Legal
Privacy Policy
Last updated: May 23, 2026
Plain language summary: We collect your email, name, voice recordings, and learning activity to run the app. We do not sell your data. We do not use it for advertising. Voice recordings are processed only for your pronunciation scores and your personal AI voice clone — they are not used to train AI models without your consent. You can delete your account and all associated data at any time from within the app.
1. Who We Are
Voicely Language is operated by Mervine Gowry (“we,” “us,” or “our”). This Privacy Policy applies to the Voicely Language iOS app and the website at voicelylanguage.app. Questions or requests regarding this policy should be directed to privacy@voicelylanguage.app.
2. Information We Collect
We collect the following categories of data:
Account data
Email address and first name, collected at registration via email/password or Sign in with Apple.
Voice recordings
Audio recordings made during voice clone setup and pronunciation practice sessions. See Section 6 for full details on how voice data is handled.
Learning activity data
Session history, CEFR levels, Fluency Points ring scores, vocabulary progress, session logs, and practice results. This data is what powers your personalised training and compound memory.
Device and technical data
Device type, operating system version, app version, crash reports, and interaction events. Collected automatically to maintain app reliability.
Purchase and subscription data
Your subscription tier, trial status, and purchase history, managed through RevenueCat and the Apple App Store. We never receive or store your payment card details.
3. Cookies and Tracking Technologies
The Voicely Language website (voicelylanguage.app) uses the following technologies to understand how the site is used and to improve it:
- Session cookies — temporary cookies that expire when you close your browser, used to maintain your logged-in state.
- Analytics cookies (PostHog) — persistent cookies used to measure page views, feature adoption, and conversion funnels. PostHog operates in EU Cloud mode. No personally identifiable information is sent in analytics events.
- Performance cookies — used to measure load times and detect errors (Sentry).
The iOS app does not use browser cookies. It uses secure local storage (iOS Keychain and UserDefaults) for session persistence and app preferences.
You can opt out of analytics tracking at any time by contacting us at privacy@voicelylanguage.app or by using your browser's cookie settings to block third-party cookies from posthog.com. Opting out does not affect your ability to use the app or website.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Account creation and login | Contract performance (Art. 6(1)(b)) |
| Delivering your training sessions | Contract performance (Art. 6(1)(b)) |
| Voice clone creation | Explicit consent (Art. 6(1)(a) + Art. 9(2)(a)) — obtained before any voice recording |
| Pronunciation assessment | Contract performance (Art. 6(1)(b)) |
| Analytics and product improvement | Legitimate interests (Art. 6(1)(f)) — improving app quality for all users |
| Error monitoring and crash reporting | Legitimate interests (Art. 6(1)(f)) — maintaining a reliable service |
| Email communications (critical account alerts) | Contract performance (Art. 6(1)(b)) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
5. How We Use Your Information
- Personalise your daily training sessions using your current CEFR level, FP ring scores, and learning history.
- Generate your AI voice clone through ElevenLabs so HEXI, your coach, speaks in your voice.
- Score your pronunciation at the phoneme level using Azure Cognitive Services.
- Transcribe your speech during live conversation mode using Deepgram.
- Power HEXI's compound memory — your session context persists across training sessions.
- Process your subscription and manage access to Pro and Premium features via RevenueCat.
- Detect and fix bugs through Sentry error monitoring.
- Understand feature adoption and user flows through PostHog analytics (no PII in analytics events).
- Send critical account notifications (e.g., account deletion confirmation).
We do not use your data for advertising, profiling for third parties, or AI model training outside the scope of your personal voice clone.
6. Voice Data and AI Voice Clone
Voice data is the most sensitive data we collect. Here is a precise account of how it is handled:
Voice clone creation
A 30-second recording is captured in-app and sent to ElevenLabs to generate a personalised text-to-speech voice. This voice is used exclusively within your Voicely account so that HEXI speaks in your voice. ElevenLabs does not use your voice to train public models. Your voice clone is tied to your account and is not shared with other users or third parties.
Pronunciation assessment
Practice recordings are sent to Azure Cognitive Services (eastus region) for phoneme-level pronunciation scoring. Azure processes these recordings in real time and returns a score. Recordings are not retained by Azure beyond the assessment response — they are not stored in Azure's systems.
Conversation transcription
During live conversation mode, your speech is transcribed in real time by Deepgram. Transcriptions are used only to enable the conversation session. Deepgram does not use your data to train their models under our agreement.
Consent and deletion
We obtain your explicit consent before any voice recording is made. You may delete your voice clone at any time from You → Voice Clone → Delete. Deleting your voice clone removes it from ElevenLabs within 24 hours. Deleting your account removes all voice data within 30 days.
