Privacy Policy

Last updated: 1 November 2026

This policy explains what personal data Oratika processes, why, where and for how long, and what rights you have. The controller is ADRIATIC APPS d.o.o. za usluge, Seget Vranjica, Croatia, OIB 07501605437. Contact us about privacy at hello@oratika.app.

1. The short version

• When you record an answer, the audio is sent once to our server, transcribed in the European Union and then discarded. We do not store your recording.
• Feedback is written by an AI model running in the European Union. It receives the transcript of your answer, numbers measured from it (pace, pauses, filler words), the practice situation and the language. Never your audio, name, email or anything else that identifies you.
• We analyse only your words and their timing. We do not analyse your voice to recognise emotions, judge confidence or personality, or identify you. Recordings are never used to train AI models.
• Analytics and advertising cookies run only if you allow them, and never receive your recording, transcript or quiz answers.
• Oratika is for adults (18+).

2. Your recordings

What happens: your browser records the answer and keeps it in memory until you stop. It then sends the audio to our server, which passes it to a speech-to-text service and receives a transcript with word timings. Our server calculates your pace, pauses, filler words and repeated words, asks the AI model for feedback and returns the result to your browser. The audio exists only in the memory of that one request and is not saved by us, in your browser or in our logs. Our logs record only technical timings (how long transcription and feedback took), not what you said.

Transcript and feedback: at this stage they are shown in your browser and not stored on our servers. If you close the page, they are gone.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you give with the checkbox before recording. You can withdraw it at any time by not recording; past recordings are already deleted.

No biometrics, no emotion recognition: we do not create voice prints, do not identify or verify people by voice and do not infer emotions, stress, confidence or personality from your voice or words.

3. Who processes data for us

• Amazon Web Services EMEA SARL (Luxembourg): speech-to-text with Amazon Transcribe and the AI model (Anthropic Claude through Amazon Bedrock), both in the Frankfurt region (eu-central-1). We use EU-only processing and have opted out of AWS using this content to improve its services.
• Mistral AI SAS (France), only if we switch speech-to-text to its Voxtral model: transcription in the EU. This policy will say which one is active.
• Vercel Inc. (USA): hosting; our server functions run in Dublin, Ireland. Vercel may access technical data (such as IP addresses) from the USA under the EU–US Data Privacy Framework and standard contractual clauses.
• PostHog Inc. (EU cloud, Frankfurt), only with your analytics consent: which pages and funnel steps are used (for example “quiz step 3 viewed”, “recording analysed”, “plan selected”). Never your recording, transcript, results or quiz answers.
• Google Ireland Ltd. and Meta Platforms Ireland Ltd., only with your advertising consent and only on our landing pages: that you arrived from an ad and whether you started a checkout or bought (with the price). Nothing else.

4. Cookies and browser storage

• locale cookie: remembers your language for a year. Necessary.
• oratika:consent:v2 in local storage: your cookie choice. Necessary.
• PostHog cookie and storage: only with analytics consent.
• Google Ads and Meta cookies (_gcl_*, _fbp, _fbc): only with advertising consent, on landing pages.

You can change your choice at any time with “Cookies” at the bottom of every page.

5. How long we keep data

Recordings: not kept (deleted right after transcription, within the same request). Transcripts and feedback: not stored at this stage. Analytics: up to 12 months in PostHog. Server logs with technical timings: up to 30 days.

6. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent. Write to hello@oratika.app. You can also complain to the Croatian data protection authority (Agencija za zaštitu osobnih podataka, azop.hr) or the authority where you live.

7. Adults only

Oratika is meant for people aged 18 or older. You confirm this before recording. If we learn that a recording came from a minor, nothing is kept anyway; contact us if you have concerns.