Legal
How WeSpeak collects, uses, and protects your personal information — including what happens to the conversations you have with the tutor. It applies to everyone who uses the Service, anywhere.
Last updated May 31, 2026 · 14 sections
WeSpeak.now (“WeSpeak”, “we”, “our”, or “us”) is the data controller responsible for your personal information. We operate the AI-powered language learning platform available at wespeak.now (the “Service”).
Contact: contact@wespeak.now — or via our contact page.
When you use the Service, we automatically collect:
If you choose to sign in using a third-party account (such as Google), we receive basic profile information (name and email address) from that provider, subject to their privacy settings.
We process your personal information only where we have a valid legal basis to do so. For users in the European Union and European Economic Area, the applicable legal bases under GDPR Article 6 are noted below.
| Purpose | Legal basis |
|---|---|
| Provide, maintain, and improve the Service | Performance of contract (Art. 6(1)(b)) |
| Process your subscription and payments | Performance of contract (Art. 6(1)(b)) |
| Personalize your learning experience | Performance of contract (Art. 6(1)(b)) |
| Send transactional messages (receipts, security alerts, support replies) | Performance of contract / Legitimate interest (Art. 6(1)(b)(f)) |
| Detect, prevent, and address fraud and security issues | Legitimate interest (Art. 6(1)(f)) |
| Analyze usage patterns and improve our Service | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Send marketing communications (only with your consent) | Consent (Art. 6(1)(a)) |
| Use non-essential cookies and analytics | Consent (Art. 6(1)(a)) |
AI conversation data: We process your conversations with our AI tutor to deliver the core Service (legal basis: contract performance). We may also use aggregated and anonymized conversation data to improve our AI models. We will never use your identifiable conversation data to train external AI or machine learning models without your explicit, separate consent. We will never use data from users under 13 for any AI training purpose.
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our general retention guidelines are:
When retention periods expire, we securely delete or anonymize your data. You may request earlier deletion — see your rights below.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
However, no method of transmission over the internet or electronic storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and, where required, the relevant supervisory authority, within the timeframes required by applicable law (72 hours under GDPR).
Depending on your location, you have the following rights regarding your personal information. We will respond to verified requests within 30 days (extendable by a further 30 days where necessary, with notice).
To exercise any of these rights, please contact us at contact@wespeak.now. We may need to verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf.
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. In accordance with the Children’s Online Privacy Protection Act (COPPA) and its 2025 amendments (compliance effective April 22, 2026), we:
If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we have received information from a child under 13, please contact us at contact@wespeak.now.
Users aged 13–18 may use the Service only with parental or guardian consent, as described in our Terms of Service. In the EU, the age of digital consent may vary by member state (typically 13–16); we apply the relevant threshold based on user location where ascertainable.
Your personal information may be transferred to and processed in countries other than your own, including countries where data protection laws may differ from those in your jurisdiction.
When we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms. You may request a copy of the safeguards we use by contacting us at contact@wespeak.now.
Our Service uses artificial intelligence to power the language tutor, generate feedback, and personalize your learning plan. In line with applicable laws (including the EU AI Act and GDPR Article 22):
Our Service may contain links to third-party websites or integrate with third-party services (such as payment processors). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service. We are not responsible for the privacy practices of those services.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you at least 30 days in advance by:
The updated “Last updated” date at the top of this page will reflect when the policy was last revised. We encourage you to review this policy periodically. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, contact us by email at contact@wespeak.now or through our contact page.
EU/EEA users: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.
California users: You may also contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov.
Write to us and a person will answer — usually within two working days.