Privacy Policy
Last updated: May 24, 2026. This page explains what data we collect, why we collect it, and the choices you have.
1. Introduction
Welcome to Spkr ("we," "our," or "us"), a service operated by No Friction Labs, LLC. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our text-to-podcast conversion service across mobile, web, and API surfaces.
By using Spkr, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
When you create an account or use our services, we may collect:
- Email address and name for account creation
- Content you upload or submit for conversion to audio
- Source URLs of articles you submit
- Usage preferences and settings
2.2 Automatically Collected Information
- Device information (browser type, operating system)
- Usage analytics and performance metrics
- Log data (IP address, timestamps, pages visited)
- Cookies and similar tracking technologies
2.3 ChatGPT App and Account Linking
If you connect Spkr to ChatGPT, we collect OAuth account-linking records, access and refresh token metadata, requested scopes, token expiration and revocation state, and the final podcast-friendly script text you choose to save to Spkr.
- We do not receive your full ChatGPT conversation unless you send content to Spkr through the app.
- We do not log bearer tokens or script body text in application logs.
- Saved scripts are processed like other uploaded Spkr content and are stored in your Spkr account.
3. How We Use Your Information
We use the collected information for the following purposes:
- Providing and maintaining our text-to-podcast conversion service
- Processing your content and generating audio files
- Managing your account and subscription
- Improving our services and user experience
- Communicating with you about updates and support
- Ensuring security and preventing fraud
- Linking your Spkr account to ChatGPT and saving scripts you explicitly submit from ChatGPT
4. Legal Basis for Processing (EEA/UK Users)
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal information:
- Performance of Contract: Processing your content, generating audio files, managing your account and subscription, and providing customer support.
- Legitimate Interests: Improving our services, analyzing usage patterns, ensuring security, preventing fraud, and protecting our legal rights.
- Consent: Sending marketing communications (you may withdraw consent at any time).
- Legal Obligation: Complying with applicable laws, regulations, and legal processes.
5. AI and Content Processing
Content submitted to Spkr is processed solely for the purpose of generating audio content for you. We do not use your content to train our own models. Where third-party AI providers are used, processing is governed by contractual data protection obligations, and content is not used for model training except as necessary to provide the service.
- No unauthorized training: We do not use user-provided content or generated audio to train base models without explicit consent.
- Ephemeral processing: All synthesis occurs in encrypted environments and is not written to permanent storage during processing.
6. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:
- Service Providers: We may share data with trusted third-party services that help us operate our platform (AI processing, cloud storage).
- ChatGPT account linking: OpenAI operates ChatGPT and the app surface where you initiate account linking. Spkr receives only the OAuth requests, tool calls, and content you send to Spkr.
- Legal Requirements: We may disclose information when required by law or to protect our rights.
- Business Transfers: In the event of a merger or acquisition, your information may be transferred.
7. Data Security
We implement industry-standard security protocols to protect your assets. This includes:
- Encryption: All data is encrypted at rest using AES-256 and in transit via TLS 1.3.
- Access Controls: Internal access to user data is restricted via multi-factor authentication and strict least-privilege protocols.
- Redundancy: Distributed storage ensures data availability. Content assets are excluded from long-term backups unless explicitly enabled by the user.
8. Data Retention
We retain personal information for as long as your account is active. Upon account deletion, we remove your personal data within 30 days. Content you upload for conversion can be deleted by you at any time. ChatGPT account-linking authorization codes expire after 5 minutes, access tokens expire after 1 hour, and refresh tokens expire after 30 days unless revoked earlier.
9. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your personal data.
- Data Export: Request an export by emailing support@spkr-app.com (provided within 30 days).
- Opt-out: Unsubscribe from marketing communications at any time.
To exercise these rights, contact us at support@spkr-app.com. EEA/UK residents have additional GDPR rights. California residents have rights under CCPA/CPRA — we do not sell or share your personal information for cross-context behavioral advertising.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Company: No Friction Labs, LLC
Email: support@spkr-app.com