Privacy Policy

When you use Voxa we collect:

• Account information — your email address and name when you sign up.
• Voice recordings — audio files you record in the app, stored in encrypted cloud storage and used solely to generate transcriptions and AI summaries.
• Transcriptions & notes — the text extracted from your voice recordings, plus summaries, tasks, and calendar events created from them.
• Usage data — basic analytics such as which features you use and error logs.
• Payment information — processed by Stripe; Voxa never sees or stores your full card number.

We use your data to:

• Provide, maintain, and improve the Voxa service.
• Transcribe your audio using OpenAI Whisper and process it with GPT-4o to generate notes, tasks, and calendar events.
• Send account-related emails (confirmation, password reset, optional weekly digest).
• Detect and prevent abuse or fraud.

We do not sell your personal data to third parties, use your voice recordings to train AI models, or share your content with advertisers.

Voxa sends your voice transcriptions to OpenAI's API for AI processing (summary, task extraction, assistant responses). OpenAI's data handling is governed by their Privacy Policy. If you use "Bring Your Own Model" (BYOM), your requests go directly to the AI provider you configure; Voxa only stores your encrypted API key.

Your data is stored on Supabase (PostgreSQL) hosted in Singapore (AWS ap-southeast-1). Audio files are stored in private Supabase Storage with per-user access controls. BYOM API keys are encrypted with AES-256-GCM before being stored. All connections use HTTPS.

We retain your data for as long as your account is active. You can request full account deletion at any time — this permanently removes all your notes, recordings, tasks, and events. Stripe retains billing records as required by law.

You have the right to:

• Access a copy of all data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Withdraw consent for optional communications (weekly digest) at any time.

To exercise these rights, email us at [email protected].

Voxa uses a single first-party cookie to maintain your authentication session. We do not use third-party tracking cookies or advertising cookies.

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of Voxa after changes take effect constitutes acceptance.

Questions? Email [email protected].