Privacy Policy
Laatst bijgewerkt: 8 October 2026
This Privacy Policy explains how Vocalio handles information in the iOS app and on vocalio.app. You practice on your device, and while you are signed in your practice texts, progress, practice measurements and settings are backed up to your account, so they come back on a new phone or after reinstalling the app. Camera images and sound are analyzed live on your device and are never recorded or uploaded. Account details, onboarding answers and feedback you submit are stored in our cloud services as well. With your consent, app and website analytics help us improve Vocalio; essential crash diagnostics run in the app.
The short version
- To provide your account: to register you, authenticate sign-ins, maintain your session and document legal acceptance.
- Some information is stored online. Supabase stores account details, the backup of your practice (texts, progress, practice measurements and settings), your onboarding answers, and feedback or word corrections you choose to send.
- Analytics only if you opt in. PostHog analytics in the app and on the website are separate opt-in choices. If you agree to app analytics, exercise events and screen names can be sent with your account identifier. Crash diagnostics are sent to Sentry independently of analytics consent.
- No ads, no AI, no selling data. Vocalio shows no advertising, uses no AI or large-language-model service, and never sells or rents your personal data.
- You're in control. You control iOS permissions and analytics choices, can delete your account in the app, and can ask us to remove your waitlist entry.
Information we collect
Account details. You can sign in with email and password, Apple, or Google. Supabase Auth processes your email address (including an Apple private relay address if you choose one), sign-in credentials and session; Apple or Google may also provide a name or profile details. We store the version and time of your acceptance of the Terms and acknowledgement of this policy, and your app language, so account emails (sign-up confirmation, password-reset codes) reach you in it. Vocalio does not receive your password in readable form.
Waitlist details. If you join the waitlist, we collect your email address and your answers to a few questions: which platforms you'd use Vocalio on, where you heard about us, what you'd most like to improve (you can pick several, and one option is a free-text “something else”), and an optional free-text message. We store this in a private database so we can email you when Vocalio launches and understand who is interested. Sending the form again updates your answers rather than adding a second entry.
Onboarding answers. When you complete onboarding, we store your selected practice language, age, voice and speaking answers, improvement goals, contexts, pronunciation sounds and self-ratings in Supabase, linked to your account. This lets us keep your setup available across sign-ins and devices.
Feedback and word corrections you send. If you submit the in-app feedback form, we store your rating, selected answers, optional message, screen and app/device details, linked to your account. If you suggest a correction to a built-in text, we store the text identifier, original and suggested word, nearby context, optional note and app version, initially linked to your account. These submissions help us improve Vocalio. Please avoid putting sensitive personal information in free-text fields.
Optional product analytics. With your separate consent in the app, PostHog receives screen names and product events, including built-in exercise identifiers, types, counts and durations, and may associate these with your account ID. You can turn app analytics off in Settings. With separate consent through the website cookie banner, PostHog receives website navigation and masked session replays; website form inputs are masked. We do not use analytics for advertising.
Crash diagnostics. The app sends crash, freeze and related technical reports to Sentry so we can find and fix failures. This operates independently of optional analytics consent. The app disables Sentry screenshots, view hierarchy attachments and session replay, and does not intentionally include your voice recordings or practice texts in reports.
Technical data. To keep the form from being abused, our server briefly uses your IP address to limit how often it can be submitted. Your IP is not stored alongside your waitlist entry. Separately, our hosting provider processes the basic technical data needed to serve the site securely (such as your IP address in server logs).
Stored on your device and backed up to your account. The iOS app stores your added texts, reading positions, saved exercises, word corrections, exercise progress and practice statistics, practice measurements (such as your speaking-skill score and mouth calibration), preferences, daily goals and reminder schedules on your device. While you are signed in, it backs them up to your account in Supabase — each item is copied when it changes — so signing in on a new phone or after reinstalling the app brings them back. The backup holds no camera images or audio. Local notifications are scheduled by iOS on each phone. The website stores your language and cookie choices in your browser.
