Privacy policy

Who we are

Saylito runs this website and decides how the data on this page is used. For anything about your data, write to hello@saylito.com.

Your recording

Before anything is recorded, the test asks your permission on its own screen, with these words: “Your recording goes to Microsoft Azure’s speech service to be scored. Microsoft does not keep it, and we delete it as soon as it is scored. We never make a voiceprint, and we never use your voice to tell who you are.” The microphone does not open before you agree and press Record.

• each recording goes to our server, which sends it to Microsoft Azure AI Speech to score how each sound matches the words on the screen. Microsoft says it does not keep or store audio sent for this kind of scoring;
• we delete your recording as soon as it is scored. We keep your scores per sound, the words you read and the day, under this browser’s one-way code (see Cookies), until you delete them;
• the recording is never used to train an AI, never sold, and never shown to anyone.

A result card, if you share one

When you press Share my result, we make a card from that result: your scores per sound and your 3 sounds to practice, at a link nobody can guess. Anyone you give the link to can see it. A card never shows your recording, your age, your first language or your e-mail address, and search engines are asked not to list it. This browser, and the link in the card’s e-mail, can delete it at once; Delete my data deletes this browser’s cards too.

When you press Email me my result, we use the address you type only to send that one e-mail, through Brevo, and we do not keep it. Brevo keeps its own record of the delivery, as its privacy policy says.

Your account, if you sign in

You can sign in with your e-mail address to keep your results on any phone or computer. There is no password: we e-mail you a link, through Brevo, that works once, for 20 minutes. What an account keeps:

• your e-mail address, the day the account was made and the last time you signed in;
• the one-way codes of the browsers you signed in on, so the results and cards each one keeps are your account’s, including a test you took before you signed in;
• for each mailed link, only a one-way copy of its secret part, the address it went to and a one-way code of the internet address that asked for it (to stop one place asking for too many), deleted a day later;
• for each browser that is signed in, a one-way copy of its sign-in cookie’s code, for 30 days or until you sign out.

Signing in asks your year of birth, as the test does, and does not keep it. The mail carries only your link: no newsletter and no advertising. Delete my account, on your account page, deletes the account, your address, and every result, card and counted step of the browsers you signed in on, at once.

No voiceprint

We never make or keep a voiceprint or any other biometric identifier, and nothing we keep can tell who is speaking. Azure’s features that tell speakers apart stay off. Your voice is used only to score the sentence you read.

Your first language (optional)

The test may ask your first language. It is optional, and the answer starts at “Prefer not to say”. If you tell us, we use it only to choose your tips and to count tests by language, in totals that name no one. It is never guessed from your voice, never sent to Microsoft, and never shown on a result card. You can remove it any time on the Delete my data page. Because a first language can say something about where a person comes from, we treat it with extra care and use it only with your choice to give it.

Adults only

Saylito is for adults. Before your first recording, the test asks your year of birth (and so does signing in): if you are under 18, it stops, and nothing is recorded or kept. We use the year only for that check; at most, your browser remembers that you are 18 or older, so it does not ask again. We do not knowingly collect information from anyone under 18.

Keeping the free test and drills fair

The free accent test is once a day and the free drills 3 a day, per person. To count them:

• our server gives your browser a cookie with a random code (the browser cookie, under Cookies). Our server keeps only a one-way code made from it, never the cookie itself;
• so that clearing cookies does not reset the count, our server also keeps a one-way code made from your internet address (for a home connection on IPv6, from its first half, which every device in the home shares);
• each count is kept until the end of the next day (in UTC), then deleted. A one-way code cannot be turned back into the cookie or the address.

Cloudflare Turnstile may check that a scored request comes from a person and not a robot. It does this without a puzzle in most cases, under Cloudflare’s privacy policy.

Cookies

Saylito sets two cookies of its own, both strictly necessary, never used for advertising or to follow you to other sites:

• the browser cookie (saylito_bid), set when you start the test or a drill: a random code that counts your free test and drills and files your results under this browser (and lets our own counts, under How the site is used, count you once). It lasts a year, and the Delete my data button removes it;
• the sign-in cookie (saylito_sid), set only when you sign in with a mailed link: a random code that keeps you signed in on this browser. It lasts 30 days; Sign out, Delete my account and Delete my data remove it.

