Privacy
What FiboSpeak stores when you practice, who can see it, which services process it, and how to delete it.
What we store
FiboSpeak keeps what it needs to show you your practice sessions again:
- Your account: email address and name. If you sign in with a password, it is stored only in hashed form.
- The decks you upload, and the text taken from each slide so the AI audience can ask about it.
- Recordings of your sessions: your voice, and your camera video if you turned the camera on.
- Transcripts of what you and the AI audience said, with the time of each word.
- The numbers worked out from a transcript, such as pace, pauses and filler words, and the written feedback.
- Each session's settings, and the time you agreed to be recorded.
Who can see it
Your decks, recordings and transcripts are served only to you, and only while you are signed in.
The Share button on a review page copies that page's address. Whoever opens it still has to sign in as you, so it does not make a session public. FiboSpeak has no public links.
The people who run FiboSpeak can reach stored data when they have to, for example to fix a fault you report.
Services that process your data
FiboSpeak does not do everything itself. To hear you, answer you and store your sessions it sends data to the services below. Each one handles what it receives under its own terms.
- Supabase
- Runs the database and the sign-in system.
- Receives: Your email address, your name, your password in hashed form, and everything listed under "What we store" except the deck and recording files.
- LiveKit
- Carries the live audio and video of a practice session with an AI audience.
- Receives: Your microphone audio, and your camera video if you turn the camera on, while the session is running.
- Deepgram
- Turns speech into text.
- Receives: Your audio: live during a session with an AI audience, or the recording after a solo session.
- OpenRouter
- Passes text to the AI models that write the audience questions and the feedback.
- Receives: The transcript of what you said, the text of your slides, and the session settings. OpenRouter forwards these to the model provider that answers.
- Cartesia or ElevenLabs
- Gives the AI audience a voice.
- Receives: The text of what an audience member is about to say. Not your audio.
- Cloudflare R2
- Holds deck and recording files, when FiboSpeak is set up to keep them there instead of on its own server.
- Receives: The decks you upload and the recordings of your sessions.
- Signs you in, only if you choose "Continue with Google".
- Receives: The fact that you signed in to FiboSpeak. We receive your name and email address from Google, and nothing else from your Google account.
Signing in with Google
If you use "Continue with Google", FiboSpeak asks Google for your name and email address and nothing else. It does not read your contacts, files, calendar or profile picture.
A Google sign-in with the email address of an existing FiboSpeak account opens that account. The first time this happens the account's password is removed, because FiboSpeak does not verify email addresses and someone else could have set it. You can set a new password from your profile page.
How long we keep it
We keep your account and your sessions until you delete your account. Nothing expires on its own, and a single session cannot be deleted by itself yet.
Deleting your data
Open your profile page and choose "Delete account & data". This removes your sign-in, your decks and recordings, and every session, transcript, score and piece of feedback stored with your account. It cannot be undone.
Data already sent to the services above while you practiced is handled under those services' own rules.
Contact
Questions about your data, or a request you cannot make from the profile page:
Changes to this page
When what FiboSpeak does with your data changes, this page changes with it and the date at the top is updated.