Privacy Policy

Spikdi (the "app") is operated by ISEMI COMPANY LIMITED, registered in Vietnam. We respect your privacy. This page explains exactly what we collect, why, what we do with it, and your rights. We do not sell your data — not now, not ever.

What we collect

Account information

• Email address (if you sign up with email)
• Apple ID or Google ID (if you sign in with Apple or Google) — we never see your password
• Display name and avatar (optional, set by you)

Content you create

• Lessons you write — prompts, generated scripts, edits, and the lessons you publish
• Voice recordings you make when reading lessons aloud
• Likes, saves, comments, and follow relationships

Usage data

• Which lessons you open and finish
• Pronunciation scores (so you can see your history)
• Streaks and personal best scores (only if you enable streaks)
• Crash reports and basic device info (model, OS version, app version)

What we do NOT collect

• Your contacts, calendar, photos, or location
• Microphone audio outside of an explicit lesson recording
• Anything we browse outside the app
• Any data we do not need to run Spikdi

How we use it

• To run the app — sign-in, save your lessons, sync across devices you sign into
• To generate AI content — your prompt is sent to our server, then to Google Gemini (for script + translation), Imagen (for background image), and Suno (for ambient music)
• To score pronunciation — your recording is sent to our server, analyzed, and a score is returned. We keep your recordings so you can replay them; you can delete any recording, which removes it from our servers
• To moderate user-generated lessons before they're public — Google Gemini scans for harmful content
• To improve the app — anonymized aggregate statistics (no personally identifiable info)

Third parties we use

To deliver Spikdi, we send specific data to the following services:

• Google Cloud (Gemini, Imagen) — AI text + image generation, content moderation
• Suno — AI ambient music generation
• Cloudflare R2 — storage and CDN for images, audio, and recordings
• Better-auth (open source) — handles sign-in with Apple, Google, and email
• Sentry — crash reports and error tracking (anonymized)
• Apple App Store / Google Play — payment processing, if and when paid features launch

We choose vendors who take privacy seriously. We never pass account-level data to advertisers or analytics brokers. We do not sell your data to anyone, for any purpose.

Your rights

• Delete your account — Settings → Account → Delete. We permanently remove your data within 30 days. Some anonymized aggregates (e.g., total lesson counts) may remain.
• Export your data — Email us at privacy@spikdi.com and we will send you a JSON dump within 14 days.
• Recordings are yours — they are stored privately, not searchable, and never shared without your explicit publish action. Delete any recording and it is gone from our servers.
• Withdraw consent — if you change your mind about anything above, email us. We will respond within 7 days.

Children

Spikdi is rated 12+. If we learn that an account belongs to someone under 12, we delete it. Parents who believe their child has an account should email privacy@spikdi.com.

Data location and security

Your account data is stored on Cloudflare's network in the Asia-Pacific region. Recordings and AI-generated media are stored in Cloudflare R2. We use HTTPS everywhere. Passwords (for email sign-in) are hashed using industry standard algorithms; we never see them in plaintext.

Changes to this policy

If we change this policy, we will notify you in the app at least 14 days before the change takes effect. Major changes (e.g., a new data category) will require you to accept before continuing.

Contact

ISEMI COMPANY LIMITED
Saigon, Vietnam
privacy@spikdi.com