At TransVoice, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice training application. The data controller within the meaning of data protection laws is Kailar UG (haftungsbeschränkt), Viererblock 18a, 39326 Wolmirstedt, Germany.
Personal Information
When you create an account, we may collect:
- Name and email address
- Profile information you choose to provide
- Payment information (if you purchase supporter or premium features) - processed securely by our payment provider, Stripe; we never receive or store your full payment card details
Voice Data
To provide our voice training services, we may collect:
- Voice recordings during exercises (stored locally by default)
- Voice analysis metrics (pitch, resonance, etc.)
- Practice session data and progress information
Usage Data
We automatically collect certain information when you use the Service, including device information, IP address, browser type, pages visited, and time spent on the app.
We process your personal data on the following legal bases under Article 6 GDPR:
- Contract Performance (Art. 6(1)(b) GDPR): For providing our services and managing your account
- Consent (Art. 6(1)(a) GDPR): For processing voice recordings in the cloud, analytics cookies, and marketing communications. You may withdraw your consent at any time.
- Legitimate Interests (Art. 6(1)(f) GDPR): For improving our services, fraud prevention, and IT security
- Legal Obligation (Art. 6(1)(c) GDPR): For retention of billing data as required by tax regulations
We use the information we collect to:
- Provide, maintain, and improve our services
- Personalize your voice training experience
- Track your progress and provide feedback
- Process transactions and send related information
- Send you updates, security alerts, and support messages
- Respond to your comments, questions, and requests
- Analyze usage patterns to improve the Service
- Protect against fraud and unauthorized access
We understand the sensitive nature of voice data. By default, your voice recordings are processed locally on your device and are not uploaded to our servers. If you enable cloud backup or certain advanced features, your recordings are stored in encrypted form. When you actively use the AI dialogue feature, your spoken input is first transcribed temporarily by our self-operated speech-to-text service (Whisper) on EU-based infrastructure. The transcription service does not retain the audio permanently. The resulting text is then sent to the IONOS AI Model Hub operated by IONOS SE in Germany to generate a response. No US-based AI provider is configured as a fallback for this dialogue feature. You can delete your voice data at any time from your account settings. We do not sell or share your voice recordings for advertising purposes.
We do not sell your personal information. We may share your information with the following categories of recipients:
- Service Providers: With trusted third parties who assist us in operating our Service
- Legal Requirements: If required by law or in response to valid legal requests
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly agree to share information
Recipients and service providers
Depending on the features you use, the following recipients and service providers may process personal data:
- Google LLC (authentication via Google Sign-In, if selected by you) - USA
- Apple Inc. (authentication via Apple Sign-In, if selected by you) - USA
- Hetzner Online GmbH (hosting and infrastructure) - Germany (EU)
- DigitalOcean LLC (cloud storage for audio files when cloud storage is enabled) - EU region Frankfurt
- IONOS SE (AI-powered dialogue and practice-phrase generation via the IONOS AI Model Hub when you use the relevant feature) - Germany (EU)
- Self-hosted speech-to-text (Whisper) operated by Kailar UG on EU-based infrastructure - voice audio is transcribed transiently and is not retained by the service
- Stripe Payments Europe, Ltd. (payment processing, if you purchase a paid feature) - Ireland (EU); processing by affiliated Stripe entities outside the EEA cannot be excluded
- Resend Inc. (email delivery, in particular for verification and transactional messages) - USA
- Self-hosted Umami web analytics operated by Kailar UG on Hetzner infrastructure in Germany (EU) - anonymized usage statistics only, no cookies, no cross-site tracking; legal basis: legitimate interest (Art. 6(1)(f) GDPR)
Our core application infrastructure is located within the European Union. Where personal data is transferred to recipients outside the European Economic Area, the transfer may take place only on the basis of an applicable adequacy decision or other appropriate safeguards. The basis applicable to a specific recipient depends on that recipient's current status and the agreements concluded for the relevant service. You may request a copy of, or further information about, the applicable safeguards at lea@transvoiceapp.com. Possible bases include:
- EU-US Data Privacy Framework for certified US companies
- Standard Contractual Clauses (SCCs) approved by the EU Commission
- Adequacy decisions by the EU Commission
As a data subject, you have the following rights:
- Right of Access (Art. 15 GDPR): You can request confirmation of whether we process your data and obtain information about this data
- Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data
- Right to Erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention requirements apply
- Right to Restriction (Art. 18 GDPR): You can request restriction of processing under certain circumstances
- Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured, machine-readable format
- Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests
- Withdrawal of Consent: You can withdraw any given consent at any time with effect for the future
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority for us is the State Commissioner for Data Protection Saxony-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany.
To exercise your rights, contact us at lea@transvoiceapp.com
We retain your data only as long as necessary for the respective purposes:
- Account data: Until deletion of your account, then maximum 30 days for technical cleanup
- Voice recordings: According to your settings, deletable at any time via the app
- Usage logs: 90 days, then anonymized for statistical purposes
- Payment data (if applicable): 10 years as required by commercial and tax law retention requirements
- Support requests: 3 years after case closure
We do not use fully automated decision-making within the meaning of Art. 22 GDPR. The AI features used in our app for voice analysis serve solely to provide feedback and do not make decisions that have legal or similarly significant effects on you.
We use risk-based technical and organizational measures to protect your personal data. Data is transmitted over TLS/HTTPS. Audio objects stored in DigitalOcean Spaces are encrypted server-side using AES-256. For other data stores, we use measures including access restrictions, separate service accounts, backups, and defined deletion processes; we do not represent that every local database is encrypted with AES-256.
TransVoice is not intended for children under 16 years of age (in Germany). We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete that information promptly.
We may update this Privacy Policy from time to time. For material changes, we will notify you by email or through a prominent notice in the app. The current version is always available on this page with the date of the last update.
If you have any questions about this Privacy Policy or our data practices, please contact us at lea@transvoiceapp.com