Privacy Policy

Effective 19 October 2026

1. Who we are

Recite (recite.online) is a free tool for memorizing and rehearsing text by speaking it aloud. It is run by Kriyanshi Shah, an individual based in India (“we”, “us”). We are responsible for the personal data described in this policy (the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023, and the “controller” under the GDPR / UK GDPR).

Questions or requests: use our contact form and mention “Privacy”. We aim to reply within 30 days.

2. What we collect, and what we don't

Text you practice and what you say: not collected

The passage you paste or pick, your live transcript and your results exist only in your browser's memory while the page is open. They are not sent to us, not saved on your device, and are gone when you reload or close the page.

Your voice: handled by your browser, not by us

Speech recognition uses the Web Speech API built into your browser. Depending on your browser, the audio may be processed on your device or sent by your browser to its provider's speech service (for example, Google for Chrome, Apple for Safari) to be turned into text. That processing is between you and your browser provider and is covered by their privacy policies. Recite only sees the resulting text, inside your browser, and never records or stores audio. We ask for microphone access only when you start reciting.

Usage analytics (PostHog), only if you allow it

Analytics is off by default. On your first visit we ask whether you're 18 or older and happy to share anonymous usage data. Nothing is collected and no analytics cookie is set unless you choose “I'm 18+, allow”. If you do, we collect:

• Pages viewed, buttons clicked, and events such as starting or finishing a recitation, choosing an example passage, mic permission granted or denied, and error types.
• Numbers about a recitation: accuracy score, number of words spoken, passage length in words, duration, speaking pace, number of long pauses, whether you used Read along or a target time, and the speech language selected. For Daily Recite: the puzzle number, track, score, streak, and whether you shared your grid. For games: which game, your score and level, whether you shared it (and how: image, X, copy or download), and whether you created, opened or won a challenge. Never the words themselves, and never the name you put on a challenge.
• Technical details: browser and device type, screen size, referring website, and approximate location (country/city) estimated from your IP address.
• A random anonymous ID stored in a cookie and your browser's local storage, so visits from the same browser can be grouped.
• Before you choose, PostHog's script still loads from its servers (so they see a normal web request with your IP address), but it sends no analytics events.

No session recording

We don't use session replay or screen recording, so we never see a recording of your visit.

Challenge links

When you challenge a friend, the link contains the game round, your score and, if you typed one, a name. That information sits after the# in the link, so it isn't sent to our servers when your friend opens it. Anyone you share the link with can see it.

Share images

Score cards for sharing are drawn in your browser. They are never uploaded to us; they only go where you choose to share or save them.

Forms you choose to fill in (Tally)

• Waitlist: your email address, used only to tell you when new features (such as Chill mode) launch.
• Feedback / contact form: whatever you write, and an email address if you give one, used to read and reply to your message.

Server logs (Vercel)

Our host automatically logs requests (IP address, browser user agent, time, page requested) to keep the site running and secure.

Fonts (Google Fonts)

Your browser downloads the site's fonts from Google, which receives your IP address and browser details when it does.

Stored on your device

• recite_speech_lang: the speech language you picked.
• recite_mic_intro_seen: whether you've seen the microphone explanation.
• recite_read_along and recite_target_seconds: your practice mode and optional target time.
• recite_games_v1 and recite_play_name: your game scores, XP, level, badges, and the optional name you put on challenge links. These stay in your browser.
• recite_daily_v1 and recite_daily_track: your Daily Recite results (scores and color grids, never the words you said), streaks and chosen track. These stay in your browser.
• recite_analytics_choice: whether you allowed or declined analytics, so we don't ask again.
• PostHog's anonymous ID cookie and local-storage entry (names start with ph_), only if you allow analytics.

3. Why we use it

• To run the site and keep it secure (server logs).
• To understand how Recite is used and improve it (analytics).
• To answer you and send launch updates you asked for (forms).

Analytics is based on your consent, which you give only by confirming you're 18+ and choosing to allow it, and which you can withdraw at any time with the switch below. Forms are based on your consent when you submit them. Server logs rely on our legitimate interest in keeping the site running and secure (GDPR / UK GDPR) and are necessary to provide the service. This applies equally under India's DPDP Act.

4. Your analytics choice

This applies to this browser. Recite works exactly the same whether analytics is on or off.

Loading your analytics settings…

Blocking cookies or using a tracker blocker also stops analytics.

5. Who we share it with

We don't sell personal data, and we don't share it for advertising. We use these service providers, who process data on our behalf:

We may also disclose information if the law requires it.

6. International transfers

We are based in India and our providers store data in the United States and the European Union, so your data may be processed outside your country. Where the GDPR or UK GDPR applies, these transfers rely on the providers' data processing terms, including the European Commission's Standard Contractual Clauses where needed.

7. How long we keep it

• Text you practice, transcripts and audio: not kept by us at all.
• Analytics events: up to 12 months.
• Waitlist emails: until we send the launch update or you ask us to remove you.
• Feedback messages: up to 24 months, or sooner if you ask.
• Server logs: the short period set by our host.

8. Your rights

Wherever you live, you can ask us to access, correct or delete personal data we hold about you, and you can turn analytics off at any time.

• India (DPDP Act): you can request a summary of your data and how it's processed, correction or erasure, withdraw consent, use our grievance process, and nominate someone to act for you. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
• EU / UK (GDPR): you also have rights to restrict or object to processing and to data portability, and you can complain to your local data protection authority.
• United States: depending on your state, you can request to know, correct or delete your data. We do not sell or share personal data for cross-context behavioral advertising.

To make a request, use the contact form. Analytics data is anonymous, so include your anonymous ID from section 4 (and an email address so we can reply). We won't treat you differently for using your rights.

9. Grievances

For any privacy concern or complaint, contact Kriyanshi Shah through the contact form. We will acknowledge it and aim to resolve it within 30 days.

10. Children

We don't track anyone under 18. Analytics only turns on for visitors who confirm they are 18 or older, so if you're under 18 please choose “No thanks”; you can use every part of Recite without it. Please don't submit the waitlist or feedback forms if you're under 18 without a parent or guardian's permission. If you believe someone under 18 has sent us personal data, contact us and we'll delete it.

11. Security

The site is served only over HTTPS, and we keep data collection to a minimum: the most sensitive part, what you practice and say, never reaches us. No system is perfectly secure, but we choose established providers and limit who can access analytics.

12. Changes

If we change this policy we'll update the date at the top. If we start collecting something new in a significant way, we'll say so on the site.