This policy explains what we collect, why, who sees it, and how to exercise your rights. It applies to I Speak Everything ("ISE", "we", "our"), operated by Randy Plaice doing business as I Speak Everything (principal office in the State of California, USA).

1. What we collect

Information you give us

• Account data: name, email, phone number, country / time zone, profile photo (optional), preferred name for class.
• Billing data: we accept payments through Stripe. We do not store your full credit-card number on our servers — Stripe handles it. We store the last four digits, card brand, billing zip, and Stripe customer IDs for our records.
• Learning data: the language(s) you're learning, your level, lesson preferences, scheduling availability, in-app practice activity, and notes you choose to save.
• Communications: messages you exchange with your profesor/profesora through ISE's in-app messaging interface; support requests you send to us by email or web form.

Information collected during classes

• Audio and video: ISE records every class for quality, dispute resolution, and to let you re-watch sessions. Recordings are processed by Daily.co (our video provider) and stored on ISE infrastructure.
• Class metadata: who was in the class, when it started/ended, technical quality indicators.

Information collected automatically

• Device and browser: IP address, browser version, device type, operating system — used to keep your account secure and diagnose problems.
• Usage analytics: what pages you visit on ispeakeverything.com / speakeverything.com, what features you use in the app. We use first-party analytics for this; we are not running Facebook Pixel or similar cross-site trackers on ISE.

2. Why we collect it

• To deliver the service: match you with a profesor/profesora, run class video, schedule, bill you, give you progress data, surface flashcards and exercises.
• To pay and support our profesores/profesoras: route teaching credit to the right person for the right class. Profesores/profesoras never see your email, phone, or off-platform contact information — only the in-class identity you choose.
• To improve the service: understand which features help students learn, fix bugs, plan curriculum.
• To meet legal requirements: tax records, anti-fraud, accessibility, age-verification.

3. Class recordings — the important part

Every class is recorded. By starting a class on ISE, you consent to that recording. If you (or a parent / guardian) do not consent to recording, do not attend the class — contact support and we'll refund the unused portion of your subscription.

Default retention is 90 days. After 90 days, recordings are deleted unless they are flagged for a dispute, an appeal, a safety incident, or you've explicitly asked us to keep a session longer for your own re-watching.

Recordings live on infrastructure we control (or our processors' infrastructure under contract — Daily.co for the live session, and S3-equivalent storage we manage). They are not used to train AI models, and they are not sold or licensed to third parties.

4. Who sees what

Inside ISE

• Your profesor/profesora sees: your in-app identity (the name you chose for class), your enrolled language and level, your scheduling availability, and the messages you send through in-app messaging. They do not see your email, phone, address, or billing information.
• Your country lead sees: your in-app identity, your class history, payment-status flags (paid / unpaid / past due — not the underlying card data), and any disputes you have opened.
• The founder (Randy) sees: everything above, plus billing records as needed for tax and operational decisions.

Outside ISE — service providers

We use a small set of vendors to run the service. Each has a contract with us limiting their use of your data to what's needed to perform their function:

• Stripe (payments + payouts): processes your card, holds Stripe-side customer records, sends 1099s where applicable. Stripe's privacy policy: stripe.com/privacy.
• Daily.co (live video): processes the audio/video of your class. Recordings are exported to ISE storage at the end of the class.
• Netlify (web hosting): hosts the marketing site and the team area; logs IPs as a normal part of web hosting.
• Beehiiv (newsletter, if you opt in): only used if you explicitly subscribe.
• Email service (TBD) for transactional email; will be disclosed and listed here once selected.

Legal and safety disclosures

We will disclose data when we are legally required to (court order, subpoena, government request with valid legal basis), or when we believe in good faith it is necessary to prevent imminent physical harm to you or another person. We do not proactively share data with law enforcement absent a legal requirement.

5. Children — under 13 and 13–17

ISE requires you to be at least 13 years old. We do not knowingly collect data from anyone under 13. If we learn that we have collected data from a child under 13, we will delete it as quickly as we can — please contact privacy@speakeverything.com.

If you are between 13 and 17, a parent or guardian must accept the Terms of Service on your behalf. That adult is the contracting party for billing, recording consent, and all other purposes — including the right to request your data and to revoke consent.

6. Your rights

Regardless of where you live, you can:

• See what we have — request a copy of the data we hold about you.
• Correct it — fix anything that's wrong.
• Delete it — close your account and have your personal data deleted (we retain limited records for tax and dispute purposes — see below).
• Export it — get a structured copy of your data (account info, class history, messages, recordings within retention).
• Withdraw consent — stop processing for any purpose where consent is the legal basis (e.g., marketing emails).

California (CCPA/CPRA) residents: the rights above apply. You also have the right not to be discriminated against for exercising them, and the right to opt out of any "sale" or "share" of personal information. We do not sell or share personal information for cross-context behavioral advertising.

European Economic Area / United Kingdom residents (GDPR / UK GDPR): the rights above apply, plus the right to object to processing, restrict processing, and lodge a complaint with your local data-protection authority. Our legal basis for processing is contract performance (delivering the classes you paid for), legitimate interest (improving the service, preventing fraud), and consent where applicable.

To exercise any right, email privacy@speakeverything.com. We will respond within 30 days.

7. How long we keep things

• Account data: while your account is active, plus up to 7 years after closure for tax and dispute purposes.
• Billing data: 7 years (US tax retention requirement).
• Class recordings: 90 days by default; longer if flagged or you opted to keep.
• Messages with your profesor/profesora: while your account is active. You may request earlier deletion.
• Analytics: aggregated indefinitely; identifiable analytics for 24 months.

8. Security

We use industry-standard transport encryption (HTTPS / TLS), encryption at rest on customer data and recordings, role-based access for ISE staff, and audit logs of who accessed what. No system is perfectly secure — if we ever experience a data breach affecting your personal data, we will notify you within 72 hours of discovery, consistent with GDPR / state-law breach-notice requirements.

9. Cookies and tracking

We use first-party cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. We do not run Facebook Pixel or Google Ads remarketing on ISE. We use privacy-respecting analytics for usage measurement; you can ask us to exclude you from this.

10. International data transfers

ISE is operated from the United States. If you are using ISE from outside the US, your data is transferred to and processed in the US. For EEA / UK transfers, we rely on Standard Contractual Clauses (SCCs) with our processors and on the underlying contractual safeguards.

11. Changes to this policy

We may update this policy as we add features, change vendors, or to clarify language. Material changes will be announced in-app and on this page at least 14 days before they take effect; if you continue to use ISE after the effective date, you are bound by the updated policy.

12. Contact us

Privacy questions, data requests, or anything else: privacy@speakeverything.com

Postal: I Speak Everything, c/o Randy Plaice, State of California, USA (full address available on request).

Plain-English summary, one more time. We collect what we need to teach you. We don't sell your data. Profesores/profesoras never see your email or phone. Class recordings live 90 days unless flagged. You can ask for your data or have it deleted any time at privacy@speakeverything.com.

Effective: 2026-05-17 · Version 1.0