Privacy Policy

Sona · Last updated: September 15, 2026

Sona helps you practise your spoken English. To score and coach you, Sona sends some of your data to a small number of cloud services. This policy says exactly what is sent, to whom, why, and how long it is kept. You are asked for your explicit consent in the app before any of this data is sent, and you can review the same disclosure at any time in Profile → Data & privacy.

What we collect, and how

DataHow it is collectedWhat it is used for
Voice recordings (short clips of you reading or repeating a line)Recorded by the app when you tap the microphone during a practice sessionPronunciation scoring and, in Freeform, transcription of what you said
Freeform transcripts (the text of what you said to your AI conversation partner)Produced from your Freeform recordings by our speech providerGenerating your AI partner's reply and a delivery tip
Practice preferences (target sounds, learning goal, native language)Chosen by you in onboarding; target sounds derived from your scoresGenerating practice sentences, stories, role-plays and drills tailored to you
Progress data (scores, XP, streak, per-sound progress, collection, display name, friend connections)Computed by the app from your practiceYour progress, rank, and friend leagues; synced only if you sign in
Account identifiers (user ID and, if you allow it, email)From Sign in with Apple or Google, only if you choose to sign inIdentifying your account and syncing progress across devices
Subscription receiptsFrom Apple when you subscribeConfirming your Premium access and subscription analytics

Voice recordings and AI services

Microsoft Azure Speech receives your practice recordings to compute pronunciation scores and, in Freeform, to transcribe what you said. Clips are processed in memory and are not stored by Azure or on our servers. Only the resulting scores are kept.

xAI (Grok) is the AI model behind Sona's generated content. In Freeform, it receives the transcript of what you said (never your audio) so your AI partner can reply. For practice sentences, stories, role-plays and sound drills it receives only your practice preferences — target sounds, learning goal and native language — and, in role-plays, the lines you chose to say from Sona's own suggestions. xAI does not receive your name, email, recordings, or account identifiers.

Recordings you keep for your "before / after" vault stay only on your device and are never uploaded.

Your consent

Before Sona sends anything to Microsoft Azure or xAI, it shows you this disclosure in the app and asks you to agree. If you do not agree, nothing is sent. You can withdraw consent at any time by deleting your account in-app (Profile → Delete account) or by deleting the app.

Third-party services

Microsoft Azure Speech — pronunciation scoring, transcription, and the model voice you hear; audio processed in memory, not retained.
xAI (Grok) — generates conversation replies (from Freeform transcripts) and practice content (from your practice preferences).
Supabase (EU servers) — authentication, database, and the secure proxy through which requests to Azure and xAI are made; your rows are scoped so only you can access them.
Apple StoreKit — handles subscriptions; we never see your payment details.
RevenueCat — receives your subscription receipts to confirm Premium access and for subscription analytics; no voice data.
Google Sign-In — only if you choose to sign in with Google.

Each of these providers processes data under its own privacy commitments and contractual safeguards that provide protection equivalent to this policy.

Where data is stored

Account and progress data are stored with Supabase on servers in the European Union. Voice recordings are not stored on any server.

No tracking, no ads

Sona contains no advertising and no cross-app tracking. We do not sell your data.

Children

Sona is not directed at children under 13.

Your rights

You can delete your account and all synced data in-app at any time (Profile → Delete account), or remove all local data by deleting the app. For any privacy request, contact karoljaworsky@gmail.com.

© 2026 Karol Jaworski