Privacy

Version 2026-10-28-gemini-live-audio

Who is responsible

Max den Hoed operates Yappr. Privacy contact: maxdenhoed@gmail.com.

Who can use Yappr

Yappr is for people who are 16 or older.

Your account

We keep your email address, your name and the time you created the account. If you sign in with Google, we keep the profile image address that Google shares. If you sign in with Apple, Google or Microsoft, we keep the provider name and your account number there. The provider also sends sign-in tokens, which we store encrypted. We use Apple's tokens to revoke Yappr's access when you delete your account. We do not use these tokens to access your other provider data.

Sign-in and security records

Each sign-in session keeps your IP address, your browser's user agent and its times. When you accept the terms, we keep the terms version, the time, your IP address and your browser's user agent. When you save a recording, we keep your browser's user agent with it. Short-lived sign-in throttles keep your IP address for up to one day.

Invitation access

We keep the invitation campaign and grant time with your account to check access and include them in your account export. Deleting your account removes that grant. The campaign's cumulative admission total remains without your identity so that deleted accounts do not reopen limited places. We do not save the invitation code with your learner account.

Your practice profile

We keep the preferences you choose. These include your daily minutes, your job, whether your colleagues speak Dutch, the situations you want to practice and, if you give it, your first language. Daily minutes size your practice target, and answer, audio and display preferences control your lesson experience. The current tutor does not tailor lesson content or pronunciation feedback to your job, situations or first language. With your separate training permission, those profile details may accompany eligible saved answers as described below.

Your lessons

We keep your lesson places, your answer transcripts, the checks on your words and their order, your mastery records and the timing of each turn. With spoken answers on, we also keep the pronunciation scores for each answer. Recordings are kept only with your separate recording choice. We do not create voiceprints to identify you.

Why we process it

Account and lesson data provide the service that you ask for. Saved recordings let you listen back. A separate, optional permission covers the evaluation and training of Dutch speech recognition and pronunciation feedback. That permission covers your saved answers, their transcripts, their pronunciation scores and the expected sentence. It also covers your job, whether your colleagues speak Dutch, your chosen situations and your first language. No optional choice is a condition of access.

Providers and location

Hosted Yappr uses Postgres and private Azure Blob Storage for account data and optional recordings. In guided lessons with spoken answers on, Microsoft Azure Voice Live receives answer audio for transcription and Microsoft Azure Speech receives answer audio and reference text for pronunciation feedback. Guided lesson typed answers and transcripts, lesson context and pronunciation feedback go to the tutor model hosted through Microsoft Azure AI Foundry. ElevenLabs receives lesson tutor reply text to synthesize speech. In character conversations, Google Gemini Live in the EU receives typed answers or microphone audio and conversation context to produce the character’s replies, speech and transcripts. Microphone audio goes through Yappr's secure Azure web relay directly to Gemini. Generated speech may repeat words from your answer. These providers process that data to supply the lesson. Azure Communication Services delivers sign-in email. Apple, Google or Microsoft receives a sign-in request only when you choose that provider.

How long

Saved answer recordings are kept until you delete them or delete your account. Transcripts, detailed attempts and pronunciation scores expire after 365 days. The ones that belong to a recording you keep live as long as that recording. Your account, your aggregate progress, your mastery records and your terms and consent records stay until you delete the account. Diagnostic events contain a shortened lesson-session identifier, event names, phases and timing information. Turn timing logs also contain lesson and card identifiers and provider request identifiers. Operational logs contain no audio and no transcripts. Hosted logs are kept for 30 days, without a separate on-disk timing archive. Backup copies can remain until their retention period ends. A restored backup must not make deleted data available again.

Your controls

In Settings you can change your spoken answer, recording and training choices. You can download your data, listen to or download recordings, delete recordings, sign out and delete your account. You can withdraw at any time and keep your access to lessons. A recording deletion starts at once and is retried if storage is not available.

Your rights

You can ask for access, correction, erasure, restriction and portability, and you can object where this applies. Contact maxdenhoed@gmail.com. You can complain to your data protection authority. An employer invitation does not change your optional choices.

Essential storage

Yappr uses essential session cookies for sign-in, local preferences in your browser and an app cache for loading speed. Signing out or deleting your account removes the local preferences from that browser. Audio, transcripts and API responses are not stored in the app cache. In the installed app, the sign-in token is kept in the iOS Keychain or encrypted with the Android Keystore. Daily practice reminders are optional local notifications on your device. Exports are written to temporary app cache files for the share sheet and removed afterward or on the next launch. Copies you choose to save or share stay wherever you send them. Native lesson capture holds audio in memory only until it is sent or discarded. There are no advertising trackers in this application.