What we do not do
- We do not share your voice with other users.
- We do not use your voice recordings to train general-purpose AI models.
- We do not sell or license your voice to third parties.
- We do not extract your voice clone for use outside the app.
7. Data Sharing
We share data only with the following service providers, and only to the extent necessary to deliver the app. We have data processing agreements in place with each provider.
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, and storage | Account data, learning activity, session logs |
| ElevenLabs | Voice clone generation and TTS | Voice recordings (30-second clone sample) |
| Azure Cognitive Services | Pronunciation assessment and TTS reference audio | Practice audio recordings (not retained) |
| Deepgram | Speech-to-text transcription | Live conversation audio (not retained) |
| OpenAI | HEXI AI layer and conversation intelligence | Session context and text (not audio) |
| RevenueCat | In-app purchase management | User ID, subscription status |
| Apple App Store | Payment processing for subscriptions | Handled by Apple — we receive no card data |
| PostHog | Product analytics | Anonymised event data (no PII) |
| Sentry | Error monitoring and crash reporting | Device info, stack traces, anonymised user ID |
| Trigger.dev | Background job processing | Session data for compound intelligence jobs |
| Resend | Transactional email | Email address (account notifications only) |
We do not sell your personal data. We do not share your data with advertisers, data brokers, or any third party for commercial purposes.
8. Data Retention
We retain different categories of data for different periods based on their purpose:
| Data category | Retention period | Reason |
|---|---|---|
| Account data (email, name) | Duration of account + 30 days after deletion | Required to operate the service |
| Learning session data | Duration of account + 30 days after deletion | Powers compound memory and CEFR progress |
| Voice clone | Until you delete it, or 30 days after account deletion | Personalises your coaching experience |
| Pronunciation recordings | Not retained — processed in real time only | Azure does not store recordings |
| Conversation transcripts | Not retained — used only during live sessions | Deepgram does not store transcripts |
| Analytics events (PostHog) | 12 months rolling | Product improvement; anonymised after 12 months |
| Error logs (Sentry) | 90 days | Bug investigation; auto-deleted by Sentry |
| Purchase records | As required by Apple and applicable tax law | Legal and financial compliance |
When you delete your account, we initiate deletion of all associated data within 30 days. Some data (e.g., aggregated analytics, anonymised session counts) may be retained in non-identifiable form for longer periods.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — delete your account and all associated data directly in-app (You → Settings → Delete Account). Your request will be actioned within 30 days.
- Right to data portability — request your data in a structured, machine-readable format.
- Right to restriction — request that we restrict processing while a dispute is resolved.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — withdraw consent for voice data processing at any time without affecting prior lawful processing.
- Right to lodge a complaint — you may lodge a complaint with your local data protection supervisory authority.
To exercise any right other than account deletion (which is self-serve in-app), contact us at privacy@voicelylanguage.app. We will respond within 30 days.
10. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, disclose, and sell.
- Right to delete personal information we have collected from you.
- Right to opt-out of the sale or sharing of personal information. We do not sell or share personal information.
- Right to correct inaccurate personal information.
- Right to limit use of sensitive personal information (including voice recordings).
- Right to non-discrimination for exercising your CCPA rights.
To exercise your California rights, contact us at privacy@voicelylanguage.app with “CCPA Request” in the subject line. We will respond within 45 days.
Do Not Sell or Share My Personal Information: We do not sell or share personal information as defined under CCPA/CPRA. No opt-out action is required.
11. International Data Transfers
Your data may be processed in the United States and European Union by our service providers. Supabase operates in both regions. ElevenLabs, Deepgram, OpenAI, and Sentry are US-based. Azure Cognitive Services processes data in the eastus region.
Where data transfers occur from the EEA or UK to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) as the appropriate transfer mechanism.
12. Children's Privacy
Voicely Language is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered, contact us at privacy@voicelylanguage.app and we will delete the account immediately.
13. Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption in transit: all data transmitted between the app and our servers uses TLS 1.2+.
- Encrypted at rest: Supabase database is encrypted at rest using AES-256.
- Row-level security: database access is governed by Supabase RLS policies.
- Role-based access controls: only authorised personnel can access production systems.
- Error monitoring: Sentry alerts us to security-relevant anomalies in real time.
No system is 100% secure. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.
14. Third-Party Links
The app and website may contain links to third-party websites or services (e.g., research articles, App Store). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date and, where required by law, by direct notification. Continued use after changes constitutes acceptance of the updated policy.
16. Contact and Supervisory Authority
For privacy questions, data requests, or complaints:
privacy@voicelylanguage.app
If you are in the EEA and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France, ICO in the UK, AEPD in Spain).