SprechoMio

Privacy policy

As of 5 October 2026

1. Controller

Mag. Viktor Schober, Großschopfstraße 1, 2353 Guntramsdorf, Austria, v@apptor.at

2. What we process and why

Account: email address, password (stored only as a hash), native and learning language. Purpose: account, sign-in, confirmation and password emails. Legal basis: contract (Art. 6(1)(b) GDPR).

Learning content: your sentences, translations and learning progress (box, due date, results with time). Purpose: translating, reading aloud and practising, the core of the app. Legal basis: contract.

Usage and costs: number of sentences used and the cost of each translation and voice output. Purpose: trial limit, fair use limit of the subscription and cost control. Legal basis: contract and legitimate interest (Art. 6(1)(f)).

Abuse protection: IP address and email address, stored only as an irreversible hash, for limits on sign-ups, sign-in attempts and emails. Legal basis: legitimate interest.

Subscription: plan, status, end of the paid period and the customer and subscription number at Stripe. Before purchase we store your consent to the immediate start (time, wording, plan, IP address only as a hash) as proof. We never see your full card or bank details. Legal basis: contract and legal obligations (Art. 6(1)(b) and (c)).

Feedback: if you write to us via the speech bubble in the app: your message, the category, the screen you were on, the app version and the browser identifier, linked to your account. Purpose: answering you and improving the app. Legal basis: legitimate interest.

Sign-in: a sign-in token, the browser or app identifier (user agent) and the time of last use, so you stay signed in. Legal basis: contract.

We use no cookies, no advertising, no analytics or tracking services and no fonts or scripts from third-party servers.

3. Recipients

Hosting: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. All data is stored on their servers in Germany. The host keeps its own access logs (IP address, time, requested address).

Translation and voice output: OpenRouter, Inc. (USA), which forwards requests to the language model Google Gemini. Only the text of your sentence or its translation is sent, never your email address or account data. The transfer to the USA is based on the standard contractual clauses of the European Commission (Art. 46 GDPR) provided by OpenRouter.

Payment: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details directly with Stripe. Stripe receives your email address and payment details and processes the payment, invoices and fraud prevention as an independent controller (privacy policy: stripe.com/privacy). Stripe may transfer data to Stripe, Inc. in the USA; this is based on the EU-U.S. Data Privacy Framework and the standard contractual clauses.

Emails: confirmation, password and subscription emails as well as feedback forwarded to us are sent via the mail server of our host.

Generated audio files are stored under a name computed from the text and reused for identical sentences of all users. They are not linked to your account.

4. Storage period

Account, sentences and progress: until you delete your account. Unconfirmed accounts: deleted automatically after 7 days. Hashes for abuse protection: 2 days. Confirmation and reset links: valid for 48 hours or 1 hour, then deleted. Audio files: as long as a sentence uses them. Feedback: until it is dealt with, at most until your account is deleted. Invoices and payment records: 7 years, as required by Austrian tax law (§ 132 BAO); they are kept by Stripe.

5. Deleting your account

In the app under Settings → Delete account, or in the browser at sprechomio.com/api/v1/account/delete. Account, sentences and progress are deleted immediately. A running subscription is ended at the same time.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to v@apptor.at. You can also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Deutsch