Privacy Policy

1. Data controller

Vitali Amare — Self-employed professional (autónomo), trading as Language Success Institute. Calle Alejandro Dumas, 17 - Oficinas, 29004 Málaga, Spain. NIE/NIF: Z0271358D. Contact for all privacy matters: office@languagesuccessinstitute.com.

Language Success Institute is a trading name operated by Vitali Amare and is not a separately incorporated company.

2. Categories of personal data we process

Card and payment credentials are entered directly into Stripe's hosted checkout. We never receive or store your card number, CVC or bank credentials.

• Account identity and contact information, including your email address and name where you provide it.
• Professional profile information you give during onboarding: role, seniority, native language, operating/target language, development goals, high-stakes situations, usage frequency and self-assessed confidence.
• Voice recordings, during processing only (see section 6).
• Transcripts of what you said.
• Language Identity analyses: your Language Identity Score™, V.O.I.C.E. Profile™, Power Leaks™, Language Interventions™, repeat/delta results and progress information.
• Subscription and entitlement information: plan, status, billing period, cancellation state and an append-only usage record.
• Payment-related identifiers returned by Stripe, such as the customer and subscription identifiers.
• First-party product analytics events (see section 10).
• Necessary technical and security information required to operate and protect the Service.

3. Purposes and lawful bases

• Creating and authenticating your account, and delivering the Service — performance of a contract, and steps taken at your request before entering into a contract.
• Transcribing your recordings and producing AI-supported Language Identity analysis, personalised with your professional profile — performance of a contract.
• Tracking your progress across sessions and repeats — performance of a contract.
• Administering subscriptions, entitlements and usage allowances — performance of a contract.
• Processing payments, invoicing and tax handling through Stripe — performance of a contract and compliance with legal obligations.
• Fraud prevention, abuse prevention and the security of the Service — legitimate interests, and legal obligations where applicable.
• Responding to customer support and privacy requests — performance of a contract and legal obligations.
• Keeping accounting, tax and transaction records — legal obligations.
• First-party product analytics to understand which parts of the Service are used and to improve it — legitimate interests.
• Any processing that requires it under applicable law is carried out on the basis of your consent, which you may withdraw at any time.

4. Processors and recipients

Your name and email address are not intentionally included in the AI analysis request. The information sent for analysis is your transcript together with relevant professional context such as role, seniority, native language, operating/target language, goals and high-stakes situations.

We do not operate a project-specific zero-data-retention arrangement with the downstream AI providers, and we therefore do not claim that these providers retain nothing. Their processing is governed by their own applicable terms. We do not sell your personal data and we do not share it with advertising networks.

• Supabase — database, authentication and private file storage.
• Stripe — payments, subscriptions, billing, invoicing and tax calculation and collection.
• Lovable — application hosting and infrastructure, and the AI Gateway through which AI requests are routed.
• Cloudflare — globally distributed edge infrastructure serving the application and its server functions.
• OpenAI — speech-to-text processing of your recordings (model gpt-4o-mini-transcribe), accessed through the Lovable AI Gateway.
• Google — AI-supported analysis of your transcript and professional profile context (Gemini), accessed through the Lovable AI Gateway.

5. International transfers

Our primary application data — Postgres database, authentication and private file storage — is hosted with Supabase on AWS in eu-west-2 (London, United Kingdom). The United Kingdom is outside the EU and the EEA. Transfers to the United Kingdom are currently covered by an applicable European Commission adequacy decision.

The frontend and server functions run on Cloudflare's globally distributed edge infrastructure. We have not identified any persistent storage of application data on Cloudflare.

Some providers, including our payment, hosting and AI processing providers, may process personal data outside the EEA. Where required, those providers rely on appropriate legal transfer mechanisms, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

We do not claim that all of your data stays within the EEA.

6. Voice recordings

When you record, the audio is stored in a private storage bucket locked to your account, and is sent through the Lovable AI Gateway to OpenAI for transcription. Your voice does not stay only inside the application — transcription requires it to be processed by our AI infrastructure.

Once your recording has been successfully transcribed, analysed and the analysis persisted, the original audio file is automatically deleted. If transcription or analysis fails, the recording is kept temporarily so the attempt can be retried or recovered, and you can delete it yourself at any time.

Your transcript, analysis and progress information are retained so that you can review past sessions and measure change over time, until you delete them or close your account.

You can use the Service without recording at all by typing your answer instead.

7. Retention

• Raw audio — deleted automatically after successful transcription and analysis; retained temporarily only where processing failed, until retried or deleted.
• Transcripts, analyses, Power Leaks™, Language Interventions™ and progress information — retained while needed to provide your account and progress experience, or until you delete them or close your account, subject to any lawful retention requirement.
• Usage ledger — a minimal, content-free record of analyses consumed, retained as necessary to administer entitlements and usage allowances, and removed when your account is deleted.
• Subscription and entitlement records — retained for the life of the account and thereafter only as required by law.
• Stripe transaction and accounting records — retained by Stripe and by us in line with Stripe's terms and applicable legal and accounting requirements. Deleting your Language Success account does not necessarily erase records we are legally required to keep.

8. Automated analysis

Your Language Identity analysis is generated with the assistance of artificial intelligence. It produces scores, observations and coaching recommendations from your own words.

Your Language Identity Score™ and related outputs are coaching and communication-performance-development indicators. They are not psychological, medical, psychometric, personality, employment or employability assessments, and they must not be used to make hiring or employment decisions.

The Service does not make legally significant or similarly significant automated decisions about you.

9. AI training

Language Success Institute does not use your voice recordings, transcripts or Language Identity analyses to train its own artificial-intelligence models.

This statement covers our own processing. The handling of data by third-party AI providers is governed by their applicable contractual and privacy terms.

10. Analytics

Analytics are currently first-party only, stored in our own database. The events recorded are: baseline submitted, scenario submitted and repeat submitted, together with your authenticated user identifier and relevant event metadata.

No Google Analytics, advertising tracker or third-party marketing analytics is implemented in the Service.

11. Cookies and browser storage

Authentication uses technically necessary browser storage provided by Supabase to keep you signed in. Stripe may set technically necessary cookies for payment processing and fraud prevention on checkout.

No advertising cookies or marketing trackers are currently implemented, so no optional-cookie consent banner is shown.

12. Your rights

To exercise any right, write to office@languagesuccessinstitute.com. We answer within the periods required by the GDPR.

In Spain, the competent supervisory authority is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. You may also complain to the authority in your country of residence.

• Access to the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data (available directly in Account → Delete everything and Delete my account).
• Restriction of processing.
• Objection to processing based on legitimate interests.
• Portability of the data you provided to us.
• Withdrawal of consent, where processing is based on consent.
• Complaint to a competent supervisory authority.

13. Children

The Service is designed for adult professionals. It is not directed at children, and we do not knowingly collect voice recordings or profile information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

14. Security

We apply safeguards appropriate to the sensitivity of voice data: encrypted transport (TLS/HTTPS), private (non-public) file storage, row-level database access controls scoping data to your account, server-side authorisation for entitlement and administrative operations, credentials held only server-side, and separation between user-level and privileged access.

No system can be guaranteed absolutely secure, and we do not promise absolute security.

15. Changes to this policy

We may update this policy as the Service changes. The current version date is shown at the top of this page, and material changes will be communicated through the Service or by email. Questions: office@languagesuccessinstitute.com.