Legal
Privacy Policy
Last updated: July 18, 2026
Your privacy matters to us. This policy explains exactly what personal data VoxZen collects, why we collect it, how we use it, and the rights you have over it.
1. Who We Are
VoxZen ("we", "us", "our") operates an AI-powered communication coaching mobile application. Questions about this Privacy Policy: privacy@voxzen.app
2. Information We Collect
INFORMATION YOU PROVIDE:
- Account information: email address, display name, password (stored as a salted hash)
- Onboarding profile: communication style, challenges, primary goal, daily practice goal
- Voice recordings: when you use voice coaching features (processed in real-time, not stored permanently)
- Text inputs: questions, responses, and messages sent to Nova AI Coach
COLLECTED AUTOMATICALLY:
- Usage data: lessons completed, XP earned, streak counts, session duration
- Device information: device type, operating system version, app version
- Push notification tokens (when you grant permission)
- Crash and error reports (anonymized)
3. How We Use Your Information
- Creating and managing your account
- Personalizing your learning journey based on your goals
- Providing AI coaching responses tailored to your progress
- Tracking your progress, XP, streaks, and achievements
- Delivering push notification reminders (if enabled)
- Analyzing anonymized usage patterns to improve content quality
4. India — DPDP Act 2023
If you are located in India, the Digital Personal Data Protection Act 2023 governs how we process your data. We process your data based on your consent provided when creating a VoxZen account.
YOUR RIGHTS:
- Right to Access: Request information about the personal data we hold
- Right to Correction & Erasure: Request correction or deletion
- Right to Grievance Redressal: Acknowledged within 48 hours, resolved within 15 business days
Grievance Officer (India): privacy@voxzen.app — Subject: DPDP Grievance
5. Voice & Audio Data
- Recordings captured only when you actively initiate a voice feature
- Transmitted via TLS 1.3 encryption and transcribed in real-time
- Voice recordings are NOT stored permanently — deleted immediately after transcription
- Your voice is never used to train AI models without explicit written consent
6. Data Sharing
We do not sell, trade, or rent your personal information. We share data only with service providers:
- Supabase Inc. — database hosting and authentication
- OpenAI, L.L.C. — AI language model and speech processing
- RevenueCat, Inc. — subscription management
- Expo (Meta Platforms) — push notification delivery
7. Data Retention
- Account data: retained for account lifetime + 30 days after deletion
- Coaching conversations: up to 12 months, then automatically deleted
- Voice recordings: deleted immediately after processing (within minutes)
- Payment records: 7 years (financial regulation requirement)
- Deleted accounts: all personal data removed within 30 days
8. Your Privacy Rights
- Right to Access: Request a copy of your personal data
- Right to Correction: Request correction of inaccurate data
- Right to Deletion: Use "Delete Account" in app settings
- Right to Portability: Request your data in machine-readable format
To exercise your rights: privacy@voxzen.app — we respond within 30 days.
9. Children's Privacy
VoxZen is not intended for children under 13. If you believe your child has created an account, contact privacy@voxzen.app — we will delete the account within 72 hours.
10. Data Security
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Row-Level Security — users can only access their own data
- Passwords never stored in plain text
11. California Privacy Rights (CCPA)
California residents have the right to know, delete, and correct personal information. We do not sell personal information. Submit a request to privacy@voxzen.app.