LawSpeak Privacy Policy
Effective October 8, 2026 · Version 2026-10-08-us-1
1. Who we are and how to contact us
LawSpeak is operated by AI Servise LLP, Business Identification Number (BIN) 260340008494, Aksay-4 microdistrict, Building 123, Apartment 49, Almaty, Kazakhstan ("LawSpeak," "we," "us"). This policy covers our Apple application, website, account services, and optional remote processing and storage.
Privacy requests: privacy@lawspeak.online. Support: support@lawspeak.online. Security reports: security@lawspeak.online. You may also write to the postal address above. Do not send an unredacted contract, identity document, password, or payment-card number in an ordinary support email.
2. Important choices
Text recognition runs on your device. Remote document processing requires a separate cloud-processing choice; accepting the Terms of Use, signing in, or buying a subscription is not consent to send a document for analysis. Account functions and requests to the legal library can contact our servers independently of document-analysis consent.
The current remote analysis service returns demonstration results rather than live third-party AI analysis. When you request remote analysis, your text still reaches our servers. The reading library contains selected legal materials with coverage and edition limitations; it is separate from the analysis service.
Saving on your device and uploading a saved copy are separate choices. Selecting a destination does not mean a connection or upload has succeeded. Saving new documents to LawSpeak cloud storage is currently unavailable. iCloud and Google Drive connections are also unavailable.
The Terms of Use require review by an independent lawyer licensed in the relevant jurisdiction before you use documents reviewed or drafted with LawSpeak or its suggested wording. The service supplies automated informational assistance; responsibility for use and the applicable legal limits are addressed in those Terms. This does not waive your privacy rights.
3. Information handled by the service
| Category | Examples and source | Why it is used |
|---|---|---|
| Documents and questions | Images and files you select; recognized or corrected text; questions; results, summaries, quotations, and values you enter in drafts | Recognize text, explain the supplied wording, create drafts, and save or export what you choose |
| Analysis context | Page numbers and recognition confidence, document language, interface language, chosen country/state, request identifier, consent version | Process the request, attach evidence, honor the processing choice, and prevent duplicate work |
| Legal-library requests | Search words, chosen state/category, requested section, and pagination | Retrieve and display the selected reading materials; searches use request URLs and can be visible to hosting/access-log systems |
| Account and sign-in records | Technical account and provider identifiers, sign-in challenges, session records and token hashes; provider authorization material; email address when an email feature is available | Authenticate, maintain and secure your account, link methods you authorize, and handle deletion and revocation |
| Purchase information | Subscription product and transaction identifiers, purchase proofs, period, trial/offer status, refund/revocation status, and price/currency when supplied | Verify access, restore eligible purchases, and prevent incorrect purchase attribution |
| Connection and operational information | IP address, request identifiers, request timing/status, security counters, and page/character/finding counts | Deliver the website/API, restrict abuse, troubleshoot failures, and operate the service |
| Support correspondence | Contact details and the content you send us | Answer your request, resolve complaints, and investigate reported problems |
Documents, questions, and generated results may themselves contain names, addresses, financial or employment information, health information, information about children, or other sensitive information about you or another person. We do not need passwords, full payment credentials, Social Security numbers, or medical records to explain ordinary contract wording. Remove unnecessary information before any remote submission. A document may remain identifying after obvious names are removed.
The app does not request your contacts or precise device location. Your selected jurisdiction and any address in submitted content are different from GPS location. Camera access is for pages you choose to capture. System pickers provide the files or photographs you select, rather than general access to your entire library. LawSpeak does not receive Face ID or Touch ID biometric templates from the operating system.
4. Local processing and storage
The app uses Apple Vision to recognize text on your device. Remote analysis currently sends text and analysis context, but not original page images. If we introduce image uploads, we will explain what will be sent, identify the recipient, and request your permission before transmission.
Temporary page images are held during the document flow and scheduled for cleanup when the flow finishes, fails, is cancelled, or the app next starts. Saved history and drafts remain until you delete them. You can choose to be asked before saving, save delivered results automatically, or never save results.
