Privacy

Last updated 14 October 2026.

What Nuancora does with your voice and your words. Written to be accurate rather than reassuring: where the answer is uncomfortable, it says so.

The short version

• Your audio and your text leave our server to be processed: audio goes to Groq for transcription, text to Anthropic for the coaching analysis. Nothing here is end-to-end encrypted.
• Your corrections, your history of mistakes and your progress stay in our database, in France, and are not sent anywhere.
• Only your own microphone is ever recorded, and only when you click.
• You can download everything or delete your account at any time, from Settings.

Who is responsible

Nuancora is run by a private individual, not a company (see the legal notice). For anything about your data — a question, a request to see, correct or delete it — write to aiichaa.dev@gmail.com.

What we collect, and why

• Account: your email, a username, your password stored only as an argon2id hash, and the four onboarding answers (coaching language, native language, role, who you usually speak with). Needed to run your account and tune the coaching.
• What you submit: recordings, typed text, practice conversations, and their transcripts, corrections and scores. This is the service you asked for.
• Usage: how many sessions and minutes you used and what they cost, to apply the usage limits.
• Free checker (no account): the text you paste is analysed and not stored; we keep only its length, language and cost, for the daily limits. No IP address is stored.
• Invitation requests: the email and note you give, until we answer; then the request is deleted.

The legal basis is the performance of the service you signed up for (GDPR art. 6(1)(b)), and, for the free checker and invitation requests, your request itself.

What is recorded

Only your microphone — never a meeting app's audio, a browser tab, your screen or another participant's stream. The Chrome extension has no permission to capture a tab, and Meeting mode records the microphone in your browser. Recording never starts on its own. If you use laptop speakers in a meeting, a colleague's voice can reach your microphone: use headphones.

Who processes your data

• OVHcloud (OVH SAS, France) hosts the server, the database and the backups.
• Groq, Inc. (United States) transcribes audio.
• Anthropic, PBC (United States) analyses text (Claude).

Groq and Anthropic are in the United States, so your audio and text are transferred outside the EU to be processed, under the data-protection terms those providers offer for their APIs. Both state that API inputs are not used to train their models — a contractual promise from them, not a technical guarantee from us. Account emails are sent from our own mail server. There are no analytics, no advertising and no third-party scripts on this site.

Work material

Nuancora is built for the French you use at work, but do not submit confidential material from your employer or clients unless you are allowed to: it is processed by the providers above. When in doubt, write the sentence with the names and figures changed — the coaching is the same.

How long we keep it

• Recordings: deleted as soon as they are transcribed — except a few seconds around each spoken correction (usually 2–5 s, at most 15 s), kept so you can hear yourself, and deleted with that correction.
• Transcripts, corrections, progress: until you delete them or your account.
• Backups: the database is backed up every night, encrypted, and each backup is kept 14 days. The key that decrypts them is not kept on the server, so a stolen copy reveals nothing. Something you delete disappears from backups within 14 days.

Cookies

Two, both strictly necessary, so there is no consent banner: a session cookie that keeps you signed in (HttpOnly, Secure), and elq_in, which only remembers that you are signed in so the app opens without flashing the home page. No tracking cookies.

Your rights

You can access, correct, export and delete your data, object to or restrict its processing. Most of this is self-service: Settings → Account → Your data has "Download my data" (one file with everything) and "Delete my account" (everything at once). For anything else, write to aiichaa.dev@gmail.com; we answer within one month. You can also complain to the CNIL (cnil.fr).

Security

HTTPS everywhere, invitation-only accounts, rate-limited sign-in, a database reachable from no network port, and containers that cannot reach other services. Each person can only ever see their own data, and automated tests try to read another user's data on every endpoint. Be clear about the limit: whoever operates the server can technically read the database. Treat Nuancora like a service run by a person you trust, not like an end-to-end encrypted one.