Privacy Policy

1. Information we collect

We collect only the information needed to provide the Service:

• Account information: email, password (hashed), name, profile settings.
• Content you submit ("Inputs"): scripts, prompts, descriptions, and voice samples.
• Generated outputs: audio files, voice clones, and music we generate for you, stored in your account.
• Camera & video (Studio): if you use the optional Studio teleprompter to record yourself, the video is captured and processed only on your device. We do not receive or store it, and we do not collect face data — see Section 3.
• Payment information: handled by our payment processor (Stripe). We never see or store full card numbers.
• Usage data: feature usage, crash logs, device type, app version. Used to improve the Service.

2. Biometric data — voice samples

Voice samples you upload for voice cloning are biometric data. We treat them as the most sensitive category of information we hold.

Specifically:

• Voice samples are encrypted at rest and in transit.
• They are scoped to your account only — no other user can access them.
• They are never used to train shared AI models. Your voice does not become part of any model that benefits other users.
• You can delete voice samples at any time from your account settings. Deletion is permanent and immediate.
• If you delete your account, all voice samples are deleted within 30 days.

By submitting a voice sample, you confirm that the voice is your own OR that you have written consent from the person whose voice it is (see our Acceptable Use Policy).

3. Camera, video & face data

Voxio Studio includes an optional Studio teleprompter that lets you record a video of yourself reading a script. This feature is built around a few firm commitments:

• The camera is used only while you are actively recording in Studio, and only after you grant camera permission. You can decline or revoke that permission at any time in your device settings.
• We do not collect, use, or store face data. Voxio does not perform facial recognition, does not create a faceprint or any biometric face template, and does not analyze, map, or identify your facial features.
• Videos you record in Studio are captured and processed entirely on your device (for example, trimming or formatting the clip). They are not uploaded to our servers and are not shared with us or with any third party.
• A recorded video stays on your device. It is only saved or shared if you choose to save it to your device or share it — handled by your device and the destination you pick, not by Voxio.
• Because Studio videos never leave your device through Voxio, there is nothing on our side to retain or delete.

4. How we use your information

We use your information to:

• Deliver the Service — generate audio, voices, and music in response to your requests;
• Process payments and manage subscriptions;
• Communicate with you about account, billing, and product updates;
• Show recent activity — we may display your first name and country (never your email, surname, or full name) in a public “recent activity” indicator on our website, to show that people are actively creating on Voxio;
• Protect against fraud, abuse, and violations of our Terms or AUP;
• Improve the Service (using aggregated, anonymized data — not your voice samples or specific prompts).

5. We do NOT sell your data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Full stop.

6. AI model training

We do not use your Inputs (prompts, voice samples, descriptions) or Outputs (generated audio) to train shared AI models that benefit other users. Your data is yours.

For voice cloning specifically, the voice model we create from your samples is private to your account and is not shared, sold, or used to enhance models offered to other users.

7. Sharing with third-party AI providers

Voxio is an AI service. To produce your results, we send the content you provide to trusted third-party AI providers that perform the generation. We ask for your permission inside the app before any of your content is sent for the first time. What we share, and with whom:

• OpenAI — the text you submit (prompts, lyrics, scripts, descriptions) to generate or improve text. Processed under OpenAI's API terms and not used to train OpenAI's models.
• ElevenLabs — the text you submit and the audio or voice samples you record or upload, to synthesize speech, change a voice, and create custom voices (voice cloning).
• Suno (via UdioAPI) — the prompts, lyrics, style descriptions, and any audio you submit, to generate music.
• We may use comparable providers (for example, MiniMax or Google Lyria) as fallbacks for the same purposes.

These providers process your content only to return your result, under confidentiality and data-protection obligations. As described in Section 6, your Inputs and Outputs are not used to train shared AI models. Note: Studio videos (Section 3) are never sent to these or any other providers.

We also rely on these service providers to operate the app: Google Firebase (authentication, database, file storage, hosting), Stripe (payment processing), and the Apple App Store / Google Play (app distribution and in-app purchases).

8. Data retention

We retain your information for as long as your account is active. When you delete your account:

• Personal information (email, name, settings) is deleted within 30 days;
• Voice samples and generated voice clones are deleted within 30 days;
• Generated audio Outputs are deleted within 30 days unless you've downloaded them;
• Studio videos are stored only on your device, never on our servers — there is nothing for us to delete (see Section 3);
• Billing records are retained for 7 years as required by tax law;
• Aggregated, anonymized analytics data may be retained indefinitely.

9. Your rights

Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and personal information;
• Export your data in a portable format;
• Object to processing or withdraw consent;
• File a complaint with your local data protection authority.

EU residents have additional rights under the GDPR. California residents have additional rights under the CCPA/CPRA. To exercise any of these rights, contact us at contact@voxiostudio.com. We respond within 30 days.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us. Users under 18 should use the Service only with the consent and supervision of a parent or legal guardian.

11. International data transfers

Voxio Studio is based in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (e.g., Standard Contractual Clauses where required) for such transfers.

12. Security

We use industry-standard security practices: encryption in transit (HTTPS/TLS) and at rest, principle of least privilege for internal access, secure cloud infrastructure (Google Firebase), and ongoing monitoring. No system is 100% secure — if a breach occurs, we will notify affected users within 72 hours as required by applicable law.

13. Changes to this Policy

We may update this Policy as our practices and applicable laws evolve. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

14. Contact

For privacy questions, data requests, or to exercise your rights, contact contact@voxiostudio.com.

Voxio Studio is operated in the United States. Data controller: Voxio Studio. Data-controller contact: contact@voxiostudio.com.