privacy policy

last updated 29 july 2026

acespeak scores your body language and voice from a clip you upload. that means we handle recordings of you — so being clear about what we collect and why matters to us. this policy explains it in plain language.

who we are

acespeak is operated by Wistkey UK Limited ("we", "us"), the data controller for the personal data described here. if you have any questions about this policy or your data, email us at hello@acespeak.uk.

what we collect

• account details — your phone number, your name, and your password (stored only in hashed form).
• your email address, only if you add one — you can add an email in your profile so you can reset your own password if you forget it. it's optional: acespeak works without one, and you can remove it at any time. we only store it once you've confirmed it with the code we email you, so a mistyped address never ends up on your account. we use it only for account emails — the confirmation code and password-reset codes. we do not send marketing or newsletters to it, and we never share or sell it.
• your recordings — the videos and audio you upload to the app for scoring.
• scores & analysis — the ratings and feedback we generate from your recordings across our five dimensions (gestures, facial expression, pace, intonation and pauses), plus your practice history and streaks.
• usage & device data — basic technical information such as device type, app version and crash logs, used to keep the app working.
• analytics data — how you use the app and this website: screens and pages you view, actions such as completing onboarding, uploading a clip or subscribing, along with an app-generated identifier and your account id. we use this to understand what's working and to improve acespeak. we do not use advertising identifiers and we do not track you across other companies' apps or websites.
• referrals — your referral code and, if you invite someone, the fact that a referral was made.
• friends — who you choose to follow, and who follows you. if you block someone, we keep that so we can keep enforcing it.
• contacts, only if you ask us to — if you tap "choose from contacts", we read the phone numbers in your address book (nothing else — no names, no emails) and send only a scrambled (hashed) form of each one to our servers, so we can tell you which of them already use acespeak. we do not store your contacts, we do not keep the scrambled numbers, and we never message anyone on your behalf. you can skip this entirely — you can still find people by username, by sharing your invite link, or by scanning a code.

how we use your data

• to provide the core service — analysing your recordings to produce your delivery scores and feedback. this scoring is automated (performed by our AI scoring system); it produces guidance only and has no legal or similarly significant effect on you. the one exception is a Max Review, which you ask for yourself — see the next point.
• if you request a Max Review, to let one of our own speech coaches read that one analysis and write you personal notes. this is the only place a person, rather than our AI, looks at your practice, and it never happens on its own: you choose a single speech and confirm it each time. the coach works from the same analysis you see — your scores, the part-by-part breakdown and the transcript — through an internal tool restricted to our coaching team, and is not given your phone number or email address. the notes are stored with that speech, they go when you delete the speech or your account, and you can ask us to remove them sooner at hello@acespeak.uk.
• to run your account, your practice history, streaks, the leaderboard, referrals and friends.
• if you choose to share your contacts, to match them against existing acespeak accounts and show you which of your friends are already here. the comparison happens and then it's over — nothing from your address book is kept.
• if you've added an email address, to send you the code that confirms it and, later, any password-reset code you ask for. nothing else is sent to it.
• to maintain, secure and improve the app, and to respond when you contact us.

legal bases (UK GDPR)

we process your data to perform our contract with you (providing the app you signed up for), on the basis of your consent where you choose to record and submit clips for scoring, and for our legitimate interests in keeping the service secure and improving it. you can withdraw consent at any time by deleting your recordings or your account.

who we share it with

we do not sell your data. we share it only with service providers who help us run acespeak, under contracts that require them to protect it:

• cloud hosting & processing — your recordings are sent securely to our servers (hosted on Amazon Web Services) where the scoring analysis runs.
• speech-to-text — the audio from your clip is sent to Amazon Web Services (Amazon Transcribe) to produce a transcript. this audio is used only for that purpose and is deleted once the transcript is produced.
• AI coaching & safety — a small number of still frames from your clip, together with the transcript text, are sent to OpenAI to generate your coaching feedback and to screen the content for safety. we do not send your original video file, and we never send your name, phone number or account id to these AI providers.
• analytics & diagnostics — we use PostHog (product analytics) and Sentry (crash and error diagnostics) inside the app, and Google Analytics on this website, to understand usage and fix problems. these providers process data on our behalf under data-processing agreements.
• email delivery — if you've added an email address, we send account emails (your confirmation code and any password-reset code) through Resend. only your address and the code itself are sent, and only when one of those emails is triggered.
• the app stores — Apple and Google handle any purchases; we never see your card details.

your recordings and scores are private to your account. they are not shown to other users, and the leaderboard displays only your name, country flag and score, never your recordings. the one exception is a Max Review you have asked for: one of our own speech coaches then reads that speech's analysis in order to write your notes.

international transfers

we are based in the united kingdom and many of our users are in hong kong. your data may be processed on servers outside your home country. our product-analytics and crash-diagnostics providers (PostHog and Sentry) process data in the EU; Google Analytics processes website data in the United States; our AI providers process data in the United States (OpenAI) and the Asia-Pacific (Singapore) region (Amazon Transcribe); account emails are sent by our email provider (Resend) in the EU (Ireland). when data leaves the UK or the EEA we rely on appropriate safeguards (such as the UK international data transfer agreement / standard contractual clauses) to protect it.

how long we keep it

we keep your recordings and scores for as long as your account is active so you can track your progress. you can delete individual recordings in the app, and you can ask us to delete your account and associated data at any time (see below). we keep the minimum needed after that only where the law requires it.

if you added an email address, we keep it until you remove it in the app or delete your account. the codes we email you are shorter-lived still — they expire after 15 minutes, can only be used once, and are stored scrambled (hashed), never as the digits you were sent.

your contacts are the exception, and the shortest-lived thing here: the scrambled numbers we compare against existing accounts are never written down at all. they exist for the length of that one request and then they're gone.

your rights

under UK GDPR you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. to exercise any of these, email hello@acespeak.uk. you also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

if you are in hong kong, you have equivalent rights under the Personal Data (Privacy) Ordinance (PDPO), including the right to request access to and correction of your personal data. contact us at the same address.

children

acespeak is not intended for children under 13. we do not knowingly collect data from children under 13; if you believe a child has provided us data, contact us and we will delete it.

cookies & analytics

this website uses Google Analytics to measure visits and understand how people find and use the site. it sets first-party cookies to count returning visits and record events such as tapping a download link. no advertising cookies are used and we do not build cross-site advertising profiles. you can block cookies in your browser or use Google's opt-out add-on. in the app, product analytics (PostHog) and crash diagnostics (Sentry) do not use advertising identifiers; deleting your account removes the link between your analytics identifier and you.

changes to this policy

we may update this policy from time to time. when we do, we'll change the "last updated" date above and, for significant changes, let you know in the app.