Privacy Policy

How LëtzPass collects, uses, and protects your data.

Last updated: June 17, 2026

1. Introduction

LëtzPass is operated by UnchartedEdge LLC, a U.S. limited liability company registered in the State of Wyoming, with its registered office at 30 N Gould St, Ste N, Sheridan, WY 82801, United States (EIN 37-2179798). This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR). It applies to all users of the LëtzPass web application and is effective as of March 30, 2026.

2. Data Controller

The Data Controller is UnchartedEdge LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States (EIN 37-2179798). For any GDPR-related request, contact contact@letzpass.com.

3. What We Collect

  • Email address (provided at registration or via Google Sign-In)
  • Display name (via Google Sign-In, if available)
  • Authentication provider used (Google, email/password, or guest)
  • Practice session recordings (audio)
  • Practice scores and session history
  • Stripe transaction references (we never store card numbers)
  • Cookie consent preference
  • Behavioural usage signals on the website, with your consent (page/screen views, the referring page or URL that brought you to a page, your browser and device user-agent string, the approximate country derived from your IP address at request time (we do not store the full IP address, only the derived country), time on screen, interaction and request timing, the platform you use (web or app), and the first-touch source that brought you to us, for example a UTM campaign tag or the referring site, used only to understand how people find LëtzPass and never combined with advertising profiles)
  • Email address (and your optional marketing opt-in) when you submit a blog download form to receive a free guide

4. How We Use Your Data

When you record an answer, the audio is processed by our own whisper-svc speech-recognition service running on Google Cloud Run in europe-west1 (Belgium), then sent to OpenAI for scoring and feedback. Audio is not retained after the transcript is returned, and it is never stored on our servers. Google Cloud is named as a sub-processor in our processing record. Your scores and progress history are retained so you can track your improvement over time. We do not sell or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing

Under Article 6 of the GDPR, we process your data on the following legal bases:

  • Contract performance (Art. 6(1)(b)): account creation, audio processing and scoring, payment processing, and delivering the practice service you signed up for.
  • Consent (Art. 6(1)(a)) covers first-party behavioural analytics on the website and any occasional product emails you opt in to when downloading a free guide. You can withdraw any of these at any time via Settings > Cookie preferences or the unsubscribe link in any email.
  • Legitimate interest (Art. 6(1)(f)): essential session cookies required for authentication and security, and first-party, account-linked operational and product-measurement events that we record server-side to operate the service, prevent fraud and abuse, and measure how the product is used. These events are tied to your account or client identifier rather than being purely aggregated, and they remain subject to the same access and erasure rights as the rest of your data.

6. Audio Recordings

Audio recordings are processed in real-time during your practice session. Once your response has been transcribed and scored, the audio file is deleted immediately. We never store, replay, or share your audio recordings: no audio data is retained on our servers or with any third-party service after processing.

7. Third-Party Services

We use the following third-party services to operate LëtzPass. Each processes data according to their own privacy policy:

  • Firebase : authentication and data storage (Firestore data stored in the EU multi-region eur3)
  • OpenAI : automated scoring and feedback
  • Google Cloud Run (europe-west1), which hosts our whisper-svc speech-recognition service; audio is not retained after the transcript is returned
  • Stripe : payment processing

8. Payment Processing

All payment processing is handled by Stripe. We never receive, store, or have access to your credit card numbers or bank details. We only store a Stripe transaction reference to associate your payment with your account. For details on how Stripe handles your payment data, see Stripe’s Privacy Policy.

9. Cookies

iOS app context. Within the LëtzPass iOS app, no analytics, advertising, or third-party tracking cookies are set, and the cookie consent banner is not shown. Only an essential authentication session cookie is used during sign-in. The items below describe cookie use on the public website at letzpass.com.

  • Essential cookies: An authentication session cookie is required for the service to function. This cookie cannot be disabled.
  • Analytics (web only): First-party behavioural analytics is active on the website and loads only after you accept the cookie consent banner. You can change your preference at any time via Cookie preferences, and it is never set inside the iOS app. See “Behavioural analytics” below for what we collect.
  • No advertising cookies: We do not use any advertising or third-party tracking cookies.

9a. Behavioural Analytics

Behavioural analytics (web, consent-gated). On the website, with your consent, we collect first-party, privacy-light usage signals to understand how the product is used and where it is confusing: page and screen views, the referring page, your browser and device user-agent, the approximate country derived from your IP at request time (we do not store the full IP address), the time spent on a screen, interaction and request timing, the platform you use (web or app), the first-touch source that brought you to us, and anonymous consent and conversion counts. This is processed on our own infrastructure, not sold or shared for advertising, and is not collected inside the iOS app.

10. Data Retention

  • Audio recordings: processed and deleted immediately after scoring.
  • Account data: retained while your account is active.
  • Practice history: kept while your account is active and deleted when you delete your account (you can do that at any time).

11. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Export your data in a portable format (data portability)
  • Withdraw consent at any time (where processing is based on consent)
  • Object to processing of your data
  • Restrict processing in certain circumstances
  • Lodge a complaint with the CNPD (Commission Nationale pour la Protection des Données), Luxembourg’s data protection authority

To exercise any of these rights, contact contact@letzpass.com. We will respond to your request within 30 days, as required by GDPR Article 12. You can also export or delete your data directly from Settings > Your Data.

12. International Transfers

UnchartedEdge LLC is established in the United States. Some of our third-party service providers (OpenAI and Stripe) also process data in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives an adequate level of protection outside the European Economic Area. Application servers and our whisper-svc speech-recognition service run on Google Cloud Run in the EU region europe-west1 (Belgium), and Firebase / Firestore data is stored in the EU multi-region eur3. Google Cloud is named as a sub-processor in our processing record.

13. Contact

UnchartedEdge LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States
contact@letzpass.com