Privacy Policy

Phraze is operated by 3-101-947305 Sociedad Anónima, a company registered in Costa Rica with cédula jurídica 3-101-947305 and its registered address at Cinco Esquinas, Tibás, San José 11301, Costa Rica ("Phraze", "we", "us").

This Privacy Policy explains what personal data Phraze collects, why, who processes it for us and the choices you have. We are the controller of the personal data described here.

• Account details: your name, email address, profile picture and sign-in method, managed by our authentication provider Clerk, which also processes device and session data (such as IP address and browser) to keep sign-in secure.
• Practice content: audio recordings of your voice practice sessions, transcripts of what you and the AI coach said, pronunciation and fluency scores, AI feedback and evaluations, the recurring mistakes and word progress we track across sessions, your journal entries with their AI reviews and coaching chats, your notebook entries, and custom scenarios you create (including files you attach while drafting one).
• Future Voice: the English answer you record, its transcript, the generated preview and short insights about it. You can try Future Voice without an account; we then identify your browser with a cookie and a keyed hash of your IP address, used only to apply usage limits.
• Billing: Creem, our merchant of record, collects your payment details. We receive and store your plan, your Creem customer and subscription identifiers, the subscription status and the end of the current billing period. We pass your name and email to Creem to pre-fill checkout. We never see your full card number.
• Usage data: how many practice minutes and sessions you use, which we need to apply your plan's limits; pages you visit and actions you take in the app; and technical data such as browser, device and IP address.

• To provide Phraze: run voice conversations, score your speech, generate feedback, keep your history and progress, and play back your recordings.
• To personalize coaching: a summary of your level, recent scores and recurring mistakes is given to the AI coach so it can adapt to you.
• To manage your plan and subscription, and to apply usage limits.
• To understand how Phraze is used, fix errors and improve the product.
• To keep Phraze secure, prevent abuse and meet legal obligations.

We process your data to perform our contract with you, based on our legitimate interests in running, securing and improving Phraze, to comply with the law, and with your consent where the law requires it (for example, for Future Voice).

• During a voice session your microphone audio is streamed from your browser to OpenAI, which runs the AI conversation partner, and to Microsoft Azure AI Speech, which transcribes your speech and assesses your pronunciation.
• After a session, your transcript is sent to OpenAI models to produce feedback, evaluations and the mistakes we track. Journal entries, coaching messages and custom-scenario descriptions (with any attached file) are sent to OpenAI to generate reviews, replies and drafts.
• AI requests made from our servers for feedback and evaluation, including the transcript, are logged with your account identifier in Langfuse, an AI monitoring tool we use to check the quality and cost of these features.
• Future Voice sends your recording to Microsoft Azure for transcription, the transcript to OpenAI to refine your message, and your recording to ElevenLabs to create a temporary AI copy of your voice that speaks the refined message.

Scores and feedback are generated automatically to help you practice. They do not produce legal or similarly significant effects on you.

We use these service providers. Each processes personal data on our behalf, only for the purpose listed:

• Clerk: account sign-in and authentication.
• Vercel: website and app hosting.
• Neon: our PostgreSQL database (account-linked practice content and progress).
• Cloudflare R2: storage of session recordings, Future Voice audio and generated pronunciation audio.
• Upstash: usage counters, rate limits and background jobs.
• OpenAI: AI conversation partner, feedback, evaluation and writing coach.
• Microsoft Azure AI Speech: speech transcription, pronunciation assessment and text-to-speech.
• ElevenLabs: temporary voice copy for Future Voice.
• Langfuse: monitoring of AI requests and responses.
• PostHog: product analytics, including recordings of how pages are used.
• Sentry: error monitoring, including recordings of some sessions to diagnose errors.
• Creem: payments, taxes, invoices and subscription management, as merchant of record.

We do not sell your personal data. Beyond the providers above, we share it only when you choose to (for example, a Future Voice share link, which anyone with the link can open until it expires or you revoke it), when the law requires it, to protect rights and safety, or as part of a merger or sale of our business, under the same protections.

Several of our providers process data in the United States and other countries outside Costa Rica. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

• Account details, practice content, recordings and progress: for as long as your account exists, until you ask us to delete them.
• Files attached while drafting a custom scenario: deleted as soon as the draft is generated.
• Future Voice: your server-side recording and the temporary voice copy are deleted after processing. An unshared preview and its insights expire 30 minutes after they are generated, or sooner if you end the experience. A shared preview stays available for 7 days from the first share unless you revoke it earlier; only the generated audio is kept for the share.
• Usage counters expire on their own once the daily or monthly window ends.
• Analytics and error data: according to the retention settings of PostHog and Sentry.
• Billing records: kept by Creem as required by tax and accounting law.

Our providers may keep logs and backups for a limited time under their own policies after we delete data through them.

• Essential: Clerk uses cookies to keep you signed in. Future Voice sets a cookie so your browser can access and revoke your own preview.
• Analytics and diagnostics: PostHog and Sentry use cookies or local storage to recognize your browser across visits, measure usage and diagnose errors.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop sign-in from working.

Depending on where you live, including under Costa Rica's Law No. 8968 on the Protection of Persons in the Processing of their Personal Data and the EU and UK GDPR, you can ask to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent at any time.

To exercise any right, or to delete your account and its data, write to support@phraze.app from the email address on your account. We will confirm your request and complete it within 30 days, except for data we must keep by law. Cancel any paid subscription first. You can also complain to your local data protection authority; in Costa Rica, that is PRODHAB.

Phraze is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

We protect your data with encryption in transit, private storage for recordings that can only be played through short-lived signed links, and access restricted to your own account. No system is perfectly secure, so we cannot guarantee absolute security.

We will post any update here with a new date and, for material changes, tell you in the app or by email before they take effect.

Questions about this page? Write to support@phraze.app or to 3-101-947305 Sociedad Anónima, Cinco Esquinas, Tibás, San José 11301, Costa Rica.