Skip to content

Spokaro

Privacy policy

Français

Spokaro is an AI speaking coach for the speaking part of the CELPIP test: an app, and this website. This page says what we keep, why, for how long, who helps us process it, and how to delete it. Spokaro needs no account (the website offers one, for those who want their mock test on any browser), and it has no advertising and no third-party trackers.

Spokaro Français, for the speaking part of TEF Canada and TCF Canada, is part of Spokaro. This policy in French is at spokaro.com/fr/confidentialite/.

Who we are

Spokaro is run by AI Technology, which publishes the app on Google Play as Front Porch Apps and on Apple’s App Store from its owner’s developer account, and is the business responsible for your data here: it runs this website and decides how the data on this page is used. For anything about your data, write to privacy@spokaro.com or hello@spokaro.com.

Spokaro Français: its mock test and its practice room

Before your browser sends anything, the mock test of Spokaro Français asks your consent, names who handles your voice and asks that you are 18 or over. With “J’accepte” (I agree): your voice goes to our server while you speak, which sends it to Microsoft Azure AI Speech, which turns it into text, scores your pronunciation and gives the AI that plays the examiner its synthetic voice; the text of your answers goes to Poe, which passes it to Google’s Gemini for the replies of the AI that plays the examiner and to Anthropic’s Claude for your score and feedback; the recording is deleted once your answer is scored, and our server never writes it to disk. We keep the text of the exchange, the scores and the report with your account for 12 months, or until you delete them. A sentence about harming yourself stops the test and shows the help lines; it is never sent to the AI model or kept, only the number of such stops is counted. With “Non merci” (No thanks), no recording leaves your device and no test starts. Its practice room sends nothing. For now, the mock test is open to our testers only.

Your practice recordings stay on your phone

When you practise a task, the app records you so you can listen back. That recording is kept on your phone only. It never leaves your phone unless you ask Spokaro to score an answer, and you can delete any recording in the app.

The website’s practice room works the same way: a recording made there is kept in your browser only (its own storage on your device), never sent to us or anyone, and you can delete it on the task’s page. The browser keeps the five newest of each task.

Send to my teacher, on this website, builds in your browser what you choose to send: your own recording from this browser, the tips you got, our model answer with its model voice, and a short text you can read first. It goes from your device to the app you pick (WhatsApp, mail or any other) as files, as a video made in your browser, or as downloads: Spokaro uploads none of it and keeps none of it. What happens to it then is up to the people you send it to and that app’s own privacy terms.

A scored answer

Before the first answer is scored, the app asks your permission and names who will process it. When you agree and send an answer:

  • the recording goes to our server, which sends it to Microsoft Azure AI Speech. Azure turns it into text, word for word, and scores your pronunciation;
  • the text goes to an AI model (Anthropic’s Claude, reached through Poe), which writes your feedback on the test’s four dimensions;
  • the recording is deleted as soon as it is scored. We never store it, and it is never written to our disk;
  • we keep the text (the transcript), the scores, the feedback, the task and the time, under your install id: a random code the app makes on your phone when you first agree to scoring or to usage counts. It is not your name, your phone number or your email address.

The free sample on this website

On this website’s practice page you can have one answer scored free, once a day. Before your browser records anything, the page shows the same consent words as the app and asks that you are 18 or older. When you agree and answer:

  • your recording goes to our server and is scored the same way as in the app, by Microsoft Azure AI Speech and the AI model. The recording is deleted as soon as it is scored;
  • we keep nothing of the sample: not the recording, not the text, not the scores. Only the cost of scoring it is counted, with no link to you;
  • Cloudflare Turnstile checks that a person, not a robot, sent the answer. It runs only after you agree, and Cloudflare processes what it needs for that check under its own privacy policy;
  • to keep the sample to one a day, our server keeps a scrambled form of your internet address until the next day ends.

The free mock test on this website

On this website you can take the full mock test, all eight tasks, scored free once. Before your browser records anything, the page asks your year of birth and shows the same consent words as the app. When you agree and answer:

  • each answer goes to our server as its task ends and is scored the same way as in the app, by Microsoft Azure AI Speech and the AI model. The recording is deleted from our server as soon as it is scored. Your browser keeps its own copy in its storage on your device: until it is sent (when you are offline, for example), and then so the mock test’s report can play it back to you, until you delete it with the report’s “Delete the recordings from this browser” or clear this website’s data in your browser. It never comes back to us;
  • we keep the text (the transcript), the scores, the feedback, the task and the time, as we do for the app’s mock test, for 12 months or until you delete them;
  • to keep the free mock test to one per person, our server sets a cookie, a random code for your browser (the free mock test’s cookie, under Cookies). It keeps only a one-way code made from it (a keyed hash), never the cookie’s value, and files your answers under that one-way code;
  • so that clearing cookies does not give a second free mock test, our server also keeps a scrambled form of your internet address (a keyed hash; for an IPv6 address, of its first half) with the time an answer was scored, for 30 days;
  • Cloudflare Turnstile checks, once when the mock test starts, that a person and not a robot is taking it. The test you have not finished stays in your browser so you can go on from the next task.

