Privacy Policy

The person responsible for privacy (our privacy officer) is your contact for any data question: email hello@flama.is. We respond within the applicable legal time.

We process your data based on: your consent (which you can withdraw at any time); performance of our agreement with you (to deliver the service you asked for); and our legitimate interest in keeping Parléa secure and working, always balanced against your rights.

Account: when you sign in with Google, we receive your name, email address and Google account identifier.

Practice data: the voice recordings you make, the texts you practice, your scores and history, your settings and your weak-sound stats. Voice is sensitive data and we treat it that way.

Usage: counts of how often you practice each day, to enforce fair-use limits.

Payment: handled by Stripe. We never see or store your full card details — we store only your Stripe customer and subscription identifiers and your plan status.

Waitlist: your email address, if you join.

Technical & analytics data: basic usage events and standard technical data such as IP address and browser type.

Your recordings are sent to Microsoft Azure AI Speech, in the Canada region (canadacentral), to score your pronunciation and generate the reference audio you hear. In other words, the analysis of your voice happens on servers in Canada. We use the recordings to give you feedback and track your progress, and we do not sell your recordings.

Parléa produces scores and an estimated level (NCLC) automatically — the acoustic score comes from the Azure engine, and free-speech evaluation runs through a language model (Anthropic). These estimates are a study tool, not an official decision, and they don't produce legal effects on you. Even so, you can ask for an explanation or a human review by emailing hello@flama.is.

We use providers that process data under our instructions, only to run Parléa: Google (sign-in), Microsoft Azure (speech analysis and voice synthesis — in Canada), Anthropic (free-speech evaluation), Stripe (payments), Vercel (hosting, audio storage and analytics), Neon (database), PostHog (product analytics) and Resend (email).

Several of these providers are in the United States, so some of your data may be processed outside Canada and Brazil and be subject to foreign law. We only use providers that offer adequate protection, and we keep the analysis of your voice in Canada.

We do not sell your data and we do not share it for advertising.

Data travels over encrypted connections (HTTPS/TLS), access is limited to what's needed, and we rely on well-known infrastructure providers. No system is completely foolproof, but we take security seriously.

We use a session cookie to keep you signed in and analytics identifiers to understand how the product is used. We do not use advertising cookies.

You can confirm whether we process your data, access it, correct it, export it, delete it, withdraw consent, and object to certain processing. You can also delete your account at any time — that removes your practice data (recordings, scores, history and settings).

To exercise any of these, email hello@flama.is. We respond within the applicable time (LGPD, PIPEDA, Law 25).

We keep your data while your account is active. We delete or anonymize it when you ask, or after a long period of inactivity.

If a security incident creates a real risk of harm to you, we notify you and the competent authority — in Brazil, the ANPD; in Canada, the Office of the Privacy Commissioner (OPC); in Quebec, the Commission d'accès à l'information (CAI) — as the law requires.

Parléa is not directed to children under 16. If you are under 16, do not use the service.

If you're not satisfied with our response, you can complain to the authority for your country or province: the ANPD (Brazil), the OPC (Canada), or the CAI (Quebec).

We may update this policy. When we do, we change the date at the top and, for material changes, notify you by email or in the app.

Privacy questions? Email hello@flama.is.