Camera and microphone. With your iOS permission, the app uses the front camera and microphone in real time to provide the mirror, face-position, mouth-movement, pitch and volume feedback. On iPhones that support it, this uses Apple's face tracking (ARKit), which reads facial movement — for example how open your mouth is — as numbers, live, on your iPhone. Vocalio does not save or upload audio recordings, video recordings, camera images or this face data, does not share it with anyone, and does not use it to identify you. Only practice results worked out from it, such as how long you held a mouth shape, are kept as part of your practice history.
Messages you send us. If you email us, we receive your email address and whatever you choose to include.
What we do NOT do
- We never upload camera images, face data, video or audio recordings. Your practice texts, progress, practice measurements and settings are uploaded only as your account's backup, described above, and are used for nothing else: not for analytics, not shared, not sold. Optional analytics can include exercise events.
- We do not send app content or anything you type in the app to an AI service. On the website, form fields are masked out of optional analytics session recordings.
- We do not sell, rent, or trade your personal data.
- We do not show ads and do not use advertising or cross-site tracking cookies.
Why we use your information
- To run the waitlist: to email you about the launch and understand who's interested.
- To keep the site secure: to prevent abuse of the form and protect the service.
- To improve Vocalio: to understand app and website use when you opt in, and to diagnose app crashes.
- To reply to you: to answer your messages and requests.
If you are in the EEA/UK, we rely on performance of our agreement to provide your account and save onboarding answers; your consent for the waitlist and, separately, app and website analytics; our legitimate interests in service security, crash diagnosis and reviewing feedback you submit; and legal obligations where applicable. You can withdraw consent without affecting processing already carried out.
Who we share information with
We share personal data only with the service providers that make Vocalio work, and only as needed:
- Supabase — our authentication and database provider. It processes accounts and stores your account's backup (practice texts, progress, practice measurements and settings), onboarding answers, feedback submissions, word corrections and website waitlist entries. It never receives camera images, face data or voice recordings.
- Vercel — our hosting provider. It serves the website and processes basic technical data (such as IP addresses in server logs).
- PostHog — our EU-hosted analytics provider. It receives app events or website usage only when you opt into the respective analytics setting.
- Sentry — our app crash-diagnostics provider. It receives technical error reports, including through infrastructure outside the EEA, even if you decline optional analytics.
- Resend — our email delivery provider. It sends your account emails (sign-up confirmation and password-reset codes) to your email address, including through infrastructure outside the EEA.
We may also disclose information if required by law or to protect the rights, safety, and security of our users and Vocalio. If Vocalio is ever involved in a merger or acquisition, we will ensure any successor continues to honor this policy.
Where your data is processed
Vocalio is operated from Romania (EU). Your data is processed by the providers above, whose infrastructure may be located in the EU or other countries. Where data leaves the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Keeping and deleting your data
We keep account data, onboarding data and your account's backup while your account is active, subject to limited security or legal retention. You can delete your account in the app or request help at contact@vocalio.app; account deletion removes its backup, linked onboarding answers and feedback submissions, and the app erases its data from that iPhone. Submitted word corrections may remain for content improvement after the account link is removed; contact us if a correction or note contains personal information you want removed. Provider analytics and diagnostic data follow their retention settings and applicable deletion rights. You can request removal of your separate waitlist entry by email. Deleting the app removes its local data on that device; clearing browser storage removes local website choices.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these, contact us using the details below. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data-protection authority (in Romania, the ANSPDCP).
Children
Vocalio's app and waitlist are for adults aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us information, contact us so we can remove it.
Changes to this policy
We may update this policy as Vocalio evolves. We'll change the “last updated” date above and, for material changes, provide an appropriate notice in the app or on the site.
Contact
Questions or requests about your privacy? Email us at contact@vocalio.app.