Last updated: April 2026
SPEEM ("we", "our", "the app") is an iOS study-habit and exam-prep app built with privacy as a default. This policy explains exactly what data the app handles, where it goes, and what it is used for. By using SPEEM or this website, you agree to the practices described below.
Data controller: SPEEM is operated by Wassim Ansari, based in France. You can reach us at contact@speem.app for any privacy-related question or request.
Everything listed above syncs to your iCloud account via Apple's CloudKit, so your progress appears on any Apple device signed in with the same Apple ID. Your iCloud data is hosted by Apple, protected by your Apple ID security, and is not accessible to us except in the narrow case described below.
A UserProfile record scoped to your iCloud account identifier contains your first name, display name, education level, and Apple's internal user ID. This record lets SPEEM recognize you when you reinstall the app so your progress restores without re-onboarding. It is not indexed, not discoverable by other users, and not used for any social feature.
speem-api.speem.workers.dev)We never sell your data. We never share it with data brokers. We use no third-party analytics SDK inside the app. We perform no automated decision-making or profiling that produces legal or similarly significant effects on you.
Under EU GDPR Article 6 and UK GDPR, we rely on the following lawful bases:
Our backend is hosted on Cloudflare Workers, which operates globally on edge servers. When available, requests are served from European data centers. Anthropic's Claude API operates from the United States. Apple iCloud and StoreKit operate globally, governed by Apple's own terms.
Where personal data is transferred outside the European Economic Area or the UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and each processor's own supplementary safeguards. Cloudflare and Anthropic each publish their SCCs and Data Processing Addenda publicly.
If you are located in the EU, the UK, Switzerland, or another jurisdiction with equivalent laws, you have the right to:
Use Settings → Account → Delete Account in the app for immediate erasure, or email contact@speem.app for any other request. We respond within 30 days.
If you are a California resident, you have the right to:
To submit a verifiable consumer request, email contact@speem.app. We will verify your identity using the email and Apple account associated with your SPEEM installation before disclosing or deleting data.
If you are a data subject under Saudi Arabia's Personal Data Protection Law, you have the rights to be informed, to access, to request correction, to request destruction, and to withdraw consent. Contact us at contact@speem.app to exercise these rights. We treat cross-border transfers of Saudi personal data in line with PDPL requirements and the Saudi Data and AI Authority's executive regulations.
SPEEM is designed for students ages 11 and up (middle-school level and above). If you are under 13 (or under the digital-consent age applicable in your jurisdiction, 16 in some EU member states), you must have a parent or guardian's permission before using SPEEM, and a parent or guardian should complete the initial setup.
In line with the US Children's Online Privacy Protection Act (COPPA), we collect no more information from children than is necessary to operate the app (first name + education level), never share children's data with third parties for advertising, and provide parents with a way to review, delete, or stop further collection of their child's data.
Parents and guardians: to review, export, or delete data associated with your child's use of SPEEM, email contact@speem.app. We respond within 14 days and will verify your parental relationship before taking action.
App data stays on your device and in your iCloud for as long as you keep SPEEM installed and signed into iCloud. Analytics counters on our backend are retained for at most 365 days and then automatically deleted. Deleted account records are permanently removed within 30 days.
All network traffic uses HTTPS (TLS 1.2+). We do not store passwords, authentication is handled by Apple via your device and iCloud. Our backend follows industry-standard practices for access control, secret management, and least-privilege credentials. Cloudflare and Anthropic each maintain independent SOC 2 / ISO 27001 certifications.
If a personal data breach affects you, we will notify you without undue delay and within 72 hours of becoming aware where feasible, by email (if available) and by an in-app notice on next launch, and we will notify the relevant supervisory authority (for EU users, the CNIL; for UK users, the ICO; for Saudi users, SDAIA) as required by law.
Our website uses cookies. The SPEEM app does not. See our Cookie Policy for full details.
We update this page and the "Last updated" date whenever the policy changes materially. For substantive changes we also announce it in the app's release notes and, where legally required, by email or an in-app notice. Continued use after a change means you accept the revised policy.
contact@speem.app, we read every message. French, English, and Arabic are all fine. Written mail: SPEEM, Wassim Ansari, France (full address provided on request).