This Privacy Policy explains how information is collected, used, and disclosed by Voxio ("Voxio", "we", "our", or "us") with respect to your access and use of our iOS application and website (collectively, the "Service").
We are committed to protecting your privacy and being transparent about our data practices. This policy describes what data we collect, how we use it, and your rights regarding your personal information.
1. Data We Collect
We collect the following types of data when you use Voxio:
1.1 User Identifier (User ID)
We generate and store a unique random identifier (UUID) on your device when you first launch the app. This identifier:
- Is stored securely in your device's Keychain
- Persists across app sessions to provide continuity
- Is NOT the device advertising identifier (IDFA)
- Is used to link your usage data for analytics purposes
1.2 Product Interaction Data
We collect data about how you interact with the app's features, including:
- App launches, feature usage, and navigation patterns
- Recording creation, transcription usage, and AI feature interactions
- File import/export operations and search functionality usage
- Settings changes and premium feature usage
1.3 Purchase History
We collect information about your subscription and in-app purchases, including:
- Subscription type, trial status, and renewal information
- Purchase dates, product IDs, and transaction details
- Subscription lifecycle events (started, renewed, expired, cancelled)
1.4 Apple Search Ads Attribution Data
When you install Voxio from an Apple Search Ads campaign, we collect attribution data through Apple's AdServices framework, including:
- Campaign keywords and campaign identifiers
- Ad group and creative set information
- Attribution source (Apple Search Ads vs. organic install)
Important: Apple Search Ads Attribution is a first-party Apple service that does not require App Tracking Transparency (ATT) permission. This attribution helps us measure the effectiveness of our advertising campaigns.
1.5 Device Advertising Identifier (IDFA) and App Tracking Transparency (ATT)
Voxio may collect your device's advertising identifier (IDFA) to measure the effectiveness of our advertising campaigns and provide more accurate attribution.
App Tracking Transparency (ATT) Permission:
- When you first launch Voxio, you will see a prompt asking for permission to track your activity across apps and websites owned by other companies
- If you allow tracking, we may access your IDFA for advertising attribution and analytics purposes
- If you deny tracking, we will NOT access your IDFA, and advertising attribution will rely solely on SKAdNetwork (see section 1.6)
- You can change your choice at any time in iOS Settings → Privacy → Tracking
How We Use IDFA (with your permission):
- Measure the effectiveness of our advertising campaigns (Google Ads, Apple Search Ads)
- Attribute app installs and user actions to specific ads and campaigns
- Analyze user behavior and conversion funnels to improve our advertising efficiency
- Link your app usage data with your IDFA for more accurate attribution
What We Do NOT Use IDFA For:
- Cross-app tracking for behavioral profiling
- Selling your data to third-party data brokers
- Combining with data from other apps or websites for targeted advertising
Important: Your choice regarding ATT permission is entirely yours. If you deny tracking, Voxio will continue to function normally, and we will use SKAdNetwork for privacy-preserving attribution.
1.6 SKAdNetwork Conversion Data
Voxio uses Apple's SKAdNetwork framework to measure the effectiveness of our advertising campaigns, including Google Ads. SKAdNetwork allows us to understand which campaigns lead to app installs and conversions without collecting personal information.
What SKAdNetwork Collects:
- Conversion Values: Numerical values (0–63) that indicate user actions such as: app installation, trial start, first purchase, subscription renewal, and high-value user status
- Coarse Values: Broad categories (low/medium/high) that group conversion values for privacy (SKAN 4.0+)
- Postback Timing: When conversion events occur
What SKAdNetwork Does NOT Collect:
- No personal identifiers (name, email, device ID)
- No device advertising identifier (IDFA)
- No precise timestamps or user location
- No linkable data that can identify you personally
Important: SKAdNetwork is a privacy-preserving attribution system designed by Apple. It does NOT require App Tracking Transparency (ATT) permission because it does not collect or share any user-identifiable information.
