Voxaly Privacy Policy

Online: https://www.voxa.uno/privacy

Effective Date: 2025-12-05

Version: 1.0

Applicable Regions: International (excluding Mainland China)

Legal Basis: GDPR, CCPA, Apple App Store Guidelines

1. Introduction and Scope

Welcome to Voxaly. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data related to your use of the Voxaly iOS application.

1.1 Scope of This Policy

This Privacy Policy applies to the Voxaly iOS application downloaded from the Apple App Store, covering data processing in both "Local Mode" and "Cloud Mode".

1.2 Data Controller

Data Controller (GDPR Article 4(7)):

Name: Voxaly Development Team
Contact: [email protected]

1.3 Legal Framework

For EU users, this policy complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

For California residents, this policy serves as a "Notice at Collection" under CCPA § 1798.100(b).

2. Information We Collect

We follow "data minimization" and "local-first" principles, collecting only information necessary for core functionality, sync, and subscription management.

2.1 Information You Provide

When you record emotions in the app, we process: emotion type, notes, tags, and intensity.

2.2 Automatically Collected Information

For app functionality and sync, we automatically generate technical information such as creation time, modification time, and device identifiers.

3. How We Use Information

3.1 Processing Purposes

We use your data only for specific purposes with clear legal basis: providing core emotion recording services, cloud sync, subscription management, and technical support.

3.2 What We Don't Do

❌ We never sell your emotion data to third parties.
❌ We don't use your data for targeted advertising or cross-app profiling.
❌ We don't use your personal data to train AI/ML models.
❌ We don't share your data with data brokers.

4. Data Storage and Security

4.1 Local Storage

Sensitive data is stored in iOS Keychain, protected by device hardware security (Secure Enclave).

4.2 Cloud Storage

Cloud data is stored in Supabase-hosted PostgreSQL databases with transport encryption (HTTPS/TLS), encryption at rest, and Row-Level Security (RLS).

5. Third-Party Service Providers

5.1 Supabase (Cloud Database & Authentication)

Provides cloud database, authentication, and real-time sync. More info: https://supabase.com/privacy

5.2 Apple StoreKit (In-App Purchases)

Handles subscription purchases and verification. We never see your payment details. More info: https://www.apple.com/legal/privacy/

6. Data Sharing and Disclosure

We never sell, rent, or trade your personal data. Limited sharing may occur only when required by law or during business mergers.

7. Your Rights

Under GDPR, CCPA, and other applicable privacy laws, you have the following rights:

Right of Access: Know what data we hold about you
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to or restrict data processing
Right to Withdraw Consent: Withdraw previously given consent

8. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]

Last updated: 2025-12-07 (Version: 1.0)