Privacy Policy

Last updated: 2026-07-13

This Privacy Policy explains what personal data Drillab collects, why we collect it, and the rights you have. It covers both this website and the Drillab app.

1. Who is responsible

The data controller is Individual Entrepreneur Daniel Tcytkin (ID 343575410), registered in Georgia. For any privacy question or request, contact support@drillab.app.

2. Data we collect

• Account data — your email address and basic profile details when you sign up or join the waitlist.
• Audio recordings — recordings of you speaking, which the Service processes to score your pronunciation.
• Usage and device data — basic technical information (such as device type and app interactions) needed to run and secure the Service.
• Payment data — handled entirely by Paddle, our payments provider (see below). We do not receive or store your full card details.

3. How and why we use your data

We use your data to:

• provide pronunciation scoring and feedback (processing your audio);
• create and manage your account and subscription;
• communicate with you about the Service and your waitlist signup;
• keep the Service secure and improve how it works.

Where the GDPR applies, our legal bases are: performance of our contract with you (providing the Service), your consent (e.g. waitlist and marketing emails, which you can withdraw at any time), and our legitimate interests in operating and securing the Service.

4. Sub-processors and sharing

We share data only with the service providers needed to run Drillab. We do not sell your personal data. Our sub-processors are:

• Paddle.com Market Limited (Paddle) — payment processing and Merchant of Record for purchases.
• Microsoft Azure Cognitive Services (Speech) — processes your audio recordings to generate pronunciation scores.
• Mailchimp — sends waitlist and account-related email.
• Self-hosted infrastructure — the Service runs on our own servers; we do not use a third-party CDN to deliver app content.

We do not use third-party web or product analytics.

5. Retention of your recordings

We keep your audio recordings only as long as needed to provide scoring and your practice history, and we delete them when you delete your account or on request. Other personal data is kept for as long as your account is active or as required by law.

6. International transfers

Some of our sub-processors operate outside your country. Where data is transferred internationally, we rely on appropriate safeguards (such as the providers’ standard contractual clauses) to protect it.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email support@drillab.app. You also have the right to complain to your local data-protection authority.

8. Cookies

We use only the cookies and similar storage strictly necessary to run the site and keep you signed in. We do not use advertising or analytics cookies.

9. Children

The Service is not directed at children under 16. If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to keep your information safe.

11. Changes and contact

We may update this Policy from time to time; the “Last updated” date above reflects the latest version. Questions or requests? Email support@drillab.app.