Privacy Policy

1 Information We Collect

1.1 Anonymous user identifier

When you first open the App, a random identifier (a UUID, e.g. u_3f8a…b2c9) is generated on your device. This identifier is not linked to your name, email, phone number, or any other real-world identity. It exists so we can keep your conversation history, vocabulary, and subscription status associated with you across app launches. You can reset it at any time by clearing the App’s data or reinstalling.

1.2 Voice input

When you speak to the App, the audio is sent to our speech-to-text providers to be transcribed so the AI can respond. We do not store voice recordings on our servers. Audio is processed transiently and discarded immediately after transcription.

1.3 Conversation content (text)

The text of your conversations and the words you save to your vocabulary are stored on our servers, associated only with your anonymous user identifier, so that you can resume past chats and review your vocabulary on a new device. They are sent to our AI providers only to generate replies, translations, and summaries.

1.4 Profile preferences (mostly on your device)

During onboarding you may optionally enter a first name, age, country, native language, gender (Female / Male / Other / Prefer not to say) and a self-assessed English level. The first name and your exact age are kept only on your device and are never sent to our servers. Country, age range (bucket), gender, native language, and self-assessed level are sent once as anonymous registration analytics — see section 1.6.

1.5 Subscription & usage

If you start a subscription, our payments partner (RevenueCat, working with the Apple App Store / Google Play) processes the transaction and provides us with your subscription status (active / expired) and plan tier and billing period (e.g. Standard / Yearly). We never receive or store your payment-card details. We also keep an anonymous per-day usage counter (e.g. “180 seconds of conversation today”) so we can enforce the free-tier daily limit.

1.6 Anonymous registration analytics

To understand who our learners are and improve the App, we collect a single anonymous record at the moment you complete onboarding. This is processed and stored on our own servers — no third-party analytics tool is involved (no Google Analytics, no Firebase, no Mixpanel, no Amplitude, no advertising SDK).

The full record contains the following fields and nothing else:

This record is idempotent: re-opening the App or re-completing onboarding with the same anonymous user ID does not create a duplicate entry. The dashboard built on top of this data only ever shows aggregates and counts (e.g. “342 users in Germany, 56% female”). Individual records are not displayed.

We do NOT collect:

• Your real name, email address, or phone number
• Your IP address (only logged transiently for abuse prevention, never written to long-term storage tied to your user ID)
• Your exact location, GPS, or city-level precision
• Your advertising identifier (IDFA / GAID)
• Any device fingerprint, contacts, calendar, photos, or browsing history

You can request deletion of your anonymous registration record at any time by emailing support@velivox.app. Because the identifier is random and is not displayed in the App, please include the approximate install date, your country, and your interface language so we can locate the record.

1.7 Technical & diagnostic data

Basic technical data — device type, OS version, App version, and anonymous error logs that you choose to share with support via the in-App debug screen — may be processed to keep the App stable and secure.

2 How We Use Your Information

• To transcribe your speech and generate real-time conversational replies
• To translate words you tap and build your saved vocabulary
• To remember your conversation history so you can resume past chats
• To enforce the free-tier daily limit and welcome bonus
• To process and validate subscriptions
• To produce aggregated, anonymous statistics (e.g. “weekly registrations by country”) so we can prioritise features for the most-served regions
• To deliver, maintain, secure, and improve the App
• To respond to support requests you send us

We do not use your information for advertising and we do not sell or share it with data brokers.

3 Third-Party Service Providers

To deliver core functionality we share the minimum necessary data with the following processors. None of them are advertising or analytics companies.

These providers act as data processors under their own data-processing agreements and are not permitted to use your data for their own purposes or for training of foundation models, where their terms allow that distinction.

We do not use any third-party analytics or advertising services. All product analytics is processed in-house on our own servers, as described in section 1.6.

4 Data Retention

• Voice audio — discarded immediately after transcription. Never written to disk.
• Conversation history & vocabulary — retained for the lifetime of your anonymous user ID, so you can resume chats. Deleted on request or when you clear the App and we receive no further activity for 12 months.
• Anonymous registration record — retained indefinitely for aggregate statistics, unless you request deletion.
• Daily usage counters — kept for 90 days, then automatically rotated.
• Subscription records — retained as required for accounting and legal compliance.

5 Your Rights (GDPR & CCPA)

Depending on where you live, you may have the right to access, correct, or delete your personal data, to object to or restrict processing, and to data portability. We do not sell or share your personal information for advertising or for any other purpose.

To make a request, contact us at support@velivox.app. Because the anonymous identifier is random and is not displayed in the App, please include the approximate install date, your country, and your interface language so we can locate your record. Because most data lives on your device, clearing the App’s data in system settings or uninstalling the App also removes it locally.

6 Children’s Privacy

Velivox is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

7 Data Security

We use reasonable administrative and technical safeguards, including encrypted transport (HTTPS / TLS 1.2+), encryption at rest on our server file system, and strict access control on internal admin endpoints (token-protected, IP-restricted), to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8 International Transfers

Our providers may process data in countries other than yours, including the United States. Where required by applicable law, appropriate safeguards (such as Standard Contractual Clauses) are used for such transfers.

9 Changes to This Policy

We may update this Policy from time to time. Material changes (for example, adding a new data category, a new processor, or a new purpose) will be reflected by updating the “Effective Date” at the top of this page. Continued use of the App after changes constitutes acceptance of the updated Policy.