Privacy Policy

1. Who We Are

speakgreek.co.uk is operated by A2K Web LTD, a company registered in England and Wales ("we", "us", "our"). We are the data controller for any personal data processed in connection with this website.

2. What Data We Collect

We collect only the minimum data necessary to operate the Service:

Email address (waitlist and account registration)

If you sign up to our waitlist or create an account, we collect your email address. We use this to send you updates about the Service and, when accounts are available, to manage your access. We do not collect any other personal details at this stage.

Payment information

When paid features are available, payments are handled by LemonSqueezy. We do not collect or store your card details — these are processed directly by LemonSqueezy in accordance with their own privacy policy. We may receive limited billing information (such as your email address and country) to manage your subscription.

Account data

When you create an account, we store your email address and any profile information you provide (such as your first name) in order to manage your access and personalise the Service. Account data is stored securely via Supabase (see section 6). We do not store your password — authentication is handled via a one-time code sent to your email address.

Exercise submissions

When you complete writing or speaking exercises, your responses are sent to third-party AI services for assessment and immediately discarded. We do not store the content of your exercise responses.

3. Analytics

We use PostHog to understand how the Service is used. Our PostHog configuration is cookieless — we do not place any tracking cookies on your device, and we do not collect any personally identifiable information through analytics.

Analytics data is aggregated and used solely to improve the Service. It is hosted on PostHog's EU infrastructure.

4. Cookies

We do not use cookies for tracking or analytics purposes. We use strictly necessary cookies to maintain your login session when you are signed in. These are set by Supabase and contain an encrypted authentication token — they do not track your behaviour or share any data with advertisers. See our Cookie Policy for full details.

5. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following bases:

• Consent — when you sign up to our waitlist, you consent to us contacting you with updates about the Service.
• Contract — when you create an account or purchase a subscription, we process your data to fulfil our agreement with you.
• Legitimate interests — we process anonymous analytics data to improve the Service, in a way that does not override your rights or interests.

6. Third-Party Processors

We share data with the following third-party processors only to the extent necessary to operate the Service:

• Loops — manages our mailing list and sends email communications. We share only your email address.
• PostHog — provides cookieless, anonymised usage analytics (EU-hosted).
• Anthropic — provides AI assessment of exercise responses. For details on how Anthropic processes data, please refer to the Anthropic Privacy Policy.
• ElevenLabs — provides text-to-speech audio for learning content. No personal data is shared.
• LemonSqueezy — processes payments when paid features are available. We do not store your payment details. For details on how LemonSqueezy handles your data, please refer to the LemonSqueezy Privacy Policy.
• Supabase — provides authentication and account data storage. Supabase stores your email address, encrypted session tokens, and any profile data you provide. Supabase is hosted on EU infrastructure. For details, see the Supabase Privacy Policy.

We do not sell your personal data to any third party, and we do not share it for marketing purposes.

7. Data Retention

We retain your email address for as long as you are subscribed to our mailing list or hold an active account with us. If you ask us to delete your data, we will remove it promptly (see section 8 below).

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Withdraw consent at any time (e.g. unsubscribe from emails)
• Object to processing based on legitimate interests
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, simply email us at hello@speakgreek.co.uk. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

Users aged 13–15 must have parental or guardian consent before using the Service, in accordance with our Terms of Use.

10. Changes to This Policy

We may update this Privacy Policy from time to time, particularly as new features (such as user accounts and payments) are introduced. When we do, we will update the "Last updated" date at the top of this page.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: