Speakeasy3D Privacy Policy

This Privacy Policy explains how True Fiction Studio Limited, operating the Speakeasy3D services ("Speakeasy3D," "we," "us," or "our"), handles personal information across our websites and our web, mobile, and virtual-reality applications. It also covers Starlog, Constellations, classroom and educator services, human-tutoring features, community and pilot programs, and related support and waitlist services.

True Fiction Studio Limited is a company based in Hong Kong. For privacy-law purposes, it is generally the data user, controller, or business responsible for consumer and community data. When a school, organisation, or clinician provides the service, that organisation may decide why and how some information is used, and True Fiction Studio Limited may process it on the organisation's instructions. The applicable institutional agreement and any product-specific notice supplement this policy.

Not every product uses every data category described below. Phrases such as "if you use" and "where enabled" identify feature-specific processing.

• From you: when you register, speak, create content, choose preferences, make a purchase, contact us, or attend an event
• From your device or platform: through app operation, permissions, browser storage, Meta Horizon, an app store, or a payment provider
• From a school or organisation: when it creates or manages an account, classroom, assignment, or learning plan
• From other users: for example, an authorised teacher's note, a booking request, a review, or a multiplayer invitation
• Created by the service: including transcripts, scores, debriefs, learner observations, safety signals, and other derived analytics

We use personal information to:

• Provide accounts, authentication, cross-device sync, and customer support
• Run voice conversations, generate missions and scenes, assess practice, and personalise future activities
• Maintain vocabulary, learning plans, progress, usage allowances, and classroom services
• Provide optional tutoring, social, multiplayer, notification, community, and event features
• Process and restore purchases, subscriptions, and entitlements
• Detect abuse, protect users, troubleshoot failures, secure accounts, and maintain service reliability
• Communicate about requested services, support cases, events, waitlists, and—with permission where required—product updates
• Evaluate and improve our products using aggregated, de-identified, or appropriately authorised information
• Meet contractual, accounting, legal, regulatory, and dispute-resolution obligations

Speakeasy3D uses specialised providers to deliver different parts of the service. We send the information reasonably needed for the requested function; the exact provider can vary by product, language, plan, availability, and platform.

• Google Gemini: live AI conversation, tutor dialogue, mission and learning-plan generation, scoring support, voice-prompt design, and learner-observation extraction
• Hume AI: live expressive voice interactions, voice generation, and provider-derived prosody or emotion signals
• Deepgram: streaming speech recognition and transcription in supported experiences
• Microsoft Azure Speech: pronunciation assessment and text-to-speech in supported languages and products
• OpenAI: scene-image generation and certain dictionary, lookup, or environment-generation functions
• Anthropic: certain content- and environment-generation functions in supported experiences
• Blockade Labs / Skybox AI: generated panoramic environments based on scenario or environment prompts
• Browser or operating-system speech services: speech recognition when the product uses a device-provided fallback

Audio, transcripts, prompts, scenario context, learning preferences, or derived signals may be sent depending on the function. We avoid including direct account identifiers in AI prompts where they are not needed. Provider processing is also governed by the applicable provider terms, privacy notices, and our commercial arrangements with them.

We do not use voice, gaze, or inferred emotion information for targeted advertising. Speakeasy3D does not intentionally retain raw session audio after the live interaction and assessment workflow ends unless a separate diagnostic or research flow clearly asks for permission and states its retention terms.

We may share personal information with:

• Service providers: Supabase for database, authentication, storage, and serverless functions; the AI and speech providers listed above; Stripe and Meta for commerce; EmailJS for waitlist messages; and hosting, notification, security, and support vendors
• Schools and organisations: authorised teachers, co-teachers, administrators, clinicians, or program staff where the account is managed by or linked to that organisation
• Other users or the public: only when a social, tutoring, multiplayer, shared-content, or community feature requires it or you intentionally publish information
• Authorities and advisers: where reasonably necessary to comply with law, respond to valid legal process, protect users, investigate fraud or security incidents, or establish and defend legal claims
• A successor organisation: as part of a merger, financing, acquisition, reorganisation, or sale of assets, subject to appropriate confidentiality and legal requirements

We do not sell or rent personal information, and we do not use personal information for targeted advertising.

Some Speakeasy3D services are designed for use through schools or other organisations and may be used by children or young people. The school or organisation is responsible for confirming that it has authority to provide account information and instructions to Speakeasy3D and for giving notices or obtaining parental or guardian consent where required by law.

Independent consumer use is subject to the minimum age and parental-consent requirements of the applicable country, app store, device platform, and service. A parent or guardian may contact us to ask about, correct, or delete a child's information. For a school-managed account, we may coordinate the request with the school because it may control the account and education record.

We do not knowingly use children's information for targeted advertising or sell it. Optional webcam-gaze features require an in-product choice and may also be controlled by the school; raw camera frames remain on the device as described in Section 2.4.

We retain information for as long as reasonably necessary for the purpose for which it was collected, to provide the account or institutional service, and to meet security, dispute, accounting, and legal obligations. Retention differs by category:

• Account and learning records: generally retained while the account is active and then deleted or de-identified following a valid deletion request, subject to the exceptions below
• Conversation transcripts and derived assessments: retained with learning records so users and authorised educators can review progress, unless deleted under the applicable account or institutional process
• Raw voice audio: processed transiently for live conversation and assessment and not intentionally retained by Speakeasy3D afterward unless a separately disclosed recording feature is enabled
• Webcam frames: not uploaded or retained by Speakeasy3D; only derived summaries may be retained with the session
• School-managed data: retained according to the school agreement, the school's lawful instructions, and applicable education and privacy requirements
• Purchase and transaction records: retained as necessary to manage access and satisfy tax, accounting, fraud-prevention, and legal requirements
• Support, waitlist, and community information: retained while the request, relationship, event, or communication purpose remains active, or until removal is requested where applicable
• Security logs and backups: retention varies according to their function and the schedules of the systems or providers involved; copies may remain until they are rotated or overwritten, or longer when needed to investigate an incident or comply with law

After verifying a valid deletion request, we will respond within the period required by applicable law. Limited information may remain longer in backups, transaction records, security records, records controlled by an institution, or where retention is legally required. AI and other processors may apply their own retention periods under their terms and our agreements.

We use reasonable technical and organisational safeguards appropriate to the nature of the service. These include encrypted network connections, managed authentication, database access controls and row-level access policies, restricted administrative access, and separation of client credentials from server secrets. No online system can be guaranteed completely secure.

If we identify a personal-information breach, we will assess it and provide notifications to affected people and regulators where required by the data-breach and notification laws applicable to the incident.

True Fiction Studio Limited is based in Hong Kong, and our users and providers operate in multiple countries. Personal information may therefore be processed in Hong Kong, the United States, and other locations where our service providers or institutional customers operate. Privacy protections in those countries may differ from those in your country.

The transfer mechanisms and protections that apply vary by provider, country, and account type. Where applicable law requires a transfer mechanism, this may include contractual protections or another mechanism recognised by that law. Contact us for information about arrangements relevant to your account.

Depending on your location and relationship with Speakeasy3D, you may have the right to:

• Ask for access to or a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion or de-identification
• Object to or restrict certain processing
• Withdraw consent for future optional processing
• Request a portable copy where applicable
• Opt out of non-essential marketing communications
• Complain to us or to the privacy or data-protection regulator in your country

You can also control microphone, camera, and notification permissions through the product, browser, operating system, or device settings. Turning off a permission may prevent the related feature from working.

To exercise a privacy right, email support@speakeasy3d.com. We may need to verify your identity. For a school-managed account, you may also contact the school, and we may refer or coordinate the request with it.

Our web products use cookies, local storage, session storage, and similar technologies where needed to keep you signed in, remember preferences and consent choices, reconnect sessions, maintain security, and cache application data. We do not use third-party advertising cookies or tracking pixels for targeted advertising.

Identity, payment, embedded, or linked third-party services may use their own cookies or storage under their privacy notices. Blocking essential storage may prevent account or application features from working correctly.

Our products may link to or open services operated by Meta, Stripe, Google, GitHub, Instagram, app stores, human tutors, schools, or other third parties. Their handling of information outside Speakeasy3D is governed by their own privacy notices. For example, Meta's platform processing is described in Meta's Privacy Policy.

Community-created and Indigenous language materials can carry rights and interests beyond individual privacy. We aim to work with the relevant community, respect agreed authority and access conditions, and support correction, restriction, or removal requests consistent with the project's agreements. We recognise the CARE Principles for Indigenous Data Governance—Collective Benefit, Authority to Control, Responsibility, and Ethics—as an important guide for these projects.

We may update this policy as our products, providers, and legal obligations change. We will update the effective date and provide additional notice where a change is material or where law requires it. Product-specific notices may be updated at the same time.

Contact us with privacy questions, complaints, or rights requests:

Effective August 10, 2026. This policy applies to the Speakeasy3D services described in Section 1.