Cloudflare, which protects the site, may set a strictly necessary security cookie when it checks for robots. A payment page run by Stripe sets its own cookies under Stripe’s privacy policy. Because we set no advertising or tracking cookie, there is no cookie banner. If Saylito ever needs a cookie that is not strictly necessary, it will ask you first.

How the site is used

We count how the site is used on our own server: steps such as “started the test”, “finished the test”, “opened a drill” and “signed in”. Each step keeps the time; your first-language pick, if you gave one; the country your connection comes from, as Cloudflare names it (we never keep your internet address); and, once your browser has the browser cookie, the same one-way code made from it that your results are filed under, so that one person counts once. When a result marks a sound as a fail, and when you press “I said it right”, the step also keeps that sound and its word. Never your recording, your e-mail address or anything else that names you. Each step is kept for 13 months, then deleted, and Delete my data deletes this browser’s at once. Our own test browsers and test accounts are never counted. We use no Google Analytics, no advertising tracker and no social-media pixel.

If you buy the plan

The paid plan is not on sale yet. When it is, the payment is made on a page run by Link (Stripe Managed Payments), which is the merchant of record: your card number and payment details go to Link and Stripe, never to us. We keep Stripe’s references for your plan, its dates, the scored minutes you used, and any refund, so we can run the plan and keep our promise on refunds. Stripe keeps its own record of each payment for as long as the law asks.

If you write to us

We keep your message and our answer for up to two years, so we can help you again with the same question, or until you ask us to delete them.

Who helps us

• Microsoft Azure AI Speech scores each recording’s sounds, and does not keep it.
• Cloudflare delivers the website, checks that scored requests come from a person (Turnstile), and forwards the mail written to us.
• Vultr hosts our server, where the scores and the counts are kept.
• Brevo sends the e-mails you ask for.
• Stripe, with Link, takes payments for the plan once it is on sale.

We do not sell your personal information or share it for advertising, and we give it to no one else unless the law requires it. These companies may handle it outside your country, including in the United States.

Why we may use it

• your recording and your first language: your permission, which you can take back at any time;
• your account: to provide what you asked for when you signed in;
• the paid plan: to provide what you bought;
• the daily counts and the robot check: to keep the free test fair and the site safe, which we have a real need to do.

How long we keep it

• a recording: until it is scored, then deleted;
• your scores per sound and your first-language pick: until you delete them;
• a result card you made to share: until you delete it (its own Delete button, the link in its e-mail, or Delete my data);
• an e-mail address you type to get your result: not at all, it is used to send that one e-mail;
• your account and its address: until you delete it (Delete my account, on your account page);
• a mailed sign-in link’s record: a day; a browser’s sign-in: 30 days, or until you sign out;
• the one-way codes that count the free test and drills: until the end of the next day;
• the browser cookie: a year in your browser, or until you delete it;
• a message you send us: up to two years;
• our record of a plan: while you have it, then as long as the law asks for payment records;
• our server’s logs: at most 30 days.

Deleting your data

Open the Delete my data page in the browser you used and press Delete this browser’s data: everything our server keeps under this browser’s code is deleted at once, and the cookie with it. If you signed in, this browser also leaves your account and is signed out; to delete the account itself, with every result of every browser you signed in on, press Delete my account on your account page. For anything else, write to hello@saylito.com.

Your rights, wherever you live

You may ask to see what we keep about you, to have a copy of it, to correct it or to delete it, to take back a permission you gave, or to object to how we use it. Write to hello@saylito.com: we answer within 30 days, and we give these rights to everyone, not only where the law asks. If you live in the European Union, the United Kingdom or another place with a data protection authority, you may also complain to it.

Changes

When this policy changes, the date at the top changes with it. If a change is about what leaves your device, the test asks your permission again before your next recording.