Privacy policy

What we process

When you submit a practice answer — written text or a voice recording — it is sent to our AI providers (Google, and in some cases Anthropic) to generate your coaching feedback. These providers may process the data outside Canada. Our systems use the answer for that single grading request only; the provider may retain it briefly under its own policy (for example, abuse monitoring). The same applies when you tap a “Hear it” or Listen button: the text being read aloud (an exercise scenario, or feedback derived from your answer) is sent to Google to synthesize the audio — unless the optional on-device voice engine serves that read, in which case the audio is generated entirely in your browser and nothing is sent. If the engine can't produce audio on your device (an error, or a device measured too slow for live speech), that read falls back to the cloud voice above.

Play (friend challenges). Two things happen in a Play game. The live conversation you hear travels directly between the two players' browsers (a peer-to-peer connection) and does not pass through our servers. Each short timed answer (15–30 seconds, depending on the pace the host chose) is a separate recording, and that one is sent through our server to Google to be scored — exactly like a practice answer — then discarded; it is never stored. The match record we keep for up to 7 days holds the two display names, the scores (including per-round bonus flags, such as whether the game's bonus word was used — a yes/no only, never what was said), and the hosting account's id — no audio, no transcripts. Setting up the direct connection also needs technical details that include both players' IP addresses; those are deleted automatically within about 15 minutes of the connection being set up. While a game page is open it also refreshes a short-lived “still here” timestamp on the match record — just a time, no other data — so the other player can see you haven't left; it expires within minutes. The invited player needs no account; the display name they type is shown only to the player who sent them the link. A recorded challenge works the same way — the host's scores wait in the 7-day match record until the friend answers. If you host games, your account also keeps a small running win–loss tally per opponent (their first name and the counts only — no recordings, no transcripts, no per-game details), so the results screen can say “you lead 4–2”.

Ask (voice conversations). Each thing you say or type on the Ask page is sent once to Google to generate the coach's reply, and the reply text is sent to Google to synthesize her voice — a longer reply may go in two parts, so she can start speaking before the whole answer is written (if Google's voice is unavailable, your device's own voice speaks it instead). So the conversation can follow along, the session so far is sent with each request, and only your most recent turns are passed on to Google. The conversation lives only on your device and ends — everywhere — when you leave the page; we never store what you said or her replies, though a synthesized clip may sit in server memory for a few minutes so a repeat plays instantly.

What we never store

Your answer text and voice recordings. They are not saved to our servers or databases — once your feedback is generated, they are discarded. Recordings exist on your device until you re-record or leave the page.

My Voice (on-device, optional)

If you opt into My Voice, a short recording you make for that purpose is turned into a private voice model that reads your improved answers back in your own voice. This happens entirely in your browser: the recording, the voice model, and the generated audio never leave your device and are never sent to our servers or to any third party. The sample is kept only in your browser’s private storage, and deleting My Voice in your Voices settings removes it immediately and completely. The feature requires a signed-in account and express opt-in consent, is limited to users 18 and older, and declining it changes nothing else about the service. Signing out — or a different account signing in on the same device — removes the enrolled voice from that device automatically, so a shared or public computer never retains it.

AI assistant connectors (MCP)

You can use Artiluca through AI assistants such as Claude or ChatGPT via our Artiluca Coach connector. The same no-persistence contract applies: an answer your assistant sends for grading is processed once by our AI providers to produce the scorecard and is never stored. The connector requires no account and asks for nothing about you; to enforce fair-use limits we keep a short-lived, one-way-hashed caller identifier — the assistant's anonymized per-user id when it supplies one, otherwise a network address (kept for about a day) — and an aggregate daily counter, nothing else. What you type into the assistant itself is handled under that assistant's own privacy policy.

What we store in your account

• Practice progress and best scores per exercise, including placement diagnostic results (scores only, never your answer text).
• Your subscription plan and purchased options.
• An AI-usage meter (token counts and cost) that enforces your plan's annual coaching allowance.
• Rolling per-dimension coaching averages and score history, so the coach can point you at your weakest area and show your trend.
• Your voice-playback preferences (whether the on-device engine is enabled and which voice you chose — never a recording or voice model).
• If you complete our beta feedback form: your ratings and written comments.
• If you signed up after clicking one of our campaign links: which campaign brought you here (the link's tags — used for aggregate marketing statistics only, never for access).

Certificates: if you earn a Certificate of Completion, its verification link itself contains your display name and a hashed form of your email (so the certificate can be checked without us storing anything). Anyone you share the link with can see the name, and shared links remain valid after account deletion.

This account data is held by Clerk, our sign-in provider, and synced across your devices.

Fraud prevention: to protect the 14-day money-back guarantee from repeat abuse, we keep a salted one-way hash of the network address a refund was issued from, and of the address a brand-new account is first seen on (never the address itself — the hash can be matched but not read back). When several refunded accounts share an address, a new account from the same address is asked to contact support@artiluca.ca before purchasing — a human reviews it; shared networks (a campus, a household) are exactly why this is a conversation, not a ban. Hashes are kept for at most two years.

Cookies and analytics

• A cookie limits attempts on the free home-page demo (it stores an attempt count, nothing about you).
• If you arrive via a campaign link, its tags are kept in your browser's session storage for that visit (see Certificates and campaign attribution above).
• Vercel Analytics collects aggregate page-view statistics.
• The LinkedIn Insight Tag (advertising measurement) loads only if you allow it via the on-site notice (shown only on visits arriving from a LinkedIn ad) — it is off by default, you can decline, and the site works fully without it. You can withdraw an earlier “Allow” at any time with the control below; if allowed, you can additionally opt out via LinkedIn's ad settings.

Service providers

Clerk (accounts and sign-in), Stripe (payments — we never see your card number), Google and optionally Anthropic (AI coaching), Vercel (hosting and analytics), Upstash (the short-lived store behind Play matches and our abuse limits), and Resend (email). Each receives only what its function requires.

The leaderboard (opt-in)

The public leaderboard is strictly opt-in. If you choose to join, the name you provide when joining (the name on your account, or the first and last name you type on the join card), your average practice scores (spoken, written, and overall — including scores from your past practice), and your practice streak are shown publicly on the leaderboard page. Nothing else appears — never your answers, recordings, email, profession, or plan. Joining includes confirming you are 16 or older, or 13–15 with a parent or guardian's permission. You can remove yourself at any time from the leaderboard or progress page, and your row disappears on the next refresh (within a few minutes). If you never join, nothing about you is shown — and if you ever see your name there without having joined, email us and we will remove it.

Age requirement

Artiluca is for users aged 16 or older. Learners aged 13–15 may use it only with the consent of a parent or guardian; children under 13 may not use the service. Purchases — including the Student Semester Pass for high-school learners — must be made by an adult (a parent or guardian, for minor learners).

Your choices

• Practise without an account: the home-page demo requires no sign-up.
• Delete your account from your account menu at any time — your stored progress is removed and any active subscription is canceled automatically.
• Questions or requests about your data: support@artiluca.ca.

The person responsible for the protection of personal information at Artiluca is the founder (Privacy Officer), reachable at support@artiluca.ca.