Saved analysis details are encrypted using AES-GCM with a key held in the device Keychain. Some information shown in history lists, including summaries, and values entered in template drafts are not protected by this additional encryption. The operating system also provides file protection. These measures do not mean that LawSpeak encrypts every saved field or exported copy.
The app configures its database and temporary document files for exclusion from device backup and uses a device-bound analysis key. We do not promise that every system backup or exported copy is excluded, or that app removal destroys every Keychain item. Losing a key can make a saved analysis unreadable. Keep an export of anything you need; exported files are readable and controlled by the destination you choose.
5. Remote processing, recipients, and optional AI
When you authorize remote analysis, reviewed text, any question, and the context listed above reach the LawSpeak backend over HTTPS. The response can include document-derived quotations and personal information. Signing in additionally transmits the proof required by your selected identity provider.
Recipients, according to the feature you use, include:
- Infrastructure providers: hosting and network services that operate the LawSpeak website and backend, including Contabo for the existing backend. Support email services also handle the correspondence you send. These systems can handle connection and operational records. Hosting infrastructure also handles the submitted text, results, and account records needed to operate the selected feature on our behalf.
- Apple and Google: identity verification when you choose their sign-in methods; Apple also processes App Store purchases. LawSpeak does not receive your full payment-card details from App Store checkout. Google sign-in does not authorize access to Google Drive.
- Your selected export destination: another app or file service receives the copy you explicitly export or share.
Email sign-in is currently unavailable. If we enable it, we will disclose the email-delivery provider and explain what information it receives before you use that method.
Live AI is not enabled in the current service. The planned Gemini integration would send document text, questions, and analysis context to Google. Before it is enabled, we will provide a notice naming the active provider, its handling of content, and the applicable retention terms, and obtain separate permission. Google distinguishes paid and unpaid API processing. Its unpaid-service terms allow product improvement and human review and prohibit sensitive, confidential, or personal submissions. This policy does not promise provider zero retention or no training. See Google's API terms. Changing a provider requires an updated disclosure. A provider that is not active does not receive your content through that feature.
We do not currently use advertising or cross-service behavioral profiling in LawSpeak. We do not sell your documents or license them to advertisers. Operational disclosure to a provider is still a disclosure and must satisfy applicable law and provider agreements. We do not use submitted documents to train our own general-purpose model. No permission for unrelated model training is granted merely by accepting the Terms.
We may disclose information when required by valid legal process or applicable law, or when reasonably necessary to investigate abuse or protect rights and security. A business reorganization involving personal information must preserve applicable restrictions and provide notice or obtain permission when required. These provisions do not authorize unrelated reuse of confidential content.
6. Retention and deletion
Retention depends on the category and feature. We do not promise that all information disappears as soon as a result is returned.
- Local results and drafts: kept until you delete them. Device-deletion controls remove the relevant app records and temporary files; deleting all local app data also removes the local analysis key. Other apps, other devices, and exported copies are outside that action.
- Analysis retry cache: responses and a request fingerprint are held in server memory for repeat-request handling. The default reuse window is ten minutes. Expired entries are removed on subsequent cache cleanup or process termination, so the window is not a guaranteed ten-minute erasure deadline. The cache is separate from account-owned storage; account deletion does not necessarily identify or remove an anonymous analysis cache entry.
- Accounts and optional server documents: account records exist while the account is maintained; successfully saved server copies remain until resource or account deletion. Pending storage uploads have a fifteen-minute expiry. Logical expiry and physical erasure are different.
- Account deletion safeguards: after deletion, minimal technical deletion and purchase-binding markers can remain to prevent replay or reassignment of an old purchase. The implemented lifecycle policy provides a 180-day period when configured. Some unresolved Apple authorization-revocation jobs retain minimal technical markers until operator reconciliation; that exception does not retain the deleted document or profile. Temporary encrypted revocation material is subject to a twenty-four-hour application limit and cleanup.
- Email codes, if enabled: valid for ten minutes; related delivery and challenge records can remain for up to twenty-four hours after expiry under the implemented cleanup policy.
