ENGLISH HACKERS
Privacy Policy
Last updated: September 8, 2026
DRAFT FOR REVIEW. Not legal advice. Do not publish until the founder confirms the legal entity name, notice address, and contact email, and a licensed attorney has reviewed this document.
This Privacy Policy explains how the operator of the English Hackers service, currently doing business as English Hackers ("Company," "we," "us"), collects, uses, shares, and retains information when you visit https://talk.englishhackers.com, create an account, talk with an AI tutor, or otherwise use our Services. By using the Services, you agree to this Policy and to our Terms of Service.
The English version controls. Convenience translations, if we later provide them, do not replace it.
1. Who we are
We operate a voice-first language practice room. Students talk with AI tutors in American English, Brazilian Portuguese, or Japanese. The contracting legal entity will be identified on the live Service before this Policy is published. Until then, privacy requests may be sent to the address in Section 14.
2. Information we collect
Account information you give us. Name or display name if you provide one, email address, password (stored as a hash by our authentication provider, not in readable form on our application servers), the language you are stronger in, the language you want to practice, tutor choice, and similar setup fields.
Voice Data. When you talk, we collect audio of the session, transcripts, session records, practice notes, placement results, words and phrases taken from the conversation, and related technical logs. The Terms of Service define Voice Data and the license you grant. This Policy describes how we handle it as personal information when it identifies you.
Materials you paste or upload. Class notes, teacher comments, call transcripts, and other text you choose to put in the Services.
Billing information. Subscription plan, minute balance, purchase history, and customer identifiers used to talk to our payment processor. Card numbers and bank details are collected and processed by that processor. We do not store full card numbers on our systems.
Usage and device information. IP address, browser type, device type, pages viewed, approximate location derived from IP, language settings, and diagnostic logs, including whether a session started, dropped, or ended for idle time.
Cookies and similar technologies. We use cookies and local storage that are needed to keep you signed in, remember locale and theme, and run the site. We do not currently run a separate advertising pixel on the tutor app. If that changes, we will update this Policy.
We do not require a government ID to open a practice account. Do not send us a Social Security number, passport, or similar identifier unless we expressly ask for it for a specific legal purpose.
3. How we use information
We use information to:
- provide, operate, secure, and debug the Services, including minting a short-lived voice session, metering minutes, ending idle sessions, and saving a transcript;
- place you on a track, show progress, and write a practice note;
- process trial access, subscriptions, packs, taxes when enabled, and customer-portal changes;
- communicate about the account, billing, security, and product changes;
- prevent fraud, abuse, and reverse engineering of the teaching systems;
- comply with law and enforce our Terms;
- train, evaluate, fine-tune, and develop our models, prompts, teaching systems, and speech systems, using Voice Data and related content as described in Section 4.
We do not sell your personal information for money. We do not share it for cross-context behavioral advertising.
4. Voice Data, training, and retention
Voice Data is how the product works. We cannot run Talk without processing audio and text.
We use Voice Data to operate your sessions and, on an ongoing basis, to train and improve our systems. That includes human review by authorized team members, automated analysis, and sending audio or text to subprocessors that provide speech recognition, synthesis, and language-model inference.
Identifiable Voice Data is retained for the life of your account and for seven (7) years after the later of (i) account closure or (ii) your last session, unless a longer period is required by law, needed to resolve a dispute, or supported by a legitimate interest in training, security, or operating the Services.
De-identified or aggregated Voice Data, trained models, model weights, embeddings, and similar derived materials may be retained indefinitely and are not treated as your personal information once they no longer identify you.
If you ask us to delete your account, we will delete or de-identify personal information we are not required to keep, including identifiable Voice Data in our production databases, subject to the timelines and exceptions in Section 8. We will not unwind a trained model to remove a particular sentence.
You should assume that anything you say in Talk may be stored, reviewed, and used for training. Do not say anything you need to keep off a record.
5. How we share information
We share information only as needed to run the Services and comply with law, including with:
- Speech and AI providers, currently including xAI for Grok Voice, which receive audio and session instructions in order to conduct the conversation;
- Hosting and database providers, currently including Vercel and Supabase;
- Authentication and email providers, currently including Supabase Auth and Resend;
- Payment processors, currently including Stripe, which receive billing details;
- Authorized team members who need access to operate, teach, or debug;
- Professional advisors, and in connection with a merger, acquisition, or sale of assets;
- Authorities or others when required by law, to enforce our Terms, or to protect rights, safety, and security.
Subprocessors process information under their own terms and on our instructions. They are not a public directory of your conversations.
We do not sell transcripts to data brokers.
6. International transfers
The Services are operated in the United States. If you use them from Brazil, Japan, the European Economic Area, the United Kingdom, or anywhere else, your information, including Voice Data, will be processed in the United States and in other countries where our providers operate. Those countries may not have the same privacy laws as your home country. By using the Services, you understand that transfer.
Where a law requires a specific transfer mechanism, we will use the mechanism that applies to that provider relationship.
7. Cookies and local storage
We use strictly useful cookies and local storage: session and authentication, locale, theme, and similar preferences. You can block cookies in your browser. If you block authentication cookies, you will not stay signed in.
8. Your choices and rights
You can update setup fields in Account, cancel a subscription in the billing portal, and stop Talk at any time.
Depending on where you live, you may have rights under a U.S. state privacy law (including the Utah Consumer Privacy Act and the California Consumer Privacy Act as amended by the CPRA), Brazil's Lei Geral de Proteção de Dados (LGPD), Japan's Act on the Protection of Personal Information, or other law. Subject to that law and to verification of your identity, those rights may include the right to know or access personal information, to correct it, to delete it, to receive a portable copy, to withdraw consent, and to opt out of sale or sharing. Because we do not sell personal information and do not share it for cross-context behavioral advertising, there is no such sale or share to opt out of.
To make a request, email the address in Section 14 from the email on your account. We may need to verify your identity. We may decline a request we cannot verify, that would compromise another person, that would require us to unwind a trained model, or that a legal exception covers. Where the law provides an appeal, we will tell you how.
Deleting an account does not cancel a charge already made, and it does not delete Voice Data that has already been de-identified or incorporated into trained models.
9. Other information we keep
Separate from Voice Data, we keep account, billing, and tax records for as long as needed to provide the Services and to meet legal, tax, and accounting requirements, then delete or de-identify them.
10. Children's privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us and we will delete it.
Users aged 13 to 17 may use the Services only with a parent or guardian's agreement to the Terms. We do not use Voice Data from an account we know belongs to a child under 13 for training. Until a dedicated child mode exists, treat the Services as a general audience practice room for teens and adults.
11. Security
We use administrative, technical, and organizational measures designed to protect information. In practice this includes: access limited to people who need it; encrypted transport (HTTPS); authentication and database access controls at our providers; payment details handled by a PCI-compliant processor; and voice sessions minted with short-lived credentials rather than a long-lived key in the browser.
No method of transmission or storage is completely secure. A signed-in browser can still see some session instructions until we put a voice proxy in front of the model. Do not paste secrets into Talk.
12. Third-party links
The Services may link to pricing, billing portals, or other sites we do not control. Their privacy practices are their own.
13. Changes to this Policy
We may update this Policy and will post the revised version with a new "Last updated" date. Material changes to Voice Data use will be presented for agreement as described in the Terms.
14. Contact us
English Hackers
8850 S 700 E Unit 56
Sandy, UT 84091
Email: hello@mail.englishhackers.com
Privacy requests, including access and deletion, go to that email with the subject line "Privacy request."