1. Overview
DaxTech LLC ("DaxTech," "we," "us," or "our") is a Nevada limited liability company, doing business as StreetTongue App. Our registered address is 732 S 6th St Ste N, Las Vegas, NV 89101. This Privacy Policy describes how we collect, use, and share information when you use:
- Our website at daxtechllc.com (the "Site"), and
- The StreetTongue mobile application (the "App").
Together, the Site and the App are referred to as the "Services." By using the Services, you agree to the practices described in this policy.
2. Who This Applies To
StreetTongue is rated 16+ in the Apple App Store and Google Play Store and is intended for users who are at least 16 years old. We do not knowingly collect personal information from anyone under 16. If you believe a user under 16 has provided us information, please contact us at contact@daxtechllc.com and we will delete it.
3. Information We Collect
Account Data
When you create a StreetTongue account, we collect:
- Email address
- Display name or username
- A password, if you create an account with email and password. Passwords are handled by Supabase Auth and stored only as a cryptographic hash (bcrypt). We never store or see your password in plain text.
- An authentication token from Apple, if you choose Sign in with Apple
- An authentication token from Google, if you choose Sign in with Google
Profile and Learning Data
- Target language and city (for example, Mexican Spanish / Mexico City)
- Learning goals and preferences you select during onboarding
- Your progress: phrases reviewed, pronunciation scores, streaks, XP, and spaced-repetition state
- AI conversation and translator history (text only)
Voice and Audio Data
StreetTongue includes speaking and pronunciation exercises. When you use these features:
- Your device records a short audio clip (typically 3 to 10 seconds) of your speech.
- The audio is uploaded over HTTPS to our Cloudflare Worker, which forwards it to Microsoft Azure Speech Services for pronunciation analysis.
- Azure returns word-level accuracy scores. Our Worker returns those scores to the App.
- We do not store your audio recordings. The audio is held in memory only for the duration of the request and is discarded as soon as the scoring response is returned. It is not written to any database, file system, or cloud storage.
- Azure's handling of audio is governed by its own enterprise agreement and privacy terms.
- The only audio-derived information we retain is the numeric pronunciation score, stored with your learning progress.
Your voice recordings are not used to train AI models without your separate, explicit consent.
Purchase and Subscription Data
- For purchases made in the iOS app, Apple processes the transaction. We receive Apple-issued transaction identifiers; we do not receive your credit card number.
- For purchases made in the Android app, Google processes the transaction through Google Play Billing. We receive Google Play transaction identifiers; we do not receive your credit card number.
- In-app purchase state (which tier you own, entitlement status) is managed on our behalf by RevenueCat.
- If we offer a direct web purchase through the StreetTongue website, Stripe processes that payment. Stripe receives your payment details; we receive a Stripe customer and transaction identifier.
Device and Usage Data
- Device model, operating system version, app version, crash logs, and general usage telemetry
- IP address and request metadata, handled by Cloudflare for content delivery, DNS, and abuse prevention
- Aggregate, cookie-free analytics on daxtechllc.com via Cloudflare Web Analytics
4. How We Use Your Information
- Provide and operate the Services, including pronunciation scoring and AI language features
- Authenticate you and keep your account secure
- Sync your learning progress across devices
- Process purchases and manage subscription entitlements
- Send transactional emails such as verification, receipts, and password resets
- Enforce usage limits, prevent abuse, and protect the Services
- Understand aggregate usage and improve the Services
- Respond to your support and privacy requests
- Comply with law
5. AI Features and Tiered Access
Some AI-powered features, including text-based features powered by OpenAI such as conversations, grammar explanations, and translation, are available only to users on paid tiers (Complete and above). Free and Starter users will not see these features, and no text data from those users is sent to OpenAI.
When AI features are used, the text of your message is transmitted to OpenAI for processing. OpenAI's handling of that data is governed by its API terms and its own privacy practices. We do not use your AI conversation text to train models without your separate, explicit consent.
6. Third Parties That Process Your Data
We share data with the following providers so we can operate the Services. We do not sell your personal data.
Infrastructure
- Supabase, Inc. — hosts our application database and handles user authentication. Stores your account data and learning progress.
- Cloudflare, Inc. — content delivery, DNS, edge compute (the Worker that forwards audio to Azure), TTS cache (R2), and bot protection.
