Spokable

LegalUpdated [DATE]

Privacy policy

What Spokable keeps of your games, why, for how long, and who can see it.

This is a translation. The French text prevails. Français

Spokable is a role-playing game you play by voice: you speak, a narrator answers. To do that, we process what you say.

Who we are

The data controller is Spokable SAS, 57 avenue du Maréchal Juin, 64200 Biarritz, France. For any question or request about your data: [CONTACT EMAIL]. [Data protection officer: NAME AND CONTACT, or remove this line if there is none.]

What we process, and why

What we process Why Legal basis
Your email address and your account Signing you in, keeping your games Performance of the contract
Your games: the story in progress, each exchange (what you said, as transcribed, and what the narrator answered), its time, and how the turn ended Picking your game up where you left it; letting you share a stretch of it Performance of the contract
The narrator’s and characters’ voices, as they were spoken to you So every listen, and every share, hears exactly the same thing Performance of the contract
The technical detail of each exchange (what the models were asked and what they answered) Understanding and fixing what goes wrong in the game Legitimate interest: improving the game
What each game used (minutes of audio, model calls, their cost) Billing you by the minute, tracking our costs Performance of the contract; legal obligation (accounting)
Your own voice (the recording of what you say) Replaying a shared stretch in your real voice Your consent, asked separately (see below)

Your voice is sent to a transcription service to be turned into text, every turn. Without your agreement, we don’t keep the recording: only the transcribed text is kept.

We don’t sell your data, we don’t use it for advertising, and we don’t profile you.

Your voice: a separate agreement

When you sign up, we ask you separately whether we may keep the recording of your voice. The box isn’t ticked in advance, and saying no doesn’t stop you playing.

Who can see it

Processor Role Where
Supabase Database, accounts, sound storage European Union (Stockholm, Sweden)
Fly.io Game servers European Union (Stockholm, Sweden)
OpenRouter Routes our requests to the models below United States
DeepSeek, served by [Together AI, Fireworks AI, …] The narrator: writes the game’s replies United States [to confirm: an EU host with zero retention is planned before opening]
xAI Transcribes your voice; speaks the narrator’s sentences United States
OpenAI Speaks the narrator’s sentences, when that voice is chosen United States
Google Speaks the narrator’s sentences, when that voice is chosen United States [to confirm]
TypeSafe Small judgements on how play unfolds (for example: is the turn over?) [TO CONFIRM]
[Payment provider] Taking your payments [TO CONFIRM]
[Email provider] Sending you sign-in emails [TO CONFIRM]

When your data leaves the European Union, the transfer is covered by the EU–US Data Privacy Framework where the recipient is certified, and otherwise by the European Commission’s standard contractual clauses. [To check for each processor.] We ask model providers not to keep your data and not to train their models on it. [To check for each.]

For how long

What How long
Account, games, exchanges, the narrator’s voice As long as your account exists
Technical detail of exchanges 90 days, then deleted automatically
Recordings of your voice (if you agreed) As long as your account exists and your agreement stands
Usage and costs Kept after the account is deleted, no longer linked to you, for our accounts ([LEGAL PERIOD, in principle 10 years for accounting records])
Server logs [PERIOD TO CONFIRM]

Your rights

At any time, you can:

Write to [CONTACT EMAIL]. We answer within one month. If you believe your rights aren’t respected, you can complain to the CNIL (www.cnil.fr), the French data protection authority.

Age

Spokable is for people aged 15 and over. When you sign up, you confirm you’re 15 or older.

Security

Your data is kept in private databases and storage that only our servers read; no player can read another’s data. Exchanges between your device and our servers are encrypted.

Changes

If this policy changes in a way that concerns you, we’ll tell you before the change applies.