// legal
// last updated · 2026-05-04 · GDPR-aligned
Plain-language summary: we collect what we need to run the Service, store it in the EU, never sell it, and let you delete it. Audio recordings stay yours. Below is the detail.
// 01
// 02
Operate the Service. Score your recordings, show your progress, send you sign-in links and product updates you've opted into, process subscriptions, prevent abuse.
// 03
Postgres database hosted in the EU (Render, Frankfurt). Audio in Cloudflare R2 with EU-only routing. Email delivery via Resend. Payments via Stripe. None of these providers receive identifiable data they don't need.
// 04
Audio is not used to train our scoring model unless you explicitly opt in from settings. Even then, recordings are anonymised before they enter the training pipeline.
// 05
All of these are one-click in your settings, or one email to privacy@withslavik.com.
// 06
We keep account data while your subscription is active. After cancellation, recordings and progress are deleted within 30 days. Billing records are retained 7 years for tax compliance, as required by HMRC.
// 07
Strictly necessary cookies only: session, CSRF, and your accepted-cookies flag. No analytics, no third-party trackers, no advertising pixels.
// 08
The Service is not directed at children under 16. We don't knowingly collect data from anyone under 16. If you believe we have, email and we'll delete it.
// 09
Privacy questions: privacy@withslavik.com. Data Protection lead: George Buckley.
// placeholder language · review with UK GDPR specialist before relying on this policy