Pronunciation drills

After the mock test, the report can offer a short drill for each of the sounds a listener may miss in your answers, in the app and on this website. Each try is one word or sentence, recorded only after you agree to it being sent for scoring:

  • the recording goes to our server, which sends it to Microsoft Azure AI Speech to score your pronunciation against the words on the screen (no AI model writes feedback on a try). It is deleted as soon as it is scored, on our server and on your phone (this website’s drills keep no copy in your browser’s storage: a try stays in the page only while its result shows, so you can send it with Send to my teacher);
  • we keep nothing of a try: not the recording, not the text, not the score. Only the cost of scoring it is counted;
  • to keep drills to 20 tries a day per phone, the app sends your phone’s ID (see below) with each try. Our server keeps the one-way code made from it (see below) with the day’s count of tries, until the next day ends;
  • on this website, the 20 tries a day are counted per browser, under the same random browser code as the free mock test (its cookie, under Cookies; your first try sets it if the mock test has not), or per account when you have one on this website. Our server keeps the one-way code made from it with the day’s count of tries, until the next day ends.

No voiceprints

We never use your voice to identify you, and we never make or keep a voiceprint or any other biometric identifier. Your voice is used only to score the answer you sent.

The one free mock test, and a one-way code

The full mock test is scored free once per phone. To keep it to one per phone, even after the app is reinstalled, the app sends your phone’s ID with each mock answer: the Android ID on an Android phone, the identifier for vendor on an iPhone. Our server keeps only a one-way code made from it (a keyed hash), never the ID itself, and that code cannot be turned back into it. This code stays after you delete your data, for this one reason only: so the free mock stays one per phone.

An iPhone’s identifier for vendor can change when the app is reinstalled, so the iPhone app also sends a one-time token from Apple’s DeviceCheck when a mock starts and with each mock answer. Our server passes that token to Apple and does not keep it. Apple keeps one yes-or-no mark for this app on your iPhone, which says the free mock was used. It is set when your first mock answer is scored, and says nothing else about you. It stays with Apple after you delete your data, for the same reason.

Reports about the feedback

Every piece of AI feedback has a “Report this feedback” button. A report keeps which answer and which part you reported, the reason you chose, any note you write, and the time. Every report is read, usually within a day, and used to improve the marking.

Reporting a bug, and Feedback

The “Report a bug” button on every page, and “Feedback” in the menu, send us what you choose: what went wrong, or your idea, if you write it, and your email address, if you give one (filled in for you when you are signed in on this website; we use it only to write to you about that report). With the tick “Include a picture of this screen and my last steps” (on for a bug, off for feedback), the report also carries a picture of the screen as it was, with every box you typed in masked, and your last 50 steps on this website or in the app: the pages you opened, the names of the buttons you tapped, the errors the page met and the requests that failed. It never carries what you typed into a box, a recording of your voice, or a cookie, password or code. We also keep the page, the website’s or the app’s version, whether it came from the website, Android or an iPhone, the time and, if you are signed in, your account (in the app, its install id). The picture is kept on our own server only, never at a public address. Each report is used to find and fix what went wrong and to improve Spokaro. To have a report deleted sooner, write to privacy@spokaro.com.

Early access, if you ask for it

If you tap “Get early access”, we count it once for your install id (on this website, a random code your browser makes), with where you tapped it (the app’s report, its menu, or this website). Giving an email address is optional. If you give one, we send one email to confirm it, and keep it only after you open the link in that email and tap “Yes, add me”. Until then the address is not stored anywhere on our server. We then write once, when the paid version opens. Every email has a way to leave the list.

If you pay for mock tests on this website, your account is counted once too, as a payer: a random account code and the time, no email address. It is deleted with the account.

