Privacy policy

Who is responsible

Reparlo is run by Nintai Dick, an individual based in Douala, Cameroon, who decides what data is collected and why (the "controller"). Contact for anything in this policy: hello@dicknintai.dev.

What stays on your device

Reparlo is built so that the most personal part of a session never reaches us.

• Your video. It is recorded and kept in your browser's storage on your device. Your video stays on your device. If you turn on backup, it is encrypted before it leaves, and only you can open it. Backup is a later feature and is off unless you turn it on for a recording.
• Tracking. Body and face tracking runs in your browser, on your device. The camera image is never sent anywhere.
• The replay. The replay is assembled in your browser from your own recording.
• In a mic-only session, the copy of your audio used for replay is also kept on your device.

Clearing your browser's site data, or using "Clear from this device" in settings, removes these copies. We cannot restore them.

What we receive and keep

• The audio of a session, as a 16 kHz mono file. It is used only to produce the transcript and is deleted as soon as the transcript is stored, even if the rest of the analysis then fails. If transcription itself fails, the audio is kept for 24 hours so you can retry, then deleted. Uploads from a take you never sent for analysis are deleted when you discard the take, or after 24 hours.
• The transcript, the scores and the flagged moments produced from it, and the speaking language, scenario and any context you typed (presentation notes, an interview question, a drill topic).
• Body landmark numbers: points of posture, hands and face, sampled 15 times a second and stored as numbers, plus summary measures computed on your device (for example, how often you looked at the lens). They are not images and cannot show your face. They are absent in a mic-only session.
• Your account: your email address, your app and speaking languages, your goal, your capture preference, your onboarding baseline, and your confirmations that you agreed to this policy and are 18 or over.
• Sign-in records: a hashed sign-in token and a hashed form of your IP address when you ask for a sign-in link (used for rate limiting and deleted after 24 hours), and for each signed-in device a session record with its browser description (user agent), so you can see and revoke it in settings.
• Daily usage counters: how many sessions and minutes of audio you analysed each day, to apply the free daily limits.

We use no advertising or analytics trackers. The app sets one cookie of its own, to keep you signed in; the anti-bot check on the sign-in page is run by Cloudflare Turnstile.

Why we use it

• To transcribe and mark your sessions and show you the results: this is the service you ask for.
• To sign you in and keep your account secure.
• To apply the free daily limits and stop abuse, including the anti-bot check on the sign-in page.

Legal basis to confirm: performing the service you asked for, your consent given at onboarding, and our legitimate interest in keeping the service secure and affordable.

Nothing is used to train anything

Your audio, transcripts, scores and landmarks are not used to train or improve any AI model, ours or anyone else's. Every AI step (transcription and the written evaluation) runs on Cloudflare Workers AI. Cloudflare states that it does not use customer content sent to Workers AI to train its models. We do not send your data to any other AI provider.

We do not sell your data, share it for advertising, or show ads.

Who processes it for us

Reparlo runs entirely on Cloudflare, Inc., which acts as our processor under its data processing terms. The Cloudflare services involved are:

• Workers: runs the app and its server code, and keeps short-lived request logs for troubleshooting.
• D1: the database for your account, transcripts, scores and counters.
• R2: file storage for the audio (until transcribed) and landmark tracks.
• Workers AI: speech-to-text and the written evaluation.
• Email Service: sends your sign-in links.
• Turnstile: the anti-bot check on the sign-in page.

Cloudflare operates a global network, so your data may be processed outside Cameroon, including in the United States and the European Union. Transfer safeguards to confirm.

Body and face data

Landmarks of the body and face may count as biometric data under some laws. We treat them that way: they are stored only to show you your results and replay, never used to identify you or anyone else, never combined with other data to recognise a person, and deleted with the recording.

How long we keep it, and deleting it

• Audio: until the transcript is stored, then deleted; at most 24 hours if transcription fails or the take is never analysed.
• Transcript, scores, flagged moments and landmarks: until you delete the recording or your account.
• Sign-in links: valid for 15 minutes, used once, and their records deleted within a day. Signed-in sessions: they expire after 30 days without use, and you can revoke any of them in settings.
• Delete a recording in the app and all of it goes: its database rows and its stored files.
• Delete your account in settings and everything we hold about you is deleted within 24 hours.

For adults only

Reparlo is for people aged 18 and over. You confirm your age when you start. If we learn that an account belongs to someone younger, we delete it.

Your rights

You can see your sessions and signed-in devices in the app, change your languages and preferences in settings, and delete recordings or your whole account yourself. You can also write to hello@dicknintai.dev to ask for a copy of your data, a correction, a deletion, or an export in a portable format, or to object to a use of your data. We answer within [TO CONFIRM: response time for data requests].

The laws we expect to apply to confirm: Cameroon's Law No. 2024/017 on personal data protection, and, for people in the European Union, the General Data Protection Regulation (GDPR). You may also complain to the data protection authority where you live.

Changes to this policy

If we change what we collect or why, we update this page and its date, and we tell signed-in users in the app before the change takes effect. If a change needs your consent, we ask for it again.