1. Introduction
At Phoniq, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Data We Collect
Account Data
Collected at registration: full name, email address, and phone number. If you sign in with Google, we use your Google profile information.
Service Data
- Selected topics, call plans, and preferences
- Transcripts of conversations with the AI coach
- Conversation analysis scores (grammar, vocabulary, fluency, pronunciation)
- English proficiency level and progress history
Voice Recordings
Call recordings are stored on VAPI's infrastructure for 30 days and automatically deleted thereafter. Transcripts are retained in our database permanently for analysis purposes.
Payment Data
Balance top-up amounts and transaction history are stored. Credit card details are processed directly by Stripe; Phoniq does not store card information.
Technical Data
IP address, browser type, device information, and session data are collected for security and performance purposes.
3. How We Use Your Data
- Account creation and authentication
- Conducting AI-powered English conversation sessions
- Generating personalized language analysis and progress reports
- Processing balance and payment transactions
- Customer support and troubleshooting
- Improving service quality
- Fulfilling legal obligations
4. Who We Share Your Data With
We do not sell your data. We share it only with the following service providers, solely for the purpose of delivering our service:
| Provider | Purpose |
|---|---|
| VAPI | AI calling infrastructure |
| Twilio | International voice transmission |
| Stripe | Payment processing |
| System | Conversation analysis |
| Cloud SQL | Database hosting |
All providers are bound by a Data Processing Agreement (DPA).
5. Data Retention
- Account information: Until account closure + 2 years
- Voice recordings: 30 days (on VAPI infrastructure)
- Transcripts and analysis: Until account closure
- Payment records: 10 years (legal requirement)
6. Security
Your data is transmitted with SSL/TLS encryption and hosted in secure data centers. JWT-based authentication and httpOnly cookies are used. Passwords are stored as bcrypt hashes.
7. Cookies
Phoniq uses only essential session cookies. See our Cookie Policy for details.
8. Your Rights
- Right to access your data
- Right to correct inaccurate data
- Right to request deletion of your data
- Right to object to processing
- Right to data portability
For users in Turkey, additional rights under KVKK (Turkish Data Protection Law) are covered within this policy.
9. Contact
For any privacy-related questions or requests: hello@phoniq.ai
10. Policy Changes
Material changes to this policy will be notified by email. The current version is always available on this page.