Privacy Policy

1. Introduction

At Phoniq, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

2. Data We Collect

Account Data

Collected at registration: full name, email address, and phone number. If you sign in with Google, we use your Google profile information.

Service Data

• Selected topics, call plans, and preferences
• Transcripts of conversations with the AI coach
• Conversation analysis scores (grammar, vocabulary, fluency, pronunciation)
• English proficiency level and progress history

Voice Recordings

Call recordings are stored on our AI voice infrastructure provider''s servers for 30 days and automatically deleted thereafter. Transcripts and derived analysis are retained until you close your account, or for up to 24 months after account inactivity, whichever comes first, after which they are deleted or irreversibly anonymised for aggregate research.

Payment Data

Package purchases, subscription charges, and refund records are stored. Credit card details are processed directly by our PCI-compliant payment service provider; Phoniq does not store card information.

Technical Data

IP address, browser type, device information, and session data are collected for security and performance purposes.

Mobile App Tracking

We do not track you across other apps or websites. We do not use Apple''s Identifier for Advertisers (IDFA) or any cross-app advertising identifier, and the Phoniq mobile app does not request App Tracking Transparency (ATT) permission. We do not share identifying data with data brokers.

3. How We Use Your Data

• Account creation and authentication
• Conducting AI-powered English conversation sessions
• Generating personalized language analysis and progress reports
• Processing balance and payment transactions
• Customer support and troubleshooting
• Improving service quality
• Fulfilling legal obligations

4. Who We Share Your Data With

We do not sell your data. We share it only with the following service providers, solely for the purpose of delivering our service:

All providers are bound by a Data Processing Agreement (DPA).

5. Data Retention

• Account information: Until account closure + 2 years
• Voice recordings: 30 days (on VAPI infrastructure)
• Transcripts and analysis: Until account closure
• Payment records: 10 years (legal requirement)

6. Security

Your data is transmitted with SSL/TLS encryption and hosted in secure data centers. JWT-based authentication and httpOnly cookies are used. Passwords are stored as bcrypt hashes.

7. Cookies

Phoniq uses only essential session cookies. See our Cookie Policy for details.

8. Your Rights

• Right to access your data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to object to processing
• Right to data portability

For users in Turkey, additional rights under KVKK (Turkish Data Protection Law) are covered within this policy.

9. Contact

For any privacy-related questions or requests: hello@phoniq.ai

10. Policy Changes

Material changes to this policy will be notified by email. The current version is always available on this page.