Privacy
Last updated 10 September 2026. Written in plain language on purpose — if anything here is unclear, that is a bug; write to hello@codespeek.com.
CodeSpeek is a coding-interview practice tool. You talk, an AI interviewer replies, and your code runs in your own browser. This page says exactly what is stored and what is not.
What is stored
| What | Why | How long |
|---|---|---|
| Your email, name and profile picture from Google sign-in | To have an account and show you your own work | Until you delete your account |
| Your attempts: the code you write, the conversation with the interviewer, results and review cards | It is the product — your history and your review schedule | Until you delete your account |
| Dictation transcripts (what the speech recogniser heard, and the cleaned-up version) | To send your message, and to measure whether dictation is getting better | Until you delete your account |
| Audio recordings of your voice | Only if you switch it on. Off by default. It is used to improve dictation for interview vocabulary | 90 days, then deleted automatically. Switch it off and existing recordings are deleted too |
| Usage counts and costs (tokens, minutes of audio) | Daily limits and paying the bills | Kept, with your account identifier removed when you delete your account |
| Diagnostics: which screens you opened, errors, timings | To find bugs — a dropped microphone permission is invisible otherwise | Until you delete your account |
Your voice is opt-in
Audio recording is off unless you turn it on in Settings. With it off, your speech is still transcribed (that is how dictation works at all) but the audio itself is never stored — the recording is transcribed and discarded. With it on, recordings are kept for 90 days to improve how well dictation handles interview vocabulary. You can turn it off at any time, which also deletes the recordings already kept.
Who else processes it
- Cloudflare — hosting, database and file storage (EU/global network).
- Anthropic, through Cloudflare's AI Gateway — the interviewer. Your messages and code are sent to Claude to generate a reply.
- Groq — speech recognition and transcript clean-up.
- Deepgram — the live transcript preview while you are speaking.
- Google — sign-in only. CodeSpeek receives your email, name and picture; Google does not receive your practice data.
There are no advertising trackers, no third-party analytics and no cookies beyond the one that keeps you signed in.
Cookies
One cookie: a session identifier that keeps you signed in. It is HttpOnly, Secure and SameSite=Lax, and it holds nothing but a random string. Because that is the only cookie and it is strictly necessary for a service you asked for, there is no cookie banner.
Legal basis (GDPR)
- Contract — your account, attempts and transcripts: you cannot use the service without them.
- Consent — audio recordings, which is why they are off by default and revocable in one tap.
- Legitimate interests — diagnostics and usage counts, to keep the service working and within its costs.
Your rights
- Get a copy — Settings → Account → Export my data, or
/api/account/export. It is JSON, generated on the spot. - Delete everything — Settings → Account → Delete my account. There is a 7-day pause in case you change your mind (you are signed out immediately, and can cancel within those days). After that, your account, attempts, conversations, transcripts and recordings are deleted for good. Billing totals stay, with your identifier removed.
- Correct, object, complain — write to hello@codespeek.com. If you are in the EU you may also complain to your national data protection authority.
Where the data lives
On Cloudflare's network, which is global. The processors above may handle your data outside the EU under their standard contractual clauses.
Children
CodeSpeek is not intended for people under 16.
Changes
If this page changes in a way that matters, you will be told in the app before it takes effect, not quietly.