Privacy
Privacy Policy
Sign & Talk records your voice so it can show you how a sound came out. That is sensitive information, so this page explains exactly what we keep, why we keep it, who else touches it, and how you can take it back.
01
Who we are
Sign & Talk is a product of Vinxign Media Private Limited, a company registered in India. Vinxign Media Private Limited is the data controller (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for the personal data described on this page.
- Company
- Vinxign Media Private Limited
- Product
- Sign & Talk — the website at signandtalk.com, the web app at app.signandtalk.com, and the Android app com.vinxign.signandtalk
- Contact for privacy
- devesh@vinxign.com
- Registered address
- Vinxign Media Private Limited, India. Privacy correspondence is handled by email at the address above. A postal registered office will be supplied on request at the same email, and published here once the company records it on this page.
- Grievance officer
- Devesh Gurjar, Vinxign Media Private Limited — devesh@vinxign.com
In this document "we" and "us" mean Vinxign Media Private Limited. "You" and "the learner" mean the person using Sign & Talk.
02
Google user data (Sign-In and Play)
Sign & Talk uses Google Sign-In so you can create and open an account without a separate password. If you use the Android app, Google Play Billing may also process a purchase. This section is the disclosure Google requires for OAuth branding and for the Google API Services User Data Policy, including the Limited Use requirements.
- What we receive from Google at sign-in
- Your Google account identifier, your email address, and the display name Google provides. We do not request access to your Gmail, Drive, Contacts, Calendar, Photos, or other Google content.
- What we use it for
- Only to authenticate you, to create and recover your Sign & Talk account, to attach practice progress to that account across the web app and the Android app, and to email you about that account when you write to us or when we must send a service notice.
- What we do not do
- We do not sell Google user data. We do not use it for advertising, credit scoring, or profiling unrelated to Sign & Talk. We do not allow humans to read it except to operate the service, to handle your support or privacy request, or where the law requires it.
- Sharing
- Your Google identity is stored so we can sign you in again. It is not sent with your voice clip to the scoring step. Payment card details, if you pay on the web, go to our payment processor and never to us. Play purchases are verified with Google Play.
- Limited Use
- Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Product analytics
- The app may send product events such as app opened, signed in, and analysis started or finished. These events are used to see whether the product works. They are not used to show ads.
03
What we collect
We collect the following categories. Nothing here is sold, and nothing here is used for advertising.
| Category | What it actually is | Why we need it | Legal basis |
|---|---|---|---|
| Account identity | Your Google account identifier, your email address, and the display name Google gives us. We also generate a pseudonym such as "learner 4821". | To sign you in, to keep your progress attached to you across the web app and the Android app, and to contact you about your account. | Necessary to provide the service you asked for (contract). Consent, where you gave it at sign-in. |
| Voice recordings | The audio clip of each practice attempt, stored as a lossless FLAC file. See the dedicated section below. | To score the attempt, to let a trained reviewer check whether the score was fair, and to improve how well the model understands deaf and hard-of-hearing speech. | Your explicit consent. You can withdraw it at any time. |
| Pronunciation results | The target sound, what the model heard, the overall score, per-sound alignment and confidence, and the written feedback that was shown to you. | To show you your history and progress, and to measure whether the app is getting more accurate. | Necessary to provide the service. |
| Recording conditions | Signal-to-noise ratio and a background-noise percentage, measured from the clip. | To tell you honestly when the microphone, not your mouth, is the problem, and to exclude unusable clips from model work. | Necessary to provide the service. |
| Lesson progress | Which lessons you opened and completed, and lesson progress stored on your device. | To resume you where you left off and to order the lesson path. | Necessary to provide the service. |
| Learner profile | Language preference, practice goal, an optional age band (child, teen or adult), time zone, country, postal address (street, city, region, postal code), platform and app version. A clinic or school link if you joined through one. | To choose the right practice content and plan prices for your country, to present dates in your time zone, and to reproduce a bug on the build you are actually running. | Necessary to provide the service. Optional fields are provided by you. |
| Device location | Approximate and precise GPS coordinates (latitude, longitude) and accuracy, when you tap "Use my location" during onboarding or later in account settings. We do not track you continuously in the background. | To confirm your practice region for pricing and support, alongside the address you type. | Consent — you choose whether to share location. You can continue without GPS. |
| Subscription and token records | Your plan, subscription status and period, payment records from Razorpay or Google Play, your Practice Token balance and an append-only ledger of every token movement. | To give you what you paid for, to answer "why was I charged", and to meet Indian accounting and tax obligations. | Necessary to perform the contract, and a legal obligation for the payment and accounting records. |
| Product events | Events such as app opened, signed in, analysis started, analysis succeeded or failed, paywall viewed, purchase succeeded or failed, with platform, app version and how long it took. Plus a daily per-learner roll-up of attempt count and average score. | To see whether the app is working, where it is slow, and where people get stuck. | Our legitimate interest in operating and fixing the product. |
| Diagnostic logs | One structured line per API request: a request id, the method, the path, the HTTP status, how long it took, and your numeric user id. | To investigate errors, abuse and outages. The request id is returned to the app so a report can be traced to an exact line. | Our legitimate interest in keeping the service secure and available. |
| Support messages | What you write to us, including the "this result is wrong" reports you can send from inside the app, with a snapshot of the attempt you were looking at. | To answer you, and to fix the specific attempt that scored wrongly. | Necessary to provide the service. |
This table scrolls sideways on a narrow screen.