How the app and the website are used

  • The app counts steps such as “opened the app”, “started a practice task”, “finished the mock test” or “saw the report”, only after you say yes to “Help improve Spokaro?”, which the app asks once, after your year of birth. Until then, or after “No thanks”, it counts nothing and sends nothing. You can turn it off and on again under Usage counts in Settings; turning it off deletes the counts not sent yet. Each event holds its name, your install id, the task (when there is one) and the time. Nothing else: no words, no recordings, no advertising id. They are sent to our own server only.
  • This website counts page views on our own server, with no Google Analytics and no cookie. It keeps the page, the name of the website that sent you (just its name, like google.com), and a random number stored in your browser so a visitor is counted once a day. To leave robots and our own visits out of the counts, it also looks at your browser type and the country our network provider reports; neither is stored.
  • The website’s practice room counts two steps, “started a practice task” and “finished a practice task”, the same way as the app: the step, a random number stored in your browser in place of an install id, the task and the time, marked as coming from the website. No recording and no words are sent.
  • The website’s free mock test counts three steps the same way: “started the mock test”, “finished a task” and “saw the result”. When free scoring is full, it counts that the notice was seen (once a day) and a tap on either of its two links, the same way.
  • Send to my teacher counts that a send happened, the same way, with the task: never what was sent, to whom or through which app.

An account on this website

On this website you can make a Spokaro account with your email address, so your free mock test and its report follow you to any browser or phone you open it on. There is no password: we mail you a link that works once, for 20 minutes. The account keeps:

  • your email address, used only to mail you those links and, later, receipts. It is never added to the early-access list: that list keeps only an address its owner confirmed for it, on its own;
  • your year of birth, asked when the account is made, because Spokaro is for adults;
  • when the account was made and when you last opened it, and for each browser you opened it on, that browser’s session: a random code, kept on our server only as a one-way code, for 30 days;
  • the free mock test’s transcripts, scores and reports, as above, filed under the account instead of the browser. A browser you opened the account on counts as that account’s for the free mock test, even after you sign out on it, so there is still one free mock test per person;
  • the mock tests on the account, if it has any after its free one: how many, where each batch came from and when it lapses, and for each mock test taken with one, its number and when it was started, first scored and finished. Their transcripts, scores and reports are kept as the free mock test’s are. Deleting the account deletes these with it.
  • a payment for mock tests, if you make one: Link, a Stripe company, takes your payment on Stripe’s page as the merchant of record, so your card number and the other payment details go to Link and Stripe, never to us. We keep Stripe’s references for the payment, the amount, which kind of mock tests it was for, how many it added and when they lapse, and any refund or dispute of it, under the account.
  • Codes from a marketplace: if you redeem one, we keep a one-way code made from it and its last 4 characters, the marketplace and batch it came from, which account redeemed it and when, and the date and note of any refund, so that each code works only once. We keep the link to your account while the account is open. Deleting your account deletes its mock tests and that link; the code stays marked as used, linked to no one.

While you are signed in, this browser keeps a mark that it was signed in here (a “1”, nothing about you), so the header can show the mock tests left on every page; it is removed on the first page you open after you sign out.

A link we mail you is kept only as a one-way code, with the address it went to and the year of birth you gave, for one day. With it, for the same day, we keep two things of the browser that asked for it: that browser’s one-way code and its creator link, if it has one. So your free mock test and the creator who sent you come with your account, whichever browser opens the email. Links are limited to 3 an hour per address and 10 an hour per internet connection, counted by the scrambled form of your internet address.

To stop one person from opening more than one account or getting a second free mock, we compare the details we already keep: the account’s e-mail address and the one-way codes this page describes. Preventing that misuse is our legitimate interest.

Creators and their links

Creator programme. If you join our creator programme, we keep the PayPal address you give us only to pay you your commission. We delete it when you delete your account, or when you write to us and ask. For each purchase made through your link we keep a commission record: the amount, whether it is waiting, payable, paid or refunded, and which account bought and which creator it came through, by account number, never an email address. You see only how many purchases came through your link and their sums, never who made them. Deleting your account deletes your PayPal address and your link; its commission records stay as our record of money owed or paid, linked to no email address.

We pay you through PayPal: PayPal receives your PayPal address and the amount of each payment, and handles them under its own privacy statement.

Creator links. If you arrive through a creator’s link (an address ending in ?ref=…), a first-party cookie called spokaro_ref remembers that link for 60 days. It holds only the link’s code and the time of the click, nothing about you. It is read only when this browser asks us to email it a link to an account, opens an account on this website or starts a payment for mock tests. Once you have an account, it keeps that code, so the creator is credited for purchases in the 12 months after the click. It is deleted with your account.

The creator link’s cookie is never set in the EU, the EEA, Switzerland or the UK, where the law asks your consent for it first, nor when we cannot tell which country you are in. Delete this browser’s data on the Delete my data page clears it, and so does Delete my account on your account page.