Operational logs, support correspondence, provider records, and backups are handled for the purposes described in this policy and under applicable law and provider arrangements. A backup-restoration process must honor prior deletion requests.
To delete your account, open Settings → Account → Delete account and complete the identity confirmation. The server deletion removes owned server documents and associated account information subject to the safeguards above. Local documents stay unless you select the additional device-deletion option or use the separate device controls. A reported failure or unknown result is not confirmation of deletion. Contact us if you cannot access the control.
Deleting an account, deleting the app, or signing out does not cancel an App Store subscription. Manage that subscription separately. To withdraw permission for future remote analysis, open Settings → Privacy and turn off Cloud processing. This prevents future submissions through that feature; it does not recall earlier transmissions or automatically delete existing copies. We cannot guarantee forensic overwrite of storage media.
7. Security and international handling
We use HTTPS, device Keychain protection, access controls, and account verification appropriate to the implemented features. Server-stored document content is not end-to-end encrypted by the current upload implementation; LawSpeak's server can process it. Do not infer universal encryption at rest or an independent security certification from these measures. No system is risk-free. We will handle security incidents and provide notifications required by applicable law.
The operator is in Kazakhstan. Hosting, identity, email, payment, and any separately authorized AI provider can process information in the United States or other countries. US legal content does not establish US-only storage. International processing does not remove rights that apply to you.
8. Your privacy requests and US state rights
You can review saved local information and correct text before submitting it. Open Settings → Documents & storage to change history-saving preferences or select Export my data. To delete local records, select Delete all local data, review the listed deletion scope, acknowledge that deletion is permanent, and select Delete local data. To withdraw permission for future remote analysis, turn off Cloud processing in Settings → Privacy. For information controlled by LawSpeak, contact privacy@lawspeak.online to request access, correction, a portable copy, or deletion. State your request and the account/contact information needed to locate it; do not include a contract or identity document unless we securely request something necessary.
Depending on your residence and whether a law applies to LawSpeak, you may also have rights to opt out of sale, targeted advertising, or certain significant-decision profiling, limit certain sensitive-information uses, act through an authorized agent, or appeal a denied request. If California privacy law applies to your information, your rights may include access, deletion, correction, sale/sharing opt-out, sensitive-information limits, and protection against unlawful discrimination. These rights are subject to lawful exceptions; this notice does not require you to waive them or assert that every threshold-based state statute applies to every customer.
We may verify identity in a proportionate way before releasing, correcting, or deleting information. We will respond within applicable legal deadlines, explain a lawful denial, and provide any required appeal process. To seek reconsideration, write to the same address with the subject "Privacy appeal." You may contact your state regulator independently; contacting us first is not a condition on a statutory remedy. We do not charge a privacy-request fee unless applicable law permits it.
9. Tracking choices and third-party links
The current LawSpeak app and website do not include advertising or third-party analytics. Necessary app preferences, login credentials, and server security records still exist. Browser and hosting services can handle connection information. Opening an external legal-source link or a provider page subjects that visit to that site's practices.
The current LawSpeak service does not respond differently to browser Do Not Track or Global Privacy Control signals. It does not currently provide behavioral advertising or a sale/sharing opt-out control. This does not waive an obligation to recognize an opt-out signal where applicable law requires it. Any applicable signal obligation must be met before a regulated sale/sharing or advertising feature is introduced.
10. Adults, sensitive matters, and changes
LawSpeak is intended for adults aged eighteen or older and is not directed to children. An age statement alone is not technical age verification. If we learn that we have collected personal information from a child in circumstances requiring parental authorization, we will address the collection and deletion under applicable law. Contact privacy@lawspeak.online about such a concern.
LawSpeak is not a medical-record service or a HIPAA business-associate offering. Sensitive health information within an ordinary document may still trigger state protections; this policy does not declare health data exempt. Do not upload medical records or information unnecessary for the task.
We will identify the effective date and make a revised policy available when practices change. Material new disclosures or uses will receive notice and separate permission where required before they begin. Merely posting a revised policy does not authorize retroactive unrelated use of your information.