Request logs deliberately do not contain request bodies, audio, or email addresses. A numeric user id is enough to find an account when there is a real reason to.
04
Voice recordings — the important part
A trained human may listen to your recordings
Practice requires your explicit agreement on the consent screen. When you agree, Sign & Talk keeps practice recordings and a reviewer employed or contracted by us may listen to them. You can withdraw that agreement at any time in Account settings; withdrawing deletes every recording of yours that we still hold and pauses practice until you agree again.
This is what happens, step by step, when you press record:
- Your device records a short clip for practice. Browser noise suppression and automatic gain are switched off on purpose, because they hide the quiet consonant detail the app is trying to show you.
- The clip is sent over an encrypted connection to our servers. Oversized or very long clips are not analysed.
- We prepare the audio and score it. That scoring step may run outside India. The scoring service receives the audio only — not your name, email or account id.
- The result is turned into a score and visual feedback on your screen. The score and feedback are saved against your account.
- The recording itself is saved in a private store only after you have given consent for recording, storage and human review. Without that consent the learner app does not offer practice.
The private storage bucket is not readable from the internet. Only our server, using a secret key that never leaves the server, can read or write it. The app on your phone or in your browser has no access to it.
Reviewers see a recording next to a pseudonym such as "learner 4821". They do not see your name or your email address.
Signed-in practice only
The learner app requires Google sign-in. Anonymous practice is not a supported product path. Create an account so progress, export and deletion controls attach to you.
05
How long we keep it
| What | How long |
|---|---|
| Voice recordings that no reviewer has listened to | Deleted automatically once they are older than 90 days. Our tooling will not delete audio younger than 7 days. You can still delete your data at any time from the app or by writing to us. |
| Voice recordings that a reviewer has listened to and labelled | Kept only while they remain useful to check and improve scoring accuracy, and for no longer than 24 months. Withdrawing consent or deleting your account still deletes them immediately. |
| Any recording, after you withdraw consent or delete your data | Deleted immediately from live storage. Provider backups may retain encrypted copies for a short overwrite cycle (typically up to about 30 days). |
| Pronunciation results and lesson progress | Kept while your account exists. After deletion the scores remain but are detached from you and carry no identifier. |
| Account identity | Kept while your account exists. Erased when you delete your data. |
| Payment and subscription records | Kept for 8 financial years after the relevant transaction under the Companies Act, 2013 for accounting records in India. These are billing records, not practice recordings. |
| Consent records | Every grant and every withdrawal is recorded and kept (typically up to 8 years) so we can show when consent was given and when it was taken back. |
| Diagnostic logs and product events | Kept for about 90 days, then deleted or aggregated so they no longer identify you. |
This table scrolls sideways on a narrow screen.
06
Who else touches your data
We do not sell your data and we do not share it for advertising. Trusted companies run parts of the service for us — sign-in, secure storage, hosting, lesson video delivery, payments, and the specialised step that scores your voice. Each receives only what it needs to do that job.
- Sign-in and account storage — so you can open the same progress on web and Android.
- Secure hosting — so practice requests reach our servers over encrypted connections.
- Voice scoring — a short prepared clip only; no name or email travels with it. That step may run outside India.
- Lesson videos — teaching media when published, not your practice recordings.
- Google — Sign-In, optional product analytics (app opens), and Play Billing on Android.
- Web payments — our payment processor if you subscribe in the browser (we never store card or UPI numbers).
We also disclose data where the law requires it — for example a valid order from a court or a government authority with jurisdiction over us. If we are ever compelled to do this we will tell you, unless we are legally forbidden from doing so.
07Vendor names (optional detail)Optional detail — expand
For auditors and guardians who ask which companies we use. You do not need this list to understand how Sign & Talk works for you.
| Company | Role |
|---|---|
| Supabase | Sign-in, database, private audio storage |
| Fly.io | API hosting (primary region Singapore) |
| Modal | Voice scoring inference (prepared audio only) |
| Bunny.net | Lesson video delivery when published |
| Sign-In, Analytics, Play Billing | |
| Razorpay | Web subscription payments |
| Vercel | Marketing site and web app front ends |
This table scrolls sideways on a narrow screen.
08
Where your data goes
We chose Indian regions for the two systems that hold the most: the database and the API. Some of our providers are companies incorporated outside India and operate global infrastructure, so some processing — particularly AI inference, web hosting, analytics and Google sign-in — may happen outside India.
Where that happens, we rely on each provider's written data processing terms, including Standard Contractual Clauses or an equivalent transfer tool where the provider uses one for processing outside India. We do not sell personal data and we do not permit processors to use it for their own advertising.
