At VoiceGab, your privacy is fundamental to everything we build. This Privacy Policy explains how VoiceGab ("VoiceGab," "we," "our," or "us") collects, uses, shares, and protects your personal information when you use our mobile application, our website at voicegab.com, and related services (collectively, the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.
1. Information We Collect
We collect only the minimum data necessary to provide our Service.
Information you provide to us:
- Account information: When you create an account, we collect your phone number, display name, and optional profile photo. Your phone number is used for authentication via Firebase Authentication.
- Voice messages: Voice messages you send are encrypted end-to-end using AES-256-GCM before they leave your device. We cannot access the contents of your private voice messages. Encrypted voice files are temporarily stored on our servers for delivery and automatically deleted after successful delivery or after 30 days, whichever comes first.
- Public voice posts: Content you choose to post publicly to the Voice Feed is, by design, visible to other users and is not end-to-end encrypted.
- Support communications: If you contact us, we collect the information you provide (such as your email address and the content of your message) in order to respond.
Information we collect automatically:
- Device information: A Firebase Cloud Messaging (FCM) token to deliver push notifications, plus basic device information (device model, operating system version, app version, language, and time zone) for debugging and compatibility purposes.
- Usage analytics: We use Firebase Analytics and Crashlytics to collect aggregated, pseudonymized usage data such as feature usage frequency, session duration, and crash reports. This data does not include the content of your messages.
- Log data: Our servers automatically record limited technical logs (such as IP address, request timestamps, and error codes) needed to operate, secure, and troubleshoot the Service.
We do not request access to your contacts, location, photos, or files except where a specific feature requires it, and only with your explicit permission through your device's operating system.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the VoiceGab Service
- Create and manage your account and authenticate you
- Deliver your encrypted voice messages to intended recipients
- Operate social features you choose to use, such as the Voice Feed
- Send push notifications about new messages and important Service updates
- Process subscription purchases and manage entitlements (see Section 10)
- Diagnose technical issues, monitor performance, and fix bugs
- Detect, prevent, and respond to fraud, abuse, and security incidents
- Enforce our Terms of Service and comply with legal obligations
We do not sell your personal information, use it for third-party advertising, or build advertising profiles about you.
3. Legal Bases for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Performance of a contract: Processing necessary to provide the Service you signed up for (account management, message delivery, subscriptions)
- Legitimate interests: Securing the Service, preventing abuse, improving features, and understanding aggregate usage — balanced against your rights and interests
- Consent: Where required, such as optional device permissions and certain analytics; you may withdraw consent at any time
- Legal obligation: Where processing is necessary to comply with applicable law
4. How We Share Information
We do not sell, rent, or trade your personal information. We share data only in the following circumstances:
- Service providers: We use Firebase (Google LLC) for authentication, push notifications (FCM), analytics, and crash reporting, and cloud infrastructure providers to temporarily store encrypted voice files for delivery. These providers process data on our behalf under contractual data-protection obligations.
- App stores and payment processors: Subscription purchases are processed by Apple (App Store) or Google (Google Play). We receive transaction confirmations and entitlement status, never your full payment details.
- Other users: Your display name, profile photo, and any content you post publicly are visible to other users as part of the Service's normal operation.
- Legal requirements: We may disclose data if required by law, court order, or valid legal process, or to protect the rights, safety, and security of VoiceGab, our users, or the public. Because private voice messages are end-to-end encrypted, we cannot provide their contents.
- Business transfers: If VoiceGab is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
5. International Data Transfers
Our servers and service providers may be located in countries other than your own, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms, and we require recipients to protect your data to the standard described in this Policy.
6. Data Retention
We retain your data only as long as necessary:
- Account data: Retained while your account is active; deleted within 30 days of an account deletion request
- Encrypted voice messages: Deleted from servers after successful delivery or after 30 days, whichever comes first
- Public voice posts: Retained until you delete them or your account is deleted
- Analytics data: Pseudonymized and retained for up to 14 months
- Server logs: Retained for up to 90 days for security and troubleshooting
- Transaction records: Retained as required by tax and accounting laws
- FCM tokens: Updated automatically; old tokens are discarded
We may retain limited data for longer where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.
7. Security
Security is at the core of VoiceGab's architecture:
- All private voice messages are encrypted with AES-256-GCM before leaving your device
- Your local database is encrypted with SQLCipher (256K PBKDF2 iterations)
- All network communication uses certificate-pinned HTTPS with TLS 1.3
- API requests are signed with HMAC-SHA256 to prevent replay attacks
- No plaintext voice files are ever written to disk
- We never store your passwords — authentication is handled via Firebase
No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Object to or restrict certain processing of your data
- Export your data in a structured, machine-readable format (data portability)
- Withdraw consent at any time, where processing is based on consent
You can delete your account at any time from within the app (Settings → Account → Delete Account) or by contacting us. To exercise any other right, contact us at the address in Section 13; we will respond within the timeframe required by applicable law (generally 30 days). We will not discriminate against you for exercising your rights.
EEA/UK users also have the right to lodge a complaint with their local data protection authority.
California residents: The California Consumer Privacy Act (CCPA/CPRA) gives you the rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as defined by the CCPA, and we do not use sensitive personal information for purposes requiring an opt-out. You may exercise your rights using the contact details in Section 13, including through an authorized agent.
9. Children's Privacy
VoiceGab is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction, which may be up to 16). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us; if we become aware that we have collected data from a child under the age threshold, we will delete it promptly.
10. Subscriptions & Payments
VoiceGab may offer optional paid subscriptions or in-app purchases. All payments are processed by the app store through which you downloaded the app (Apple App Store or Google Play). We never receive or store your credit card number or full payment details — we receive only a transaction confirmation and the information needed to activate your entitlement (such as a purchase token, product identifier, and subscription status). Billing, renewal, and refunds are governed by the applicable app store's terms; see our Terms of Service for details.
11. Our Website & Cookies
Our website (voicegab.com) is a static informational site. It does not set advertising or tracking cookies. It uses strictly necessary local storage only to remember your cookie-banner choice, and loads fonts from Google Fonts, which involves your browser sending standard request data (such as your IP address) to Google. For details, see our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app, by email, or by prominent notice on our website before the changes take effect. The "Last updated" date at the top of this page indicates when this Policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.
If you have questions about this Privacy Policy or our data practices, or wish to exercise your privacy rights, please contact us:
Email: privacy@voicegab.com
Data requests: privacy@voicegab.com with the subject line "Privacy Request"
Response time: Within 72 hours for general inquiries