Privacy

1. Who is responsible

Voicemo is published by Lab 37, Entrepreneur individuel, operated by William BRISA, registered in France under SIREN 988 777 744. For the purposes of Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679, the GDPR), that entity is the data controller.

• ·Address. 87 Rte de Marcieux, 73470 Novalaise, France
• ·Contact. help@voicemo.app

There is no statutory requirement for a data protection officer here, and none has been appointed. One address takes a question about the product and a request under Section 10 alike, and a person answers both.

2. What this policy covers

The Voicemo app, this site, and the share page a recording is played on. Three surfaces, one policy, because they are one service.

3. What we collect

If you have an account. You sign in with Apple, and authentication runs through Clerk, which holds the credential. We never see a password. From it we store an account identifier, which is what joins you to your recordings, and your email address and display name when Apple passes them on. Apple’s Hide My Email can withhold the address and Apple only ever sends a name once, so both are optional and the app works without either. We also store how long new recordings live, and how many recordings you have made and for how long in total, for the stats on the account screen.

If you subscribe to Pro, RevenueCat keeps the record of the subscription, against your account identifier: the product, the store, and the purchase history behind them. We keep a copy of what it says: until when Pro runs, whether it renews, and whether you are in the free days. Apple takes the payment and never tells either of us your card.

What you record. For each recording, until it expires: the audio file, its title, its length, the language it was recorded in, 48 numbers describing the shape of the waveform, its transcript, and the unguessable link and short code it is served under. On every plan the transcript is the rough one your device wrote while you talked, and any key points you write yourself are stored with it. On plans with server transcription it is replaced by Deepgram’s, and a summary and key points are stored beside it. The share page shows the transcript, and the summary and key points where there are any, to whoever opens the link. A recording is whatever you said into it, so it is your personal data and it may contain somebody else’s. Section 7 of the terms is about that.

While you are talking, your device’s own speech recognition produces a rough live transcript so the app can name the recording straight away. On iOS that is Apple’s speech framework, and what Apple does with it is governed by Apple’s privacy policy, not this one. On plans with server transcription, the finished audio file is sent to Deepgram, which writes the authoritative transcript, and that text is sent to Google’s Gemini model to produce the title, the summary and the key points. Nothing you record is used to train any model, ours or anybody else’s.

If you open a share link, nothing is asked of you and nothing is kept about you. No account, no cookie banner, no sign-up wall. The page is rendered on our server and hands your browser a link to one audio file that stops working after an hour. Open tracking, where a sender on a paid plan is told their recording was played, records a country and a hashed description of the browser. Not an IP address, and nothing that identifies you.

If you type a code instead, the form at /listen takes the sender’s address and the code from the mail. We use the pair to find the recording and for nothing else. It is behind a Cloudflare Turnstile challenge, because a form that resolves private recordings and takes unlimited guesses is a form that gets guessed at.

If you ask to be told when it ships, the form on the home page stores your address and the time you gave it. Nothing else: no IP address, no browser, no referrer.

If you report a problem from the share page or /listen, we store what you wrote, the page you were on, and the time. Nothing else: no IP address, no browser, no account. Anything personal in it is there because you typed it.

If you browse this site and agree to measurement, Vercel Web Analytics records which page was viewed, the page or search that sent you to it, and coarse technical facts: a country, an operating system, a browser, whether you are on a phone. To count one visit once rather than every page of it, Vercel derives a hash from your IP address and browser that it rotates daily and cannot reverse; the address itself is never stored. There is no identifier left in your browser, nothing follows you to another site, and none of it is joined to your account or to anything you recorded. Decline and none of it is collected at all. Section 5 says how that choice is made and unmade.

4. Why, and on what legal basis

Each purpose below carries its basis under Article 6(1) of the GDPR.

• ·Running your account and serving your recordings. Performance of a contract, Article 6(1)(b).
• ·Transcribing and summarising what you recorded, on a plan that includes it. Performance of a contract, Article 6(1)(b).
• ·Telling you when the app ships. Your consent, Article 6(1)(a), which you can withdraw at any time.
• ·Counting page views on this site. Your consent, Article 6(1)(a), which you can withdraw at any time. Nothing is counted before you give it.
• ·The challenge on the public forms, and the limits on how often they can be tried. Our legitimate interest in not having the service abused, Article 6(1)(f).
• ·Reading problem reports and fixing what they describe. Our legitimate interest in a service that works, Article 6(1)(f).
• ·Answering you when you write in. Performance of a contract, Article 6(1)(b), or legitimate interest, Article 6(1)(f), when you have no account.
• ·Keeping records the law requires us to keep. Legal obligation, Article 6(1)(c).

5. Cookies and browser storage

This site sets no cookie of its own, and there is no advertising and no cross-site tracking anywhere on it.

Audience measurement is the one thing that has to ask. Vercel Web Analytics counts page views, described in Section 3, so we can see which parts of the site are read. It runs on your consent under Article 6(1)(a) of the GDPR and Article 82 of the French Data Protection Act, which is what the banner at the foot of the page is for, and it does not run until you have given it. Refusing means the script is never loaded, not that it loads and discards what it sees. Either answer is one press, and Cookies at the foot of any page brings the question back so you can change it.

