Oratoo Speak
私隱政策
- 不用登記也可以使用。錄音只存在你的裝置，不會上傳。
- 用 Google 登入是可選的，只用來在不同裝置同步你的設定及練習紀錄。
- 我們不賣資料、不放廣告、不追蹤你在其他網站的活動。
- 你可以隨時在「我的」刪除帳戶及雲端資料。
1. 我們是誰
Oratoo Speak（oratoospeak.com）是一個口說練習網站，由香港的 Will Tsang 營運。查詢私隱事宜，請電郵 [email protected]。
2. 只存在你裝置上的資料
以下資料存在你瀏覽器的本機儲存空間，不會傳送到我們的伺服器：
- 設定：年齡階段、程度、每日練習時間、語言、你填寫的稱呼及目標；如有填寫，亦包括目標學校名稱及面試日期。
- 練習紀錄：哪一天做了哪個練習、說了多久、你的自評分數。
- 錄音：保存在瀏覽器的 IndexedDB。每個練習步驟保留第一段錄音作進步比較，其餘錄音保留 60 日後自動刪除。
「轉成文字」功能在你的裝置上運行：語音模型由 Hugging Face 及 jsDelivr 下載到你的瀏覽器，錄音本身不會離開裝置。清除瀏覽器資料或在「我的」按「清除紀錄」，以上資料會一併刪除。
3. 用 Google 登入（可選）
如果你選擇用 Google 登入，我們會透過 Google 的 Firebase Authentication 收到你的 Google 帳戶識別碼、名稱、電郵地址及頭像連結。登入後，第 2 節的設定及練習紀錄會同步到我們在 Google Cloud Firestore 的資料庫（伺服器位於香港），讓你在另一部裝置登入時取回。
錄音不會同步，也不會上傳。我們只用這些資料來讓你登入及同步紀錄，不會用來發送推廣訊息，也不會與第三方分享，下面第 5 節列出的服務供應商除外。每位用戶只可以讀取自己的資料。
4. 使用 Google 帳戶資料的承諾
Oratoo Speak 使用及傳送從 Google API 取得的資料，會遵守 Google API Services User Data Policy，包括其中的 Limited Use 要求。我們只要求最基本的權限（名稱、電郵地址、頭像），不會讀取你的 Gmail、雲端硬碟、通訊錄或其他 Google 資料。
5. 服務供應商及第三方內容
- Cloudflare：網站寄存。伺服器會按一般網站運作收到你的 IP 位址及瀏覽器資料。
- Google Firebase（Authentication、Cloud Firestore）：只在你選擇登入時使用，資料庫位於香港。
- YouTube：演講片段以 youtube-nocookie.com 嵌入，按下播放後才連接 YouTube；縮圖由 YouTube 載入。YouTube 按其私隱政策處理相關資料。
- Google Fonts、jsDelivr、Hugging Face：提供字型、程式庫及語音模型的下載。
你電郵給我們時，例如登記搶先試用 Oratoo Speak Plus，我們只會用你的電郵地址回覆你及通知開售消息，不會用作其他用途；你可以隨時要求刪除。
我們不使用廣告或追蹤 cookie，也沒有加入第三方分析工具。
6. 保存期及刪除
雲端資料會保存到你刪除帳戶為止。你可以：
- 在練習室「我的」→「私隱及資料」按「刪除帳戶」，即時刪除雲端上的設定、練習紀錄及登入資料；
- 電郵 [email protected] 要求刪除，我們會在 30 日內處理；
- 在 Google 帳戶的第三方存取設定 撤銷 Oratoo Speak 的登入權限。
7. 兒童
Oratoo Speak 適合小學生、中學生及成人使用。登入不是必須的；13 歲以下的兒童應在家長陪同下使用，如需同步紀錄，建議由家長用自己的 Google 帳戶登入。我們不會刻意向兒童收集額外資料，網站亦沒有廣告。
8. 你的權利
根據香港《個人資料（私隱）條例》（第 486 章），你有權查閱及更正我們持有關於你的個人資料。請電郵 [email protected]，我們會在 40 日內回覆。
9. 政策更新
如果我們改變處理資料的方法，例如推出 AI 評語或付費方案，會先更新這一頁及「最後更新」日期。重大改動會在練習室內通知。
Oratoo Speak
Privacy Policy
- You can use Oratoo Speak without an account. Recordings stay on your device and are never uploaded.
- Signing in with Google is optional and is only used to sync your settings and practice records across devices.
- We do not sell data, show ads, or track you on other websites.
- You can delete your account and cloud data at any time in the app.
1. Who we are
Oratoo Speak (oratoospeak.com) is a speaking-practice website operated by Will Tsang in Hong Kong. Contact: [email protected].
2. Data that stays on your device
Your settings (age group, level, daily time, language, the display name and goals you enter, and, if you enter them, your target school and interview date), practice records (which exercise you did, when, for how long, and your self-ratings) and recordings are stored in your browser's local storage and IndexedDB. They are not sent to our servers. For each practice step we keep your first recording for progress comparison; other recordings are deleted automatically after 60 days. Speech-to-text runs on your device: the speech model is downloaded from Hugging Face and jsDelivr, and your audio never leaves the device.
3. Signing in with Google (optional)
If you choose to sign in with Google, we receive your Google account ID, name, email address and profile picture URL through Google Firebase Authentication. Your settings and practice records (not recordings) are then synced to our Google Cloud Firestore database located in Hong Kong so that you can restore them on another device. We use this data only to sign you in and sync your records. We do not use it for marketing and do not share it with third parties other than the service providers listed below. Each user can access only their own data.
4. Google user data
Oratoo Speak's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only basic profile scopes (name, email address and profile picture) and do not access your Gmail, Drive, contacts or other Google data.
5. Service providers and third-party content
- Cloudflare: website hosting; receives your IP address and browser information as part of normal web traffic.
- Google Firebase (Authentication, Cloud Firestore): used only if you sign in; database in Hong Kong.
- YouTube: speech clips are embedded from youtube-nocookie.com and connect to YouTube only when you press play; thumbnails load from YouTube.
- Google Fonts, jsDelivr and Hugging Face: fonts, code libraries and the speech model.
If you email us, for example to sign up for early access to Oratoo Speak Plus, we use your email address only to reply and to tell you when Plus goes on sale. You can ask us to delete it at any time.
We do not use advertising or tracking cookies and do not use third-party analytics.
6. Retention and deletion
Cloud data is kept until you delete your account. You can delete your account, cloud settings, practice records and sign-in data at any time in the app under 我的 (Me) → 私隱及資料 (Privacy and data) → 刪除帳戶 (Delete account); email [email protected] and we will delete it within 30 days; or revoke access in your Google Account settings.
7. Children
Oratoo Speak is designed for primary and secondary students and adults. Signing in is not required. Children under 13 should use the service with a parent; if syncing is needed, we recommend that the parent signs in with their own Google account. We do not knowingly collect additional data from children, and there are no ads.
8. Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) you may request access to and correction of your personal data by emailing [email protected]. We will respond within 40 days.
9. Changes
If we change how we handle data, for example when we launch AI feedback or paid plans, we will update this page and the date above first, and notify you in the app for significant changes.