Providers may process personal data only as needed to provide services to Vocafy and subject to appropriate contractual, technical, and organizational safeguards.

Not every provider listed on this page is used for every user, country, feature, or account. Some providers may be used only if a specific feature is enabled, such as payments, AI tutor conversations, speech features, email delivery, file storage, analytics, or support requests.

This page may be updated from time to time as our infrastructure, providers, or product features change.

1. Hosting and infrastructure

Hosting and infrastructure providers are used to host the Vocafy application, databases, files, backups, and related technical systems.

These providers may process account data, technical data, learning content, uploaded or imported content, logs, and other data needed to operate the Service.

Current or planned providers may include:

  • Rackforest Zrt.
  • Vocafy-operated infrastructure

2. CDN, performance, and security

CDN, performance, and security providers are used to improve website performance, route traffic, protect the platform, reduce abuse, prevent attacks, and support the availability of the Service.

These providers may process technical data such as IP addresses, device and browser information, request metadata, security events, traffic data, and other information needed to protect and deliver the Service.

Current or planned providers may include:

  • Cloudflare

3. Email delivery

Email delivery providers are used to send transactional and service-related emails, such as registration emails, login codes, password resets, security alerts, account notices, product-related messages, and support-related communication.

These providers may process email addresses, names or account identifiers, message content, delivery metadata, and technical email delivery information.

Current or planned providers may include:

  • Resend or similar email delivery provider
  • MailerSend or similar email delivery provider
  • Mailgun or similar email delivery provider

4. Payments and billing

Payment and billing providers are used to process subscriptions, payments, invoices, refunds, tax information, fraud prevention, and billing events.

These providers may process payment, billing, subscription, tax, refund, fraud prevention, transaction, and customer communication information.

Vocafy does not store full payment card details.

Current or planned providers may include:

  • Stripe

5. AI and language model services

AI and language model providers may be used to provide AI tutor conversations, explanations, translations, corrections, quiz generation, personalized examples, grammar support, vocabulary support, role-play, and other AI-assisted learning features.

These providers may process prompts, user instructions, conversation context, selected learning content, generated outputs, and technical metadata needed to provide AI-assisted features.

Vocafy does not use private learning content, AI tutor conversations, voice recordings, or imported personal learning content to train third-party AI models.

Current or planned providers may include:

  • OpenAI
  • Google
  • Anthropic
  • Microsoft Azure / Azure AI Foundry
  • Vocafy-operated AI systems

6. Speech, pronunciation, and audio services

Speech, pronunciation, and audio providers may be used to provide speech-to-text, text-to-speech, pronunciation analysis, generated audio, listening practice, and related language learning features.

These providers may process text, audio input, voice recordings, pronunciation samples, generated audio, language settings, and technical metadata needed to provide speech and audio features.

Vocafy does not use voice recordings or pronunciation samples to train third-party AI models.

Current or planned providers may include:

  • Microsoft Azure
  • Vocafy-operated speech or audio systems

7. Storage and backups

Storage and backup systems are used to store files, learning materials, uploaded content, generated content, system backups, logs, and related operational data.

These systems help Vocafy maintain service availability, recover from technical problems, protect data integrity, and support security or legal obligations.

Current or planned providers may include:

  • Vocafy-operated storage and backup systems
  • Hosting or infrastructure providers listed on this page

8. Support and abuse handling

Support and abuse handling tools are used to manage support requests, privacy requests, account deletion requests, user reports, abuse reports, copyright reports, security issues, and related communication.

These tools may process contact details, account information, support messages, report details, attachments provided by the user, internal notes, and technical information needed to investigate or respond to requests.

Current or planned providers may include:

  • Vocafy-operated support tools
  • Email delivery providers listed on this page

9. Analytics

Vocafy currently uses first-party analytics only.

Analytics may be used to understand how the platform is used, which pages and learning content are useful, how features perform, and how to improve the Service.

Where analytics are used, Vocafy aims to keep them privacy-friendly and proportionate. Analytics may include technical information, page or feature usage, aggregated learning content usage, device or browser information, approximate location derived from technical data, and similar usage information.

Vocafy does not currently use:

  • Google Analytics
  • Meta Pixel
  • TikTok Pixel
  • LinkedIn Insight Tag
  • third-party advertising trackers

Vocafy does not use third-party advertising trackers to follow users across unrelated websites or apps.

10. Service availability, security, and diagnostics

Vocafy may use technical tools, logs, monitoring systems, and diagnostic processes to keep the Service secure, reliable, and available.

These systems may process technical data such as IP addresses, request metadata, browser and device information, error logs, performance data, abuse signals, rate limiting data, and security events.

Current or planned providers may include:

  • Vocafy-operated monitoring and diagnostic systems
  • Hosting, infrastructure, CDN, and security providers listed on this page

11. International processing

Some providers may process data outside your country, including in the European Economic Area, the United States, Canada, or other countries.

Where required, Vocafy uses appropriate safeguards such as contractual protections, data processing terms, standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

The level of data shared with a provider depends on the feature used and the provider’s role. Vocafy aims to share only the data reasonably needed for the relevant service.

12. How providers are selected

Vocafy aims to choose providers that are reliable, reputable, security-conscious, and suitable for a privacy-friendly educational platform.

When selecting or using providers, Vocafy may consider factors such as:

  • security and reliability;
  • data protection safeguards;
  • technical quality;
  • availability and performance;
  • legal and contractual terms;
  • geographic availability;
  • cost and scalability;
  • suitability for language learning, AI, speech, or infrastructure use cases.

Vocafy does not publish detailed internal infrastructure, security, or architecture information on this page.

13. Changes to this page

We may update this page when we add, remove, replace, or change service providers, categories of providers, or related product features.

If a change is important, we may provide notice in a reasonable way, such as through the website, account interface, email, or updated policy date.

Users should review this page from time to time for the latest information.

14. Questions

For privacy-related questions about service providers or sub-processors, contact:

privacy@vocafy.net

 

Last updated: [Month Day, Year]