Privacy Policy

Last updated: 24 September 2026

SpeakYatra is a public-speaking practice tool. This page explains, plainly, what we collect when you use it, why, who else sees it, and how long we keep it. If anything here is unclear, use the Contact Us form and ask.

What we collect

If you create an account or sign in with Google: your name, email, profession, and chosen interest topics. If you sign up with a password, it's hashed (bcrypt) before it's stored — we never see or store it in plain text, and can't recover it for you if you forget it, only reset it.

Each practice session: the topic you spoke on, its duration, and the scores our tool computes (content, grammar, pace, filler words, voice modulation, body language, etc.). If you're logged in, these are tied to your account so your Calendar view can show your progress over time. If you're practising without an account, no scores are saved to any account at all.

The recording itself: covered in detail below, since this is the part most people ask about first.

Contact form submissions: the name, email, and message you choose to send us.

Your camera, mic, and recording — where it actually goes

This is also shown as a shorter notice right before your camera turns on. In full:

Your camera and microphone are only active in your browser tab, only for the length of your practice session.
Body language (posture, eye contact, hand gestures) is analyzed live, in your browser. That video is never uploaded anywhere.
To generate your report, the recording is uploaded to our server. From it, only the audio is sent to OpenAI's Whisper API to produce a transcript.
The uploaded video, the extracted audio, and the transcript are all deleted from our server immediately after your report is generated. We do not keep a copy.
What we do keep, if you're logged in, are the resulting scores and metrics — never the video, audio, or transcript text.

Who else sees your data

OpenAI — receives your audio (for transcription via Whisper) and the transcript (for the GPT-based feedback on grammar, content, and structure) only for as long as it takes to process your request. It is not stored by us afterward.

Supabase — hosts our database: accounts, saved scores, and contact-form messages.

Render — hosts the application itself.

Google — only if you choose "Sign in with Google". We verify your identity through Google's own sign-in flow and never see or store your Google password.

We do not sell your data, and we do not share it with advertisers.

How long we keep things

Video, audio, and transcript text: deleted right after your report is generated — not stored long-term, regardless of whether you're logged in.
Scores and account details: kept until you ask us to delete them.
Contact form messages: kept so we can respond to you.

Cookies and local storage

We use your browser's local storage (not third-party ad-tracking cookies) for a few practical things: a signed session token so you stay logged in, a note that you've already seen the recording consent notice so you're not asked every time, and a note if you've already used your one free anonymous practice run.

Security

Passwords are bcrypt-hashed. Logged-in sessions are authenticated with signed, tamper-evident tokens rather than anything the browser could alter. All traffic to speakyatra.in is served over HTTPS. Login, signup, and the practice tool itself are rate-limited to prevent automated abuse.

Your choices

You can use the tool anonymously, without an account (one free 90-second practice run).
You can decline the recording consent notice — if you do, we won't turn on your camera or mic.
You can ask us, at any time via Contact Us, to delete your account and any scores saved against it.

Children's privacy

SpeakYatra isn't directed at children under 13. If you believe a child has used the site and given us personal information, contact us and we'll remove it.

Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top of this page.