Privacy Policy

Vokl (“we”, “us”, “our”) is a music recording app for iOS. This policy explains what data we collect, how we use it, and your rights.

1. Data That Stays on Your Device

Audio recordings you create are stored locally on your device. They are never uploaded to our servers.

Transcription is performed entirely on-device using an embedded AI model (WhisperKit). No audio data leaves your device for transcription purposes.

2. Data We Collect

When you create an account, we collect the minimum information needed to authenticate you and operate the service:

• Email address or phone number — whichever you choose to sign in with.
• Device information — device model, OS version, app version, and a vendor-specific device identifier. This helps us provide support and enforce minimum version requirements.
• Push notification token — if you allow notifications, we store a Firebase Cloud Messaging (FCM) token to deliver them.
• Account metadata — authentication method used, account creation date, and last activity timestamp.

3. How We Use Your Data

• To authenticate you and maintain your session.
• To send push notifications (if enabled).
• To manage beta access through our invite system.
• To enforce minimum app version requirements for compatibility.

4. Third-Party Services

We use Firebase (operated by Google) for the following:

• Firebase Authentication — handles sign-in via phone or email verification.
• Cloud Firestore — stores your account data (described in Section 2).
• Firebase Cloud Messaging — delivers push notifications.
• Firebase Remote Config — manages app-level settings like minimum version and invite-only mode.

Firebase Analytics and advertising features are disabled. Google's privacy policy applies to data processed by Firebase: policies.google.com/privacy.

5. What We Don't Do

• We do not sell or share your personal data with third parties for advertising.
• We do not track you across apps or websites.
• We do not access, listen to, or analyze your recordings.
• We do not run analytics or collect usage telemetry.

6. Data Retention and Deletion

Your account data is retained as long as your account exists. Your recordings exist only on your device — deleting the app or the recordings removes them permanently.

To delete your account and all associated data from our servers, contact us at the address below. We will process deletion requests within 30 days.

7. Security

Authentication is handled through Firebase's secure infrastructure. Data in transit is encrypted via TLS. We follow industry-standard practices to protect your information, but no system is 100% secure.

8. Children's Privacy

Vokl is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Vokl after changes constitutes acceptance.

10. Contact

Questions about this policy? Reach us at privacy@vokl.stream.