Cookies

Spokaro sets at most three cookies of its own, never used for advertising or to follow you to other sites. The first two are strictly necessary:

  • the free mock test’s cookie, set only when you start the free mock test or your first pronunciation drill try on this website: a random code for your browser, kept for a year, that keeps the free mock test to one per person and the drills to 20 tries a day (see above). Our server keeps only a one-way code made from it;
  • the account’s session cookie, set only if you open an account on this website: it keeps that browser’s session for 30 days (see above), and it is gone when you sign out.
  • the creator link’s cookie (spokaro_ref), set only when you arrive through a creator’s link, and never in the EU, the EEA, Switzerland or the UK: the link’s code and the time of the click, for 60 days (see Creator links above). It is not strictly necessary.

Cloudflare, which protects the site, may set a strictly necessary security cookie when it checks for robots. Stripe’s page, where a payment is made, sets its own cookies under Stripe’s privacy policy. The creator link’s cookie is the only one of ours that is not strictly necessary, so it is never set where the law asks your consent for it first; if Spokaro ever needs another cookie that is not strictly necessary, it will ask you first.

If you write to us

If you write to hello@spokaro.com or privacy@spokaro.com, Cloudflare forwards your message to our mailbox at Google (Gmail), and Brevo sends our answer and keeps its own record of it. We keep your message and our answer for up to two years after our last message, then delete them; sooner if you ask. Brevo deletes its record of each answer two years after it was sent.

Who helps us

  • Microsoft Azure AI Speech turns a scored answer’s recording into text and scores its pronunciation; in Spokaro Français it also gives the AI that plays the examiner its synthetic voice.
  • Poe passes the transcript to the AI model (Anthropic’s Claude) that writes the feedback; in Spokaro Français it also passes the mock test’s exchange to Google’s Gemini, which writes the replies of the AI that plays the examiner.
  • Cloudflare delivers the website and the app’s requests, checks that the website’s free sample and free mock test come from a person (Turnstile), and forwards the mail written to us.
  • Brevo sends the emails you ask for.
  • Google keeps the mail written to us, in our mailbox (Gmail).
  • Link (Sold through Link, LLC; called Onelink in the UK), a Stripe company, is the merchant of record for payments for mock tests on this website: it receives the payment details, sends the receipt and answers questions about the payment, and keeps its own record of each payment.
  • Stripe processes payments for mock tests on this website: it receives the payment details and keeps its own record of each payment, as the law asks of it.
  • PayPal sends creators in our creator programme their commission: it receives the creator’s PayPal address and the amount of each payment, and handles them under its own privacy statement.
  • Vultr hosts our server, where the transcripts, scores and counts are kept.

We do not sell or share personal information for advertising. Apart from the companies named above, we share it with no one else unless the law requires it: a creator sees only how many purchases came through their link and their sums, never who made them.

These companies may handle it outside your country, including in the United States. When they do, the transfer is covered by each company’s data processing terms: the European Commission’s standard contractual clauses or, for a company certified under it, the EU-U.S. Data Privacy Framework. For visitors in the United Kingdom, the same terms add the UK’s addendum to those clauses or, for a certified company, the UK Extension to that Framework. Write to hello@spokaro.com for a copy. Poe, PayPal and Google are the exceptions. Poe handles the transcript it passes to the AI model as its own business, under its own privacy policy, which says how it protects data it sends between countries. PayPal handles a creator’s PayPal address and payments as its own business, under its own privacy statement, which says how it protects data it sends between countries. Google keeps the mail written to us, in our Gmail mailbox, as its own business, under its own privacy policy, which says how it protects data it sends between countries. Poe also passes the exchange with the AI that plays the examiner in Spokaro Français to Google’s Gemini, as its own business, under Poe’s privacy policy.

Why we may use it

  • a scored answer and its recording (in the app, the website’s free sample, its mock tests and the drills): your permission, which you can take back at any time (in the app, with Withdraw consent under Settings);
  • an account on this website and the mock tests on it: to provide what you asked for or bought;
  • a payment’s records: what the law asks of us;
  • the creator programme: to pay each creator what we agreed with them;
  • the daily limits, the one-way codes (the one made from your phone’s ID included), Apple’s DeviceCheck mark and Cloudflare Turnstile: to keep the free mock test fair and the service safe, which is our legitimate interest;
  • comparing accounts: to keep one account and one free mock test per person, which is our legitimate interest;
  • the app’s counts of how it is used: your permission, given with “Yes, send” in the app, which you can take back at any time (under Usage counts in Settings);
  • the website’s counts of how it is used: to see which steps work and to improve Spokaro, which is our legitimate interest;
  • a report about the feedback: to improve the marking, which is our legitimate interest;
  • a bug report or feedback, its picture and its last steps: to find and fix what went wrong and improve Spokaro, which is our legitimate interest; the email address you give with it: to answer you about it;
  • early access: your permission, which you can take back with the way to leave the list in every email;
  • a message you send us: to answer it and help you again, which is our legitimate interest.