The share page and /listen are outside all of this. Somebody who was sent a link is neither counted nor asked: the banner does not appear there and the measurement does not run there.

Everything else this site and the app keep in your own storage is strictly necessary, needs no consent, and is listed here so the list is complete.

• ·Your answer to the measurement question is stored in your own browser and never sent anywhere. Clearing your site data forgets it, and you are asked again.
• ·Your light or dark preference is stored in your own browser and never sent anywhere.
• ·Cloudflare Turnstile sets its own short-lived state on the two pages that carry a form, to tell a person from a script.
• ·In the app, your session is held in the device keychain by Clerk, and recordings waiting to upload sit in the app’s own storage until they land. Your list of recordings, their transcripts and the date your Pro runs until are copied there too, so the app works without a network, and RevenueCat’s SDK keeps its own copy of your subscription status.

6. Who processes it for us

Each of these is a processor under Article 28. Each does one job, under contract, and none of them may use your data for anything else. We do not sell personal data, and we never have.

• ·Clerk, for sign-in and account identity.
• ·Convex, for the database and the server functions.
• ·Cloudflare, for audio storage in R2 and for the Turnstile challenge.
• ·Deepgram, for transcription, on plans that include it.
• ·Google, for the title, summary and key points, through the paid tier of the Gemini API, on plans that include them.
• ·RevenueCat, for the state of a Pro subscription bought through the App Store.
• ·Vercel, for serving this site, and for the audience measurement in Section 5 once you have agreed to it. Like any web host it processes the IP address of a request to deliver the page and to block abuse. We do not store it.
• ·Apple, for sign-in, for on-device speech recognition, and for any purchase made through the App Store. Apple acts as its own controller for those, not as our processor, and it does not tell us your payment details.

7. Where it is held, and transfers

Recordings are stored in the European Union. The audio is in Cloudflare R2 on its European jurisdiction, and the database that holds your account, titles, transcripts and summaries runs in Ireland, with this site’s server functions beside it in Dublin.

Some processing happens in the United States. On plans that include it, the audio goes to Deepgram for transcription and the text to Google’s Gemini, and both process it there. Clerk, Convex, Deepgram, Google, RevenueCat and Vercel are United States companies, so personal data is either processed there or accessible from there, even where it is stored in the EU. Those transfers run on the standard contractual clauses adopted by the European Commission in Decision 2021/914, under Chapter V of the GDPR. If you would rather not have a recording leave your device at all, do not record it: there is no version of this service where the audio stays on the phone and the link still works.

8. How long we keep it

• ·A recording, its audio, its transcript, its summary and its key points are deleted outright when it expires. Thirty days on the free plan, up to a year on Pro. A hard delete, not an archive and not a flag.
• ·Deleting a recording in the app deletes it the same way, immediately.
• ·Deleting your account takes the account, every recording under it and the subscription record RevenueCat holds for it. It does not cancel an App Store subscription: that belongs to Apple, and is cancelled in your Apple account settings.
• ·A waitlist address is kept until the app ships, or until you ask for it to go.
• ·A problem report is kept until it has been read and dealt with, then deleted.
• ·Invoices for a paid plan are held by Apple, and French accounting law requires them to be kept for ten years.

9. Security

The transcription and storage credentials live in the server environment and are never in the app you installed. A share link is twelve random characters, never a sequential id, and the audio is served through a signed URL that expires within the hour. That is a real bar and it is not an absolute one: no transmission over the internet can be guaranteed against interception, and Section 8 of the terms says what a link is and is not.

10. Your rights under the GDPR

Wherever you live, and in particular if you are in the European Economic Area or the United Kingdom, you have the right to:

• ·Ask for a copy of what we hold about you. Article 15.
• ·Have inaccurate data corrected. Article 16.
• ·Have your data deleted. Article 17.
• ·Have processing restricted. Article 18.
• ·Receive your data in a structured, commonly used, machine-readable format, and have it sent elsewhere. Article 20.
• ·Object to processing based on our legitimate interest. Article 21.
• ·Withdraw a consent you have given, without affecting what was done while it stood. Article 7(3).
• ·Leave instructions about what happens to your data after your death, under Article 85 of the French Data Protection Act.

Erasure is self-serve: deleting a recording, or your account, in the app does it immediately and completely. For anything else, write to help@voicemo.app. We answer within one month, as Article 12(3) requires. If the answer does not satisfy you, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés, the CNIL, at cnil.fr, or with the supervisory authority where you live.

11. Age

Voicemo is not for under 16s, and no account is knowingly opened for one. If you believe a child has an account, write to help@voicemo.app and it will be removed.

12. Changes

When this changes, the date at the top changes with it. A change that affects what we do with something you already recorded is sent to the address on your account before it takes effect.

13. Related

The other half of the agreement is the terms of use, and the publisher’s details are in the mentions légales.