistent local cache is not subject to that 24-hour server deletion. The gateway does not create public audio URLs.

Purchases and balances

Monthly and yearly subscriptions provide 10,000 successful-generation characters per UTC calendar month. A consumable pack grants 5,000 permanent characters after server confirmation. Subscription allowance is consumed before permanent characters. Failed generation and cached playback do not consume characters.

Apple processes payment; we do not receive your full payment-card details. We process signed transaction identifiers, original transaction identifiers, product identifiers, entitlement status, revocation/refund data, and the stable account token to grant, restore, synchronize, or revoke balances. Consumable purchases are finished only after the server confirms the relevant grant.

App Attest and security

App Attest data is used to verify that paid requests come from a legitimate app instance and to detect replay or abuse. The gateway may store an attestation key identifier, public key, receipt, environment, counter, challenge status, and timestamps. It is not used for advertising or cross-site tracking.

Tracking, ads, and sale of data

We do not use third-party advertising, do not sell personal information, and do not track you across other companies’ apps or websites for advertising. The app’s privacy manifest sets NSPrivacyTracking to false. No App Tracking Transparency prompt is used.

Retention and deletion

Local content remains until you delete it, clear history, remove the app, or device backup/storage behavior removes it. Private R2 audio has the short lifecycle described above. Server metadata is retained only as needed for purchase entitlement, fraud prevention, accounting, security, and legal obligations; an exact automatic D1 retention period is not currently established and must not be represented as one.

Request help with server-side purchase/balance records through polysail@163.com. Identity and transaction verification may be required. Deleting local history does not cancel a subscription or erase Apple’s purchase records.

Children

The service has no account system, social features, or targeted advertising. It is not designed to collect child profiles. Parents or guardians should supervise microphone and purchase use. Contact us if you believe a child’s information was submitted through optional cloud generation.

International processing

Cloudflare, ElevenLabs, and Apple may process data in countries other than yours. Their processing is also governed by their own terms and privacy policies. Regional availability and legal safeguards must be reviewed by the Seller before launch.

Changes and contact

We will update this policy when data practices change and revise the effective date. Material changes should be presented through an appropriate product or website notice.