Privacy Policy

Who we are

Voceno is run by TODO-operator-name. Questions about this policy: TODO-support@example.com.

Using the app without an account

You don’t need an account. Without one, your saved words, reviews and practice history stay on your phone.

Nothing about your learning leaves your phone, apart from speech your phone’s speech service may process (see “Your voice”). The only other traffic is downloads of lesson content and audio, which are public and the same for everyone. Opening the subscription screen also contacts the App Store and RevenueCat, our subscription service, to show the price.

Your voice

The app never uploads your audio recordings. Your phone’s own speech service turns your speech into text. When your phone can’t recognise speech on the device, that service (Apple or Google) may process your recording on its servers, under Apple’s or Google’s privacy terms.

You can always type your answer instead of speaking.

Accounts (optional)

You can sign in with your email address (we email you a one-time code) or with Sign in with Apple, to back up your progress and use it on other devices. With Sign in with Apple we receive an Apple user ID and, if Apple shares it, an email address.

If you buy or restore a subscription without signing in, the app first creates a guest account for you, with no name or email, so the purchase can be linked to it.

Once you have an account of either kind, our server stores:

• your settings, such as level, work area, languages and accent
• saved words and your review schedule
• your session history: the scenarios you practised, your answers as text (transcripts), AI feedback and self-check results
• a record of each AI request (day, time and session), written by our server, which is how the daily limits work
• reports you send when you mark a correction as wrong
• your subscription status
• your email address, if you gave one
• a random ID for this installation of the app, stored with your sign-in tokens

AI feedback

When you ask for AI feedback (a subscription feature), your answer text and the lesson content (a fictional workplace scenario or a vocabulary word) are sent to our AI provider, Anthropic, which writes the feedback. No audio and no email address is sent.

On our server, transcripts and feedback text are deleted 30 days after the session’s last activity, and vocabulary sentence checks 30 days after they are made. Your phone keeps its own copy until you remove it, for example with Reset all data.

Scores, completion, saved words, review state and the records of your AI requests are kept until you delete your account.

Payments

Subscriptions are bought through the App Store. Apple handles the payment; we never see your card details.

RevenueCat, our subscription service, receives purchase events from Apple (such as a purchase, renewal or cancellation) linked to your account ID, so we know whether your subscription is active.

After you delete your account, we keep a pseudonymous record of your subscription events: event IDs, types and times, linked only to a random account ID, with no name or email. We need it for accounting and to handle later events from the App Store correctly.

Sign-in emails

If you sign in with email, our email provider delivers your one-time sign-in codes. It receives your email address and the message containing the code.

Where your data is stored

• Account and learning data: our own server, in a PostgreSQL database.
• Backups of that database: kept for 30 days, then deleted. So after you delete your account, your data can remain in backups for up to 30 days.
• Lesson audio: Cloudflare R2. These files are public and contain no personal data.
• This website: hosted on Cloudflare.

Your choices

• Delete your account in the app: Profile → Account → Delete account. This deletes your account and its data on our server and the learning data on your phone. If you can’t use the app, email TODO-support@example.com.
• Reset all data (Profile → Privacy) wipes everything the app has stored on your phone. If you have an account, it also offers to delete it.
• To ask about your data, or to request a copy or a correction, email TODO-support@example.com.

Deleting your account removes your data from our server; backups follow within 30 days. If you signed in with Apple, deleting your account in the app also revokes the app’s access to your Apple ID, unless the phone can’t confirm your Apple ID; you can then remove the app under Sign in with Apple in your Apple ID settings. Apple and RevenueCat keep their own records of purchases, linked to your account ID, under their own retention settings.

Children

Voceno is made for people who work in IT. It is not directed at children under 13, and we don’t knowingly collect data from them.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top.

Contact

TODO-operator-name · TODO-support@example.com