2. Data We Do NOT Collect
We want to be clear about what we do not collect:
- Device Advertising Identifier (IDFA): We do NOT collect your IDFA unless you explicitly grant permission through the ATT prompt
- Audio Recordings Content: Your audio recordings and transcriptions are stored locally on your device and are NOT sent to our servers or analytics services
- Personal Contact Information: We do not collect your name, email, phone number, or address (unless you voluntarily provide it when contacting support)
- Location Data: We do not collect your geographic location
- Search History Content: We track that you used the search feature, but we do not collect or store your search queries
3. How We Use Your Data
3.1 Analytics
- Understand how users interact with Voxio's features
- Measure feature adoption and identify areas for improvement
- Track subscription conversion funnel and user retention
- Measure the effectiveness of our Apple Search Ads and Google Ads campaigns
3.2 App Functionality
- Enable premium features for subscribers
- Restore purchases across your devices
- Manage subscription lifecycle and access control
- Provide customer support and troubleshoot issues
3.3 What We Do NOT Use Your Data For
- Third-Party Advertising: We do not share your data with advertisers or ad networks
- Cross-App or Cross-Site Tracking: We do not track your activity across other apps or websites
- Marketing Communications: We do not use your data to send marketing emails or push notifications (unless you explicitly opt-in)
- Selling Data: We never sell your personal data to third parties
4. Data Linking and Tracking
All collected data (User ID, Product Interaction, Purchase History) is linked to your user identity via the unique UUID we generate. This allows us to connect your usage events over time to provide better analytics and app functionality.
With your ATT permission, we may link your IDFA with your app usage data to attribute installs and in-app actions to specific advertising campaigns. Whether you allow or deny ATT permission, Voxio will continue to work exactly the same.
You can change your ATT preference at any time in iOS Settings → Privacy → Tracking.
5. Service Providers and Analytics Partners
5.1 Firebase Analytics (by Google)
We use Firebase Analytics to collect and analyze app usage data. Firebase acts as a data processor on our behalf and is bound by data processing agreements.
5.2 Mixpanel
We use Mixpanel for product analytics and user behavior analysis. Mixpanel processes data according to our instructions and their privacy policy.
5.3 Google Ads and SKAdNetwork
We use Google Ads to promote Voxio and measure the effectiveness of our advertising campaigns via Apple's SKAdNetwork framework. SKAdNetwork postbacks are sent directly from Apple to the ad network — Voxio never sees or handles this data.
Important: These service providers have access to your data only to perform services on our behalf and are obligated not to disclose or use it for any other purpose.
6. Data Storage and Retention
6.1 Local Data Storage
All your audio recordings, transcriptions, and AI-generated content are stored locally on your device. This data:
- Remains on your device and is NOT uploaded to our servers
- Is protected by your device's security features (encryption, passcode, Face ID/Touch ID)
- Can be backed up through iCloud if you have iCloud backup enabled
- Is deleted when you delete the app from your device
6.2 Analytics Data Retention
- Firebase Analytics: Retains data for up to 14 months
- Mixpanel: Retains data according to your plan (typically 5–7 years for paid plans)
- SKAdNetwork: Data is NOT stored by Voxio — postbacks are sent directly from Apple to ad networks
6.3 User ID Persistence
Your User ID (UUID) is stored in your device's Keychain and persists until you delete the app or explicitly request deletion through our support channel.
7. Your Rights and Choices
7.1 Access and Portability
You can request access to the analytics data we have collected about your User ID. Contact us at support@voxio.app to request a copy of your data.
7.2 Deletion
- Local Data: Delete all local data by deleting the app from your device
- Analytics Data: Contact us at support@voxio.app to request deletion of your User ID and associated analytics data
7.3 Opt-Out of Tracking and Analytics
You can deny or revoke ATT permission at any time in iOS Settings → Privacy → Tracking. When tracking is disabled, Voxio will use SKAdNetwork for privacy-preserving ad attribution and continue to function normally.
7.4 California Residents (CCPA)
If you are a California resident, you have rights including:
- Right to know what personal information we collect and how we use it
- Right to delete your personal information
- Right to opt-out of the "sale" of your personal information (Note: We do NOT sell your personal information)
- Right to non-discrimination for exercising your CCPA rights
7.5 European Residents (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the GDPR including:
- Right of access, rectification, and erasure
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
8. Children's Privacy
Voxio is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@voxio.app, and we will take steps to delete such information.
9. International Data Transfers
Voxio is operated from the United States, and our service providers (Firebase, Mixpanel) may process data in the United States or other countries. We ensure that such transfers comply with applicable data protection laws, including through the use of Standard Contractual Clauses approved by the European Commission where applicable.
10. Security
We take reasonable measures to protect your information from unauthorized access, use, or disclosure:
- Local Data: Protected by iOS device security (encryption, passcode, biometric authentication)
- User ID: Stored securely in device Keychain
- Data Transmission: Analytics data is transmitted using encrypted connections (HTTPS/TLS)
- Service Providers: We only work with reputable providers that maintain strong security practices
No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last Updated" date, and providing an in-app notification if the changes are significant.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: support@voxio.app
For data access, deletion, or portability requests, email us at support@voxio.app with "Data Request" in the subject line. We will respond within 30 days.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you are located in the EEA and believe we have not been able to assist with your complaint, you have the right to lodge a complaint with the competent supervisory authority.