Privacy Policy

Vocaloo · Last updated: June 8, 2026

This Privacy Policy describes how the mobile application Vocaloo ("the app", "we", "us") collects, uses, and protects users' personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable laws.

1. Data controller

The data controller is the owner of the Vocaloo app. For any request you can contact us at: adantonello@gmail.com

Website: https://vocaloo-app.web.app

2. Data we collect

2.1 Data you provide

• Google account identifiers: name, email address, profile photo, and user ID provided through Google Sign-In when you log in to the app.
• Audio files: voice messages you import, record, or share with Vocaloo for transcription.

2.2 Data collected automatically

• Usage: number of monthly transcriptions performed, active subscription plan, registration date.
• Technical data: device type, operating system, app version (for operation and error diagnostics).

2.3 Data we do not collect

Vocaloo does not collect or store the content of your WhatsApp chats. The app only monitors system notifications to detect incoming voice messages; it does not read conversation text.

3. Purposes of processing

We use collected data to:

• Authenticate users and provide access to app services
• Convert voice messages into text (transcription)
• Translate text and generate replies using artificial intelligence (Premium features)
• Manage subscription plans and monthly transcription limits
• Improve service quality and diagnose technical issues

4. Legal basis for processing

Processing is based on your explicit consent at registration (Art. 6(1)(a) GDPR) and on the performance of a contract to provide the service (Art. 6(1)(b) GDPR).

5. Sharing data with third parties

Your data may be transferred to the following service providers, solely for the purposes listed above:

• Google Firebase (Google LLC, USA) — user authentication, database, backend hosting, and temporary storage of audio files during transcription (Google Cloud Storage).
  Firebase Privacy Policy
• OpenAI (OpenAI, L.L.C., USA) — audio transcription (Whisper model) and text generation (GPT models) for translation and AI reply features. Audio sent to OpenAI is processed according to their policy and is not used to train models.
  OpenAI Privacy Policy
• Google Play Billing (Google LLC, USA) — in-app purchase management.
  Google Privacy Policy
• RevenueCat (RevenueCat Inc., USA) — subscription status management.
  RevenueCat Privacy Policy

Transfers to countries outside the European Economic Area (EEA) are safeguarded by Standard Contractual Clauses approved by the European Commission.

6. Data retention

• Audio files: for transcription, audio files are temporarily uploaded to Google Cloud Storage (Firebase infrastructure), processed by OpenAI (Whisper), and deleted immediately after transcription. Vocaloo does not retain audio files beyond what is strictly necessary. OpenAI processes data according to its own policy and does not use API data to train models.
• Transcriptions: transcribed text may be saved locally on your device (encrypted storage) and is not transmitted to Vocaloo for history purposes.
• Usage data: retained for the duration of your account for billing and plan management.
• Account data: retained until you delete your account.

7. Your rights

Under the GDPR, you have the right to:

• Access: obtain confirmation of processing and a copy of your data
• Rectification: correct inaccurate or incomplete data
• Erasure ("right to be forgotten"): request deletion of your data
• Restriction: restrict processing in certain circumstances
• Portability: receive your data in a structured format
• Objection: object to processing
• Withdraw consent: at any time

To exercise these rights, email adantonello@gmail.com. You may also lodge a complaint with your local data protection authority. In Italy: Garante per la protezione dei dati personali.

8. Account deletion

You may delete your account at any time by contacting us at the email above, or from the app Settings (Account section). Deletion results in removal of all associated data within 30 days.

9. Security

We use appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS 1.2+)
• Encryption at rest for data stored on the device (Expo SecureStore)
• Authentication through a verified provider (Google)
• Access to data limited to authorized personnel

10. Children

Vocaloo is not intended for users under 14 years of age. We do not knowingly collect data from children under 14. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The last update date is shown at the top of this page. Material changes will be communicated through an in-app notice.

12. Contact

For any questions about this policy or the processing of your data, contact us at: adantonello@gmail.com

Versione italiana