- Upstash, Inc. — provides caching and rate-limiting infrastructure; briefly holds session identifiers and usage counters.
Authentication
- Apple Inc. — Sign in with Apple, if you choose it.
- Google LLC — Sign in with Google, if you choose it.
Speech and AI
- Microsoft Corporation (Azure Speech Services) — processes voice recordings to generate pronunciation scores and feedback. Audio is processed in transit only and is not retained by us.
- OpenAI, L.L.C. — processes text content for AI language features on paid tiers.
Payments
- Apple Inc. — processes in-app purchases made through the iOS App Store.
- Google LLC (Google Play Billing) — processes in-app purchases made through the Google Play Store.
- RevenueCat, Inc. — manages subscription state and validates App Store and Play Store receipts on our behalf.
- Stripe, Inc. — processes any direct purchases we may offer through the StreetTongue website.
Communications
- Resend, Inc. — delivers transactional emails (account verification, password resets, receipts).
- Mailchimp (Intuit) — delivers waitlist and launch notification emails when you opt in.
Legal and corporate
- Law enforcement / legal process. We may disclose information when required by a valid court order, subpoena, or other lawful government request, or when necessary to protect the rights, property, or safety of DaxTech, our users, or the public.
- Business transfers. In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your information becomes subject to a different privacy policy.
7. International Users and GDPR
StreetTongue is designed in part for travelers and residents in European cities, including Barcelona, Madrid, Paris, Berlin, and Lisbon. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following applies.
Data Controller
DaxTech LLC is the data controller for personal data processed through the Services. You can contact us at contact@daxtechllc.com.
Legal Bases for Processing
- Performance of a contract. We process your account data, learning progress, and audio recordings to provide the Services you have asked us to provide.
- Legitimate interests. We process device and usage data to secure the Services, prevent abuse, and understand aggregate usage.
- Consent. Where required, we process marketing communications and any optional analytics on the basis of your consent, which you can withdraw at any time.
- Legal obligation. We process information to comply with tax, accounting, and legal requirements.
Your EEA / UK Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Data portability, where applicable
- Withdraw consent where we rely on consent
- Lodge a complaint with your local data protection authority
To exercise these rights, email contact@daxtechllc.com. Account deletion can also be initiated in the App under Settings.
International Data Transfers
Our providers (Supabase on AWS, Cloudflare, Microsoft Azure, OpenAI, RevenueCat, Stripe, Resend, Mailchimp, Upstash, Apple, Google) may process your data in the United States and other countries. Where those transfers involve personal data of EEA, UK, or Swiss users, they are made under appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
8. California Residents (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights.
- Right to know. You can ask what categories of personal information we have collected about you, the sources, the purposes, and the categories of third parties we share it with.
- Right to delete. You can ask us to delete personal information we have collected from you, subject to certain exceptions.
- Right to correct. You can ask us to correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise these rights, email contact@daxtechllc.com from the email associated with your account.
9. How Long We Keep Your Data
- Account data. Retained while your account is active. Deleted or anonymized within a reasonable period after you delete your account.
- Learning progress. Retained with your account.
- Voice recordings. Not retained. Held in memory only for the duration of the scoring request.
- Pronunciation scores and AI text history. Retained with your learning progress until you delete your account.
- Purchase records. Retained as long as required for tax, accounting, and dispute resolution purposes.
- Logs and usage counters. Typically retained 30 to 90 days, and in some cases longer for security investigations.
10. Security
We use industry-standard safeguards including:
- TLS encryption for all data transmitted between the App and our servers
- Cryptographic hashing (bcrypt, via Supabase Auth) for stored passwords
- Encrypted transmission for audio data sent to Azure Speech Services
- Signed JSON Web Token validation on every request processed by our Cloudflare Worker before audio or AI content is forwarded to a third-party provider
- Third-party API keys held as Cloudflare Worker secrets, never exposed to the App or the browser
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using reasonable and appropriate measures.
11. Third-Party Links
The Services may contain links to external websites or services (for example, streettongueapp.com). DaxTech is not responsible for the privacy practices of those sites and encourages you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notice or email before the changes take effect and update the effective date at the top of this page. Continued use of the Services after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For privacy questions, data requests, or concerns:
DaxTech LLC
A Nevada limited liability company, doing business as StreetTongue App
732 S 6th St Ste N
Las Vegas, NV 89101
contact@daxtechllc.com
(702) 625-2414