Voiced: Privacy Policy
Effective Date: 18 July 2025
Last Updated: 18 July 2025
Welcome to Voiced, the mobile application (the “App”) provided by Pelago AI Inc. (“Pelago”, “we”, “us”, or “our”). We value your privacy and are committed to protecting your Personal Data. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use Voiced on iOS or Android.
If you do not agree with this Privacy Policy, please do not use Voiced.
WHO WE ARE
Controller
Pelago AI Inc.
1007 North Orange Street, 4th Floor, Suite #4194
Wilmington, DE 19801 USA
Email: privacy@pelagoapps.com
Data Protection Officer: William Wynne
WHAT DATA WE COLLECT
2.1 Data you provide
- Account Data – email address, phone number, display name and password (hashed).
- Voice Data – voice recordings you capture in the App and their text transcriptions.
- User‑Generated Content – questions, prompts or notes you type.
2.2 Data collected automatically
- Device & Log Data – IP address, device model, OS version, unique device identifiers, crash logs.
- Usage Analytics – feature interactions, session length, diagnostics collected via Firebase and Sentry.
- In‑App Purchase Receipts – anonymised transaction IDs from Apple, Google or Stripe for subscription management.
We do not intentionally collect precise GPS location, biometric voiceprints, or full payment‑card details.
HOW & WHY WE USE YOUR DATA
| Purpose | Description | GDPR/UK legal basis |
|---|---|---|
| Provide core service | Transcribe your audio, store it securely, and let you replay/read it | Contract (Art. 6 (1)(b)) |
| AI responses | Send your text/voice to OpenAI API (model “GPT‑4o” as of July 2025) and deliver text and voice replies | Contract |
| Diagnostics & app improvement | Diagnose crashes, measure performance, plan new features | Legitimate interest (Art. 6 (1)(f)) |
| Personalised onboarding | Tailor tips based on the channel you signed up through (e.g., ad campaign ID) | Consent where required; Legitimate interest otherwise |
| Compliance & security | Detect, investigate and prevent fraud or misuse | Legitimate interest; Legal obligation (Art. 6 (1)(c)) |
We do not use your Personal Data for third‑party advertising or for training our own machine‑learning models.
SHARING YOUR DATA
We only share Personal Data with:
- Cloud Hosting – Google Cloud (USA/EU, encrypted at rest)
- AI Processing – OpenAI (USA/EU), no model training per Enterprise API terms
- Analytics & Crash Reporting – Firebase and Sentry (USA/EU)
- Attribution – Adjust (Germany/USA)
- Payment Processors – Apple, Google, Stripe
- Government or law-enforcement agencies – only where legally required
All vendors are bound by written data‑processing agreements and—where applicable—the EU Standard Contractual Clauses.
INTERNATIONAL TRANSFERS
Personal Data may be transferred to and processed in countries outside your jurisdiction, including the United States, where Pelago and many of our service providers are located.
Primary hosting region: [TODO: Specify primary Google Cloud region]
Where we transfer EU/UK Personal Data to a country without an adequacy decision, we rely on Standard Contractual Clauses (2021/914/EU) or equivalent safeguards.
SECURITY
We employ industry‑standard safeguards, including:
- Encryption in Transit & At Rest – TLS 1.2+; AES‑256 server‑side encryption
- Role‑based access controls; 2FA; least‑privilege IAM
- Quarterly penetration tests and annual independent audits
- 24-hour incident-response; breach notifications within 72 hours
DATA RETENTION
| Category | Retention rule | User controls |
|---|---|---|
| Voice recordings | Up to 30 days; transcript until deleted | Delete note in App |
| Account data | Lifetime of your account | Delete account |
| Analytics logs | 14 months rolling window | — |
| Back‑ups | Retained 30 days then purged | — |
If you delete your account, we soft-delete for 30 days, then permanently erase it. Some data may be retained longer where legally required.
YOUR RIGHTS
Under GDPR/UK GDPR and similar laws, you may:
- Access your data (Art. 15)
- Request correction (Art. 16)
- Request erasure (Art. 17)
- Restrict/object to processing (Art. 18 & 21)
- Port your data (Art. 20)
- Withdraw consent at any time
Email privacy@pelagoapps.com to exercise your rights. We respond within 30 days. You can also contact your local supervisory authority.
CHILDREN
Voiced is for users aged 16+. We enforce age-gating and will implement COPPA-compliant flows if we lower the minimum age. We do not knowingly collect data from children under 16.
AUTOMATED DECISION‑MAKING
Voiced does not make legally significant automated decisions. AI replies are for convenience and insight only.
CHANGES TO THIS POLICY
We may update this Policy periodically. In-app banners and emails will notify you.
CONTACT US
Questions? Email privacy@pelagoapps.com or write to:
Pelago AI Inc.
Attn: Privacy Team
1007 North Orange Street, 4th Floor, Suite #4194
Wilmington, DE 19801 USA