Your data
Last updated 23 September 2026. Written to be read, not to be skipped.
Strokecovery is a speech practice app for people living with aphasia after a stroke. It is run by Gireesh S, an individual based in Chennai, Tamil Nadu, India.
Under India's Digital Personal Data Protection Act, 2023, that makes us the Data Fiduciary for the information described here — the ones responsible for it, and the ones you can hold to account.
You can reach us at admin@strokecovery.com for any question about your data, including deletion.
Strokecovery uses Google to sign you in. From Google we receive your email address and a unique account identifier. We never see or store your Google password.
After your first sign-in we ask a few questions, so practice can be set at the right level. These are optional, and you can change or clear them at any time on your profile page:
The stroke details are health information. We treat them with more care than the rest: they are never sent to any AI service, never used for advertising, and never shared with anyone.
For each word you attempt, we store:
This history is the app. Without it, every session would start from nothing and the words would never get harder.
This deserves its own section, because it is the question people ask first.
When you speak a word, your device records a few seconds of audio and sends it to our server. The server passes it straight to OpenAI to be scored, receives the result, and discards the audio. It is held in memory for the seconds the scoring takes. It is never written to a database, never written to a file, and never backed up. There is nowhere in our system where a recording of your voice exists.
OpenAI receives the audio to score it. Under their API terms, audio sent this way is not used to train their models. See OpenAI's privacy policy.
While we are diagnosing microphone problems, we can turn on a testing mode that saves a technical log of a recording — how loud the room was, when the sound started and stopped, what the recogniser wrote. These logs contain numbers and text, never audio. Testing mode is off unless we have asked you directly and you have agreed.
Two things in Strokecovery use artificial intelligence, both provided by OpenAI:
The word chooser is sent no information about who you are. Not your name, not your email, not your age, not your stroke details. This is not a promise we ask you to take on trust: there is an automated test in our codebase that checks it on every change, and the release fails if it is ever broken.
We are a small operation and we use established companies to run the parts we should not build ourselves. Each one sees only what it needs:
We do not sell your data. We do not share it with advertisers, data brokers, insurers or employers. We do not share it for anyone else's marketing.
We would only hand over data if the law required it of us — a valid court order or a lawful demand from an authority — and we would tell you unless we were forbidden to.
These companies run servers outside India, including in the United States and Europe. By using Strokecovery you accept that your information is processed outside India. We only use providers that publish their security and privacy commitments.
Under the DPDP Act we rely on your consent, given when you create an account and when you choose to answer the profile questions. We ask for nothing that the app does not actually use.
You may withdraw consent at any time by deleting your account. That is as easy to do as it was to agree.
We keep your account and practice history for as long as your account exists. We do not delete it after a quiet spell, deliberately: recovery after a stroke is not steady, and someone who stops for six months should find their progress waiting when they come back.
When you ask us to delete your account, we delete your profile and your entire practice history within 30 days. Backups are overwritten within a further 30 days.
Recordings, as described above, are never kept at all.
Under the DPDP Act, you may:
To do any of these, email admin@strokecovery.com. We answer within 30 days. There is no charge.
If a carer or family member writes on behalf of a user, we will ask for the user's confirmation where we reasonably can. This protects the user, and we would rather be slow than careless.
Strokecovery is for people aged 18 and over. We do not knowingly collect data about anyone under 18. If you believe a child has created an account, write to us and we will delete it.
We use one cookie, and it does one job: it keeps you signed in. It is a secure, same-site cookie that JavaScript cannot read.
We use no advertising cookies and no third-party trackers. If that changes — for example if we start measuring which adverts bring people to the site — we will update this page and say so clearly before it takes effect.
The site and the app are served over HTTPS. Passwords are never held by us, because sign-in is handled by Google. Access to the database is restricted to the application and to the person who runs it. Secrets are held in the hosting provider's secure store, never in our code.
We are honest about scale: this is a small project, not a hospital system. We apply sensible protections and we do not claim more than that. If a breach ever affects your data, we will tell you and the Data Protection Board, as the law requires.
If we change how we handle your data, we will update this page and change the date at the top. For anything significant, we will email you before it takes effect.
Questions, requests, or complaints about your data:
admin@strokecovery.com
If you are not satisfied with how we have dealt with your complaint, you may raise it with the Data Protection Board of India.
See also our Terms of Use.