How long we keep it

  • A recording you send for scoring: deleted as soon as it is scored.
  • The free mock test’s recordings in your browser: until you delete them from its report, or clear this website’s data in your browser.
  • Transcripts, scores, feedback and reports: 12 months, or until you delete them.
  • A bug report or feedback: 12 months, or sooner if you ask. Its picture of the screen: 90 days.
  • The app’s events and the practice room’s: 12 months. The website’s random visitor numbers: 30 days. Daily totals, which identify no one, are kept.
  • A scrambled form of your internet address, used to limit scoring to 10 answers (and 60 drill tries) an hour: one day. Used to keep the website’s free sample to one a day: until the next day ends. Used to keep the website’s free mock test to one per person: 30 days. Server logs: at most 30 days.
  • The free mock test’s cookie: a year in your browser. The one-way code made from it stays on our server, so the free mock test stays one per person.
  • The account’s session cookie: 30 days in your browser, or until you sign out.
  • The creator link’s cookie: 60 days in your browser. The link’s code an account keeps: with the account, until you delete it.
  • A payment’s record with us (Stripe’s references, the amount, the kind and its mock tests): with the account, until you delete it. Link and Stripe keep their own record of the payment for as long as the law asks them to.
  • The website’s free sample and a drill try: nothing of them is kept. The day’s count of drill tries: until the next day ends.
  • An early-access email address: until you leave the list or ask us to delete it.
  • A message you send us and our answer: up to two years after our last message, then deleted; sooner if you ask. Brevo’s record of our answer: two years after it was sent.
  • An account on the website: until you delete it. Its sessions: 30 days. A mailed link’s one-way code, the address it went to and the year of birth given with it: one day, and so do the asking browser’s one-way code and creator link kept with it.
  • The one-way code made from your phone’s ID, and Apple’s DeviceCheck mark on an iPhone: kept, so the free mock stays one per phone (see above).

Deleting your data

In the app, open Settings and tap Delete my data: your transcripts, scores, reports, the app’s events and your early-access count and address are deleted from our server at once, and your recordings from your phone. You can also do it on the Delete my data page with your Spokaro code, or write to privacy@spokaro.com with that code. Your Spokaro code is in the app, under Settings › Your data.

The website’s free mock test: open the Delete my data page in the browser you took it in and tap Delete this browser’s data. The transcripts, scores and reports filed under that browser’s cookie are deleted from our server at once, and the mock test kept in the browser with them.

An account on the website: open your account page and tap Delete my account. The account, its sessions, its transcripts, scores and reports, its free mock test’s record, the mock tests left on it and our record of its payments are deleted from our server at once; Link and Stripe keep their own record of a payment. What stays, linked to no email address: each browser you opened the account on keeps, under its one-way code, which mock tasks were scored, and the scrambled form of the internet address keeps its 30 days, so a deleted account gives no second free mock test.

Adults only

Spokaro is for adults preparing for the test. The app asks your year of birth before anything is recorded, and someone under 18 cannot record or send an answer. The website’s free sample asks that you are 18 or older before it records, and its practice room asks your year of birth before anything is recorded: only whether you are 18 or older is kept, in your browser. An account on the website asks your year of birth first: under 18, no email address is asked and nothing is sent. We do not knowingly collect information from anyone under 18.

Your rights, and who answers

You may ask to see, correct or delete what we keep about you, to have a copy of it to take elsewhere, to limit how it is used or object to it, to take back a permission you gave, or to ask how it is used. Write to privacy@spokaro.com: the person in charge of protecting personal information at Spokaro (as Quebec’s Law 25 asks) answers it. Residents of Canada, the EU, the UK and states with privacy laws have these rights by law; we give them to everyone.

If you think we have broken the law on your data, you can complain to us at privacy@spokaro.com: we confirm we have it within 30 days and tell you what we did. In the UK you can also complain to the Information Commission, and in the EU to the data protection authority where you live.

Changes

When this policy changes, the date below changes with it. If a change is about what leaves your phone, the app asks your permission again before the next scored answer.

Last updated .