Voicy Privacy Policy

Effective: 28 August 2026 · Applies to the Voicy app, voicydroid.com and its subdomains (incl. lingo.voicydroid.com).

What we collect

Voicy processes voice audio to provide its features: AI call answering, spoken English exams, lessons and spaced-repetition practice. We collect: account identifiers (e-mail or Telegram ID), call/exam transcripts, and — only where you explicitly opt in — audio recordings of your exam answers (used to show you your own progress over time).

What we do NOT do

We do not sell personal data. We do not use your voice to train models without a separate explicit opt-in. Live call audio is processed in memory and is not stored by default.

Where data lives

Today, accounts, conversation history and billing records of all users are stored on a Google Cloud server in the United States (us-central1). We are introducing a separate European zone: you will choose EU or US residency when you register, each zone has its own database, and EU data is not copied to the US. Until the EU zone is live, this is a plan, not a guarantee. Where your region cannot be determined, the European regime is the default choice.

Note that residency is not the same as confidentiality. A server in the right region guarantees where your data is, not that it is technically unreadable by the infrastructure operator. We call a workload confidential only when it runs on memory-encrypted hardware, and we do not claim that for voice calls, which run on GPU machines that do not support it.

We keep billing logs and telemetry for 90 days, then delete them. That period exists for compliance — incident investigation, billing disputes, regulatory requests — not as a product feature.

Your own conversations and voice recordings follow a different rule: we keep them for as long as you use the service, because your access to your own history is the reason we hold them at all. Deleting your archive on a timer would destroy your data while the reason to keep it still stands. If an account goes untouched for two years, we delete it. Voice recordings are removed from disk too, not just from our database.

Nothing is deleted without warning. Once a month we offer you a copy of your data — as a downloadable archive or exported to your Google Drive. If you have never received such an offer, your data is not deleted, even past 90 days.

We do not sell your data, we do not train models on your conversations or voice, and we do not pass your data to third parties beyond the cloud provider running the computation under a data processing agreement.

Voice and transcript processing runs on GPU machines. That machine is either your own hardware, or a Google Cloud server in a European region. Voicy operates no data centre and owns no servers. Providers are classified by the level of access they have to your data, and the classification is enforced automatically: personal data is never sent to marketplace providers, where the physical host belongs to an unvetted individual. If no permitted provider is available, the request fails rather than falling back to a less private one.

If you connect your own machine (BYOH), it serves only your own tasks and is never offered to other users, and your data does not leave it.

Full detail, including the mapping of privacy levels to provider classes, is in our GDPR data policy.

Children

Child-oriented content is provided with data minimisation: no audio retention, results only. For school deployments, consent is managed by the school under a data-processing agreement.

Your rights

You may request export or deletion of all your data (exams, decks, recordings, transcripts) at any time: write to privacy@voicydroid.com or use the in-app deletion option. Deletion is complete and irreversible.

Contact

Data controller: VoicyDroid. Contact: privacy@voicydroid.com.