1. Who we are
SpeechMe is operated by Eric Deaville trading as Apps n SaaS ("we", "us", "our"). We are the data controller for the personal information you provide when using the SpeechMe application at app.speechme.app.
This website (speechme.app) is a marketing and information site only. It does not collect personal data, require account creation, or process payments. The data practices described in this policy relate to the SpeechMe application.
Contact: support@appsnsaas.com
2. What data we collect
Account and identity data — Your first name (used to personalise your experience), email address and password (provided at the payment stage), and an anonymous session identifier created automatically before you provide any personal details.
Speech content data — When you create a speech, you provide personal information about yourself and other people including names, personal memories and anecdotes, relationship details, professional history, and information about life events such as weddings, bereavements, and retirements. This is the most sensitive data we hold. It is used solely to generate your speech.
Payment data — We do not collect or store payment card details. Payments are processed by Paddle (our merchant of record). We receive only a transaction confirmation and the amount paid.
Technical and usage data — Device type, browser type and version, app version, locale preference, speech generation timestamps, and anonymised error logs.
Feedback data — If you submit a rating or feedback within the app, we collect your rating, any comments, and the occasion type and locale of the speech. Feedback is linked to your speech but not made public.
What we do not collect — We do not collect voice recordings, location data, biometric data, advertising network data, or special category data (health, ethnicity, religion) unless you voluntarily include it in your speech inputs.
3. How we use your data and our legal basis
- Contract performance — Creating your account, generating your speech, storing your drafts, and processing your payment.
- Legitimate interests — Improving speech generation quality, maintaining app security, and anonymised usage analysis. We do not use your speech content for AI model training.
- Legal obligation — Tax and accounting requirements, and responding to lawful regulatory requests.
- Consent — Before sending your inputs to Anthropic's AI, you provide explicit consent which is recorded with a timestamp and version number. You may withdraw consent at any time.
4. How AI processes your data
SpeechMe uses Claude, an AI model developed by Anthropic, to generate your speech. Your inputs are sent to Anthropic's API for processing under a data processing agreement. Anthropic receives only what is required to generate your speech — inputs, occasion type, locale, and tone settings. Anthropic does not receive your email address, payment information, or account credentials, and does not use your inputs to train AI models. Anthropic's privacy policy.
If you use the Rehearse feature, your speech text is sent to Google Cloud Text-to-Speech to generate audio. The audio is stored in secure cloud storage accessible only to you. Google's privacy policy.
The generation process is automated but does not constitute automated decision-making with legal or significant effects. You review, edit, approve, or reject every stage before the speech is finalised.
5. Third-party data processors
- Anthropic — AI speech generation. US-based. Standard Contractual Clauses apply. Privacy policy.
- Supabase — Database, authentication, and file storage. EU-based (AWS Frankfurt). Privacy policy.
- Paddle — Payment processing and merchant of record. UK and US-based. Privacy policy.
- Google Cloud Text-to-Speech — Audio generation for the Rehearse feature. US-based. Standard Contractual Clauses apply. Privacy policy.
- Cloudflare — Bot protection and CDN. Processes IP address and browser characteristics for security only. Privacy policy.
We do not sell your personal data to third parties.
6. How long we keep your data
- Unpurchased speeches — Deleted automatically 30 days after creation, including all inputs, drafts, and audio.
- Purchased speeches — Retained permanently. You can delete any speech or your account at any time via the Account page.
- Account data — Retained while your account is active. Permanently deleted within 30 days of account deletion.
- Payment records — Retained for seven years as required by UK tax law.
- AI consent records — Retained for six years after the consent event.
- Feedback — Retained for up to two years, then deleted or anonymised.
- Technical logs — Maximum 90 days, then automatically purged.
7. Your rights under UK GDPR
- Right of access — Request a copy of the personal data we hold about you.
- Right to rectification — Ask us to correct inaccurate or incomplete data.
- Right to erasure — Delete your account and all speech data instantly via the Account page, or contact us for other erasure requests.
- Right to restrict processing — Ask us to pause processing your data.
- Right to data portability — Request your data in a machine-readable format.
- Right to object — Object to processing based on legitimate interests.
To exercise any of these rights, contact support@appsnsaas.com. We will respond within one calendar month at no charge.
To complain to the regulator: Information Commissioner's Office (ICO) — ico.org.uk · 0303 123 1113.
8. International data transfers
Some processors operate outside the UK, including in the United States. All transfers are protected by Standard Contractual Clauses (SCCs) approved by the UK ICO or other appropriate safeguards.
9. Security
- All data in transit is encrypted using TLS 1.2 or higher
- Data at rest is encrypted (AES-256)
- AI and audio API calls are made from server-side edge functions — no API keys are exposed client-side
- Row-level security means you can only access your own data
- Cloudflare Turnstile protects against automated account creation
In the event of a breach likely to affect your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware.
10. Cookies and local storage
SpeechMe uses browser local storage to maintain your experience. We do not use advertising cookies or third-party tracking. See our Cookie Policy.
11. Children's privacy
SpeechMe is for users aged 16 and over. We do not knowingly collect data from children under 16. Contact support@appsnsaas.com if you believe a child has provided us with data.
12. Changes to this policy
We may update this policy from time to time. Material changes will be communicated in the app with an updated "Last updated" date. Continued use constitutes acceptance.
13. Contact
Email: support@appsnsaas.com
This policy is governed by the laws of England and Wales.