Privacy Policy

VoxBridge ("VoxBridge", "we", "us", or "our") operates the VoxBridge mobile application (bundle ID io.voxbridge.app) and the website at voxbridge.app (together, the "Service"). The Service is provided by Azad A. Kozludere, an individual, based in the United Kingdom, acting as data controller. For any privacy question or request, contact privacy@voxbridge.app (general support: support@voxbridge.app).

Plain-language summary

• VoxBridge translates speech in real time. Audio you choose to translate is sent to our speech-to-text and translation providers, used to produce a transcript and translation, and then discarded — we do not keep your translation audio.
• Voice cloning is optional. Only if you choose to create a voice clone, a short recording of your voice is sent to ElevenLabs, which creates and stores a voice model so the app can speak translations in your voice. You can delete your voice clone at any time, and deleting your account deletes it too.
• You can delete your account and data from inside the app (Settings → Delete account).
• We do not sell your personal data and do not use it for advertising.
• We use a small set of trusted providers (listed below). Some are located outside your country, including in the United States.

1. Information we collect

• Account information. Your email address and an authentication identifier. You can sign in with email, Sign in with Apple, or Google Sign-In, or use the app as a guest (an anonymous identifier instead of an email).
• Audio you submit for translation. Microphone audio streamed to our speech-to-text providers to produce a transcript, which is then translated. This audio is processed transiently and is not stored by VoxBridge after the session.
• Voice clone recordings (optional). If you create a voice clone, the sample you record (typically 20–60 seconds) is sent to ElevenLabs, which creates a stored voice model. We store the resulting voice identifier and the name you give it. See Section 5.
• Generated content. Transcripts and translations, and any meeting/room summaries you create.
• Conference audio and video. If you join a video room, your camera and microphone streams are sent peer-to-peer using encrypted WebRTC; when a direct connection is not possible, the encrypted media is relayed through a TURN server (Cloudflare). We do not record or store conference media. We store room membership and signaling metadata needed to connect participants.
• Subscription state. Whether you have an active subscription, via RevenueCat and the Apple App Store. We do not receive or store payment card details.
• Diagnostics and usage data. Crash reports and diagnostics (e.g. device model, OS version, app version, IP address) and product-analytics events. Approximate location may be inferred from your IP address; we do not collect precise GPS location.

2. How we use your information and legal bases (GDPR)

• Provide speech-to-text, translation, and text-to-speech — performance of a contract.
• Create and use a voice clone (only if you opt in) — your consent (Art. 6(1)(a)); see Section 5.
• Operate accounts, rooms, summaries, and restore purchases — performance of a contract.
• Maintain reliability, security, and prevent abuse — legitimate interests.
• Product analytics to improve the Service — legitimate interests, or consent where required.
• Comply with legal obligations — legal obligation.

You can withdraw consent (for example, by deleting your voice clone) at any time without affecting processing carried out before withdrawal.

3. Microphone and camera permissions

Microphone is used to capture audio for translation, for conferences, and to record a voice clone if you choose to create one. Camera is used only for video conferences. These permissions are requested in context and can be revoked at any time in your device settings; some features will not work without them.

4. Your voice and voice cloning

Voice cloning is an optional, opt-in feature. Before any voice sample is captured, we ask you to confirm that (1) the voice is your own (or you have the speaker's explicit permission), (2) you are of legal age, and (3) you accept ElevenLabs' applicable terms.

When you create a clone, your recording is transmitted to ElevenLabs, which generates and stores a voice model on its platform. VoxBridge stores only the resulting voice identifier and its display name. The model is used solely to synthesize translated speech in your voice within the app.

A voice recording can be considered sensitive personal data, so we process it only with your explicit consent, and you stay in control:

• Delete your voice clone any time in Settings → My voice → Delete. This removes the model from ElevenLabs and clears the reference from your profile.
• Deleting your account also deletes any voice clone you created.
• Voices you simply pick from the in-app Voice Library are standard, pre-existing voices and involve no recording or biometric data.

ElevenLabs processes this data as our sub-processor under its own terms: elevenlabs.io/privacy · elevenlabs.io/terms-of-use.

5. How we share information

We share personal data only with the sub-processors that operate the Service (Section 6), when required by law, to protect rights or user safety, or with your consent. We do not sell personal data and do not share it with advertising networks.

6. Sub-processors and third-party services

• Supabase — backend (auth, database, storage, realtime, edge functions). Account data, transcripts/summaries, room and subscription metadata. (US/EU)
• OpenAI — translation and Whisper speech-to-text. Translation audio and text. (US)
• Deepgram — speech-to-text. Translation audio. (US)
• ElevenLabs — text-to-speech and opt-in voice cloning. Voice samples and synthesis text. (US)
• Cloudflare — TURN relay for conference calls; site/CDN. Encrypted media relay; network metadata. (Global)
• RevenueCat — subscription management. Subscription status and purchase identifiers. (US)
• Apple — App Store purchases; Sign in with Apple. Purchase and account identifiers. (US/Global)
• Google — Google Sign-In (and on-device speech on some Android devices). Authentication identifiers. (US/Global)
• Sentry — crash reporting and diagnostics. Device info, IP address, crash data. (US)
• PostHog — product analytics. Usage events, device info. (US/EU)

Each provider processes data under its own privacy policy and our agreements with them.

7. International data transfers

Several providers are located in the United States and other countries outside the EEA and the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or an adequacy decision where one applies.

8. Data retention and deletion

• Translation audio: not retained after the session.
• Conference audio/video: not recorded or stored.
• Account data, transcripts, summaries, voice-clone reference: retained while your account is active.
• Voice clone model (at ElevenLabs): retained until you delete the clone or your account.
• Diagnostics/analytics: retained for a limited period, then deleted or aggregated.

Delete your account in-app: Settings → Delete account. This permanently deletes your VoxBridge account and associated data, and deletes any voice clone you created from ElevenLabs. You can also request deletion by emailing privacy@voxbridge.app.

9. Your privacy rights

Subject to applicable law (including the GDPR and UK GDPR), you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time (e.g. delete your voice clone); and
• lodge a complaint with your local data protection supervisory authority.

To exercise these rights, use the in-app controls (Settings → Delete account / My voice → Delete) or email privacy@voxbridge.app. We respond within the timeframe required by applicable law.

10. Children's privacy

The Service is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your country — 16 in parts of the EEA) to use VoxBridge, and of legal age to create a voice clone. We do not knowingly collect data from children below these ages; contact privacy@voxbridge.app and we will delete it.

11. Security

We use appropriate technical and organizational measures, including encryption in transit (TLS, and DTLS-SRTP for conference media) and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the effective date above and, where appropriate, through an in-app notice. Continued use after an update constitutes acceptance of the revised policy.