Privacy Policy
Last updated: April 3, 2026
1. Introduction
recode LLC ("recode", "we", "us", or "our") operates an AI-powered Spanish language learning service available at hablaai.recode.so (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and with whom we share it when you create an account and use the Service.
By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you register, we collect your first name, last name, and email address. This data is processed and stored through our authentication provider, Clerk (see Section 4).
2.2 Onboarding and Profile Data
During the onboarding flow, we collect the following information to personalize your experience:
- Your primary goal for learning Spanish (e.g. travel, casual interest)
- Your anticipated travel timing, if your goal is travel-related
- Your interests (e.g. food, music, culture, sport)
2.3 Language Assessment Data
To place you at the right learning level, we conduct a spoken placement assessment and a listening comprehension test. This process involves:
- Voice audio — recorded live during your speaking placement session via LiveKit and transcribed in real time by Deepgram
- Transcripts of your spoken responses
- Proficiency scores generated by an AI model, including ratings for grammar, vocabulary, comprehension, and pronunciation
- Listening test responses and your overall listening score
2.4 Conversation Data
Messages exchanged with the AI tutor during onboarding and study sessions are stored on our servers. This includes both your messages and the AI's responses. Conversation history is used to provide continuity across sessions and to improve tutoring quality.
2.5 Technical and Usage Data
When you visit our website, our hosting infrastructure (Cloudflare) automatically collects standard server log data such as IP addresses, browser type and version, pages visited, and timestamps. This data is used for security, performance monitoring, and abuse prevention.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Personalize your Spanish learning experience and match you to the appropriate level
- Conduct your language placement assessment and track your progress
- Generate AI tutoring responses tailored to your goals and interests
- Synthesize audio for listening exercises
- Ensure the security and integrity of the Service
- Improve the quality and accuracy of our AI models and assessments
- Communicate with you about your account or material changes to the Service
We do not sell your personal data to third parties.
4. Third-Party Service Providers
To deliver the Service, we rely on a number of third-party providers. Each provider has access only to the data necessary to perform their function and is bound by their own privacy policies. The key providers are:
| Provider | Purpose | Data Processed |
|---|---|---|
| Clerk (clerk.com) | User authentication and account management | Name, email address, hashed password, session tokens |
| Convex (convex.dev) | Backend database and server functions | All user profile, onboarding, assessment, and conversation data. Hosted on an OVH VPS. |
| LiveKit (livekit.io) | Real-time voice communication for tutoring sessions | Audio streams and session metadata (name, learning goals) during live voice sessions |
| Deepgram (deepgram.com) | Speech-to-text transcription | Your voice audio during live sessions, processed in real time to produce text transcripts |
| OpenAI (openai.com) | AI language model for tutoring and assessment | Conversation context, spoken transcripts, and assessment inputs sent to generate responses and proficiency scores |
| Inworld AI (inworld.ai) | Text-to-speech synthesis for tutor voice | Text content sent to generate spoken audio for the AI tutor and listening exercises |
| Cloudflare (cloudflare.com) | Website and API hosting on Cloudflare Workers | IP addresses, HTTP request metadata, and browser headers |
Your voice audio is processed by Deepgram and LiveKit during live sessions and is not stored by us beyond what is required to produce a transcript. Conversation text may be sent to OpenAI for response generation. Audio for listening exercises is generated by Inworld AI and stored on our servers.
5. Data Storage and Security
Your profile and assessment data is stored in our Convex database, which runs on a dedicated server hosted by OVH. We use industry-standard security measures including encrypted connections (HTTPS/TLS), authenticated access, and access controls to protect your data.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete your personal data within a reasonable timeframe, except where we are required to retain it for legal, compliance, or fraud prevention purposes.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request that we delete your personal data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to or request restriction of certain processing activities
To exercise any of these rights, please contact us at the address in Section 10. We will respond within 30 days.
8. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. For material changes, we will notify you by email or via an in-app notice. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:
Habla AIprivacy@recode.so