Sonner AI

Privacy Policy

Last updated: May 9, 2026

Sonner AI (“Sonner AI,” “we,” “us”) provides French pronunciation practice and accent feedback through websites, mobile apps, and APIs (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect personal information. By using the Service, you agree to this Policy together with our Terms of Service.

1. Data controller

The data controller for personal information processed through the Service is the Sonner AI operating entity responsible for the product. Contact: [email protected].

2. Information we collect

Depending on how you use the Service, we may process:

  • Account data: email address, authentication identifiers, preferences, subscription status flags.
  • Voice and audio: recordings you submit for pronunciation analysis, scoring, or drills.
  • Generated feedback: scores, summaries, phoneme-level notes, timelines, transcripts or features produced from your submissions.
  • Usage and device data: app events, coarse IP-derived location, timestamps, diagnostics, crashes, and similar telemetry needed to operate and secure the Service.
  • Payments: we do not store full payment-card numbers ourselves; our processors provide limited billing metadata (subscription tier, receipts, identifiers).
  • Support communications: messages you send to our support inbox.

3. How we use information

We use personal information to:

  • Create and secure accounts and sessions.
  • Provide accent analysis, drills, pronunciation coaching outputs, historical progress, and entitlements.
  • Process subscriptions, refunds, fraud prevention, accounting, and tax compliance.
  • Maintain infrastructure, troubleshoot issues, analyze aggregate usage trends, and improve models or prompts.
  • Communicate transactional messages (verification, receipts) and optional product notices where permitted.
  • Comply with law, enforce our terms, and protect users.

4. Legal bases (EEA, UK, similar regions)

Where GDPR or equivalent laws apply, we rely on one or more of:

  • Contract: providing the Service you request.
  • Legitimate interests: security, abuse prevention, product improvement, aggregated analytics—balanced against your rights.
  • Consent: where we ask plainly (you may withdraw).
  • Legal obligation: retaining records regulators require.

5. AI and inference providers

Scoring or feedback might be produced using automated systems from third-party AI providers under commercial terms. Synthetic native speech playback may rely on third-party text-to-speech services. Audio or derived features may transit to those providers transiently consistent with data protection agreements appropriate to the circumstance.

6. Disclosure of information

We disclose personal information to:

  • Hosting, database, email, logging, observability, and security vendors supporting the stack.
  • Payment processors or app storefronts (Stripe, Apple, Google, Lemon Squeezy as applicable).
  • Professional advisers (counsel, accountants) bound by confidentiality.
  • Authorities when required by law or to protect vital interests.
  • Acquirers in a merger, financing, or sale of assets—with notice consistent with applicable law.

7. Retention

We retain data only as long as needed for the purposes above, consistent with backup cycles and lawful obligations. You may delete your account where the product exposes that capability; residual copies may linger for a finite time in backups or logs unless law requires retention.

8. Security

We use administrative, technical, and organizational measures appropriate to our size and risk. No online service can be perfectly secure—please choose a strong password and protect your devices.

9. International transfers

We operate in the United States and may engage processors globally. Where required we implement safeguards such as Standard Contractual Clauses or equivalent mechanisms alongside supplementary measures as appropriate for the transfers involved.

10. Your rights and choices

Depending on your location, you may have rights to access, rectify, erase, restrict, object, withdraw consent, or port data—and to lodge a complaint with your local supervisory authority. Contact [email protected] with requests; we verify identity before acting.

Marketing emails include an unsubscribe link where applicable. Important operational notices regarding your account may still be sent regardless of marketing preference.

11. Cookies and similar tech (web)

We may use cookies, local storage, and similar mechanisms for authentication sessions, remembering preferences, analytics, or experiment bucketing. You can tune browser controls; disabling certain cookies may break sign-in flows.

12. Children

The Service is not directed to children under 13 (or older if local law establishes a higher age). Do not permit minors to submit voice data without verifiable parental consent where required by law.

13. California residents

Subject to exclusions in the CPRA/CCPA regime, residents may exercise access, deletion, correction, portability, and opt-out of “sale/sharing” of personal information. We do not sell personal information for money but may use analytics or ads partners in ways that constitute “sharing” under California law—you may contact us or use any opt-out link we honor in product. We do not use sensitive personal information for inferring characteristics beyond delivering the pronunciation features described.

14. Automated decision-making

Accent scores are computed automatically without human review in the ordinary course. Automated outputs do not have legal effects on you analogous to approving credit—they are tutoring feedback outputs for self-improvement.

15. Updates

We revise this Privacy Policy when our practices evolve. Notice will be reflected in the updated “Last updated” date above and, where required, through additional prompts.

16. Contact

Privacy inquiries: [email protected]