09
Your rights, and exactly how to use them
Under the Digital Personal Data Protection Act, 2023 you have the rights below. All of them are free. We do not ask you to justify a request.
- See what we hold
- Your practice history, scores, plan, token balance and token ledger are visible inside the app. For anything else, write to devesh@vinxign.com with the subject "Access request".
- Correct something
- Your display name, age band, practice goal, language and time zone can be edited in the app under Profile. For anything you cannot edit yourself, write to us and we will correct it.
- Delete your account and data
- Open the app, go to Profile, and tap "Delete my data". Or write to us. The full process is described on the account deletion page.
- Withdraw consent for recording and human review
- You can withdraw consent in the app. Withdrawing it deletes every recording of yours that we still hold, immediately. Practice is paused until you agree again on the consent screen.
- Get a copy of your data
- Use Account settings → Export my data in the app for a machine-readable JSON copy of your account and practice history (audio files are not bundled). Or write to us with the subject "Data export". We aim to complete manual requests within 7 working days.
- Nominate someone
- The DPDP Act lets you nominate a person to exercise these rights on your behalf if you die or become incapable of exercising them yourself. Write to us to record a nomination.
- Complain
- Write to our grievance officer first — we would rather fix it. If you are not satisfied, you may complain to the Data Protection Board of India. Our grievance contact is devesh@vinxign.com until a named officer is appointed.
We aim to acknowledge every privacy request within 7 working days and to complete it within 30 days, or sooner where the law requires it.
10
Children and young learners
Read this if the learner is under 18
Sign & Talk is a speech practice tool, and speech practice is something many children need. Indian law treats a person under 18 as a child and requires verifiable consent from a parent or legal guardian before their personal data is processed.
Our position, stated plainly:
- An account must be held by a person aged 13 or older.
- A child under 13 may use Sign & Talk only on an account held by their parent or legal guardian, with that adult present at sign-up, giving consent to voice recording and human review on the child's behalf, and supervising the practice.
- We ask for an optional age band (child, teen, adult) so the app can choose suitable practice content. We do not use it for advertising and we do not build advertising profiles from it.
- We never show behavioural advertising to anyone, at any age.
- We do not currently run an automated age-verification step. Google Sign-In is the identity check. If you are a parent and a child under 13 has used Sign & Talk without you, write to us and we will delete the account.
If you are a parent or guardian and you believe a child has created an account without you, write to devesh@vinxign.com and we will delete it.
11
Sponsors and clinics — what they can see
Two kinds of organisation can be connected to your account, and only ever after something you did first. A sponsor (a foundation, company, school or individual) paid for your plan and gave you an activation key. A clinic (a doctor, speech-language therapist or school) asked to follow your practice, and you handed them a one-time code from your app inbox. Neither can see anything until you act.
| They can see | They can never see |
|---|---|
| Your 8-digit public learner id | Your name, e-mail address or phone number |
| How many attempts and sessions you made, and when | Your address, location or device details |
| Your average, best and per-sound scores and trends | Your voice recordings, or any audio at all |
| Which sounds, words or sentences you practised | Anything you typed, and any payment details |
| For sponsors: which activation key you used and when | Other sponsors’ or clinics’ data about you |
This table scrolls sideways on a narrow screen.
Sponsors see this because they paid for the seat and need to know it is being used; we show you the sponsor’s name on the plan you activated, and we tell you in the app that the sponsor can see your practice summary. Clinics see it because you approved them: the request appears in your inbox with the clinic’s name, the six-digit code is shown only to you, and it expires in 15 minutes.
- You can end a clinic’s access at any time from Profile → Clinics in the app. The clinic is told, and cannot reconnect without a new code from you.
- A clinic can send you written guidance; it arrives in your app inbox. You are never required to act on it, and you can end access if it is unwelcome.
- A sponsor’s access ends when the sponsored plan ends. Sponsors cannot revoke a plan you have already activated.
- Partners agree to our partner terms, which forbid attempting to identify you from your public id, sharing your report, or using it to rank or penalise you.
- If you delete your account, your public id is unlinked and partners lose access to your report.
Legal basis
For a clinic, the basis is your consent, given by handing over the code and withdrawable at any time. For a sponsor, the basis is the performance of the sponsored subscription you chose to activate; the summary shared is limited to what a funder needs in order to see that the seat is used.
12
How we protect it
Every connection is encrypted. Voice recordings sit in a private bucket that only our server can read. Our database has row-level security switched on for every application table, so the public keys used by the app cannot read them at all. The full description is on the security page.
13
Cookies and device storage
This website sets no cookies at all. The app stores a small number of items on your own device so you stay signed in and keep your settings. The complete list is on the cookies and storage page.
14
Changes to this policy
When we change this policy we update the "last updated" date at the top of this page. If a change materially affects how we use your voice recordings, we will ask you to read and accept the new consent inside the app before your next practice attempt is recorded. The app tracks a consent version for exactly this purpose, so a change to what you agreed to cannot pass silently.
Questions about anything here go to devesh@vinxign.com. A person answers.