Privacy Policy

1. Who we are

VoiceCue is operated by Dice Systems EOOD, a company registered in Bulgaria (UIC 208915913), zh.k. Lyulin 7, bl. 737, vh. B, et. 4, ap. 50, 1324 Sofia, Bulgaria ("we", "us"). We are the data controller for the personal data described in this policy.

Privacy contact: privacy@voicecue.app. We have not appointed a Data Protection Officer, as we are not required to; privacy enquiries go to that address and are handled by us directly.

This policy covers the VoiceCue apps for iOS and Android, the web app at web.voicecue.app, and this website. It is our full privacy policy — not a summary of it.

2. What stays on your device

These never reach our servers, and we cannot see them:

• Video and audio recordings. Recording is written straight to your device and saved to your gallery or photo library. The app has no upload path for recordings.
• Camera and microphone input. Used live, on device, while you record or use voice scrolling.
• Voice recognition. Speech-to-text runs entirely offline, using a language pack you download to your device and the open-source Vosk and Sherpa-ONNX engines bundled in the app. Audio is processed locally, in memory, and discarded as you speak. VoiceCue does not use Apple's or Google's cloud dictation services, and the app has no code path that sends microphone audio anywhere — once your language pack is downloaded, voice scrolling works in airplane mode.
• Your scripts, unless you turn on Cloud Sync or use an AI feature (see §3).

3. What we collect, and why we're allowed to

Under the GDPR we must have a legal basis for each use of your data. Here is every category we process, with its purpose and basis.

Data	Purpose	Legal basis
Email address and consent record	Sending the one-time iOS and Android launch notice you requested	Consent
Email address, account ID, sign-in provider	Creating and securing your account; linking your subscription to it	Performance of a contract
Scripts, folders, display and recording settings	Syncing them between your devices (only if you enable Cloud Sync)	Performance of a contract
Prompts and script text sent to the AI writer	Generating or editing the text you asked for	Performance of a contract
Count of AI generations used	Applying fair-use limits so the service stays available	Legitimate interests — preventing abuse and controlling cost
Subscription and purchase status	Unlocking Pro across your devices and restoring it after reinstalling	Performance of a contract
Crash and error reports: crash trace, device or browser, OS and app version, install identifier, IP address	Diagnosing and fixing crashes and errors	Legitimate interests — keeping the app working
IP address and request metadata	Unavoidable in any network request (e.g. downloading a language pack); security and abuse prevention	Legitimate interests — security and service delivery

Is providing this required? No. The teleprompter works with no account and no network connection. An account is only needed for features that are inherently account-based — Cloud Sync, AI writing, and restoring a subscription — and if you don't provide it, those features simply aren't available. Nothing else is withheld.

Mobile launch list

If you enter your email on our coming-soon page and press Join the list, we store the normalised email address, when it was submitted, the page it came from, and the version of the consent wording you accepted. We use it only for the VoiceCue iOS and Android launch notice. It is not added to a general newsletter, and we do not attach your IP address, browser details, or behavioural data to the waitlist record. Re-entering the same address updates the existing record rather than creating a second one.

You can withdraw before the launch email is sent by writing to privacy@voicecue.app from the address you joined with. The launch email will also include a direct unsubscribe option.

Accounts

If you sign up with email, Google, or Apple, we receive your email address and a user ID. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address.

Cloud Sync

Cloud Sync is off by default and is something you switch on deliberately. When on, your scripts, folders and their settings are stored in our database so they appear on your other devices. Switching it off stops further syncing; deleting your account removes what was synced.

AI script writing

When you use the AI writer or editor, your prompt — and, for an edit, the script text you're editing — is sent to our server and on to Google's Gemini API, which generates the response. We do not store or log the content of your prompts or the generated text. It exists only in memory for as long as it takes to answer the request — it is never written to a database, and our server logs record that a generation happened, not what was in it. We keep only a per-account counter of how many generations you've used. Google processes the request as our processor and does not use it to train its models under the terms that apply to our account.

Purchases

Subscriptions are sold through the Apple App Store and Google Play. We never see your card details. Our subscription provider, RevenueCat, receives your account ID and the purchase receipt from the store so we can unlock Pro on your devices and restore it later.

Crash and error reports

In the mobile apps we use Firebase Crashlytics. When the app crashes it sends the crash trace, your device model, OS version, app version, and a random installation identifier. In the web app we use Sentry to report uncaught errors, which sends the error trace, your browser and operating system, the page the error happened on, and your IP address. Neither includes your scripts, prompts, or recordings.

4. What we don't do

• No advertising — no ad networks, no advertising identifiers (no IDFA, no Android Advertising ID).
• No analytics or behavioural tracking SDKs in the apps — the iOS, Android and web apps contain none.
• No cookies, fingerprinting or cross-visit profiles on this website — page views are counted in aggregate only, and nothing identifies you or follows you between visits.
• No tracking of you across other companies' apps or websites.
• No selling or sharing of personal information, as those terms are defined under California law — and none in the preceding 12 months.
• No automated decision-making that produces legal or similarly significant effects, and no profiling.

5. Who processes your data

We use a small number of providers, each acting on our instructions:

• Google Firebase — the mobile launch list, accounts, the Cloud Sync database, language-pack hosting, crash reporting.
• Google Gemini — generates AI script content when you use those features.
• Sentry — error reporting for the web app.
• RevenueCat — subscription status.
• Apple and Google — process payments when you subscribe.
• [ANALYTICS PROVIDER] — cookieless, aggregate page-view counts for this website only. Receives no personal data and is not used in the apps.

Each of these is bound by a data processing agreement requiring them to provide the same or equal protection of your data as set out in this policy, to process it only on our instructions, and to keep it confidential. We do not give any third party permission to use your data for their own purposes.

These providers may process data outside your country, including in the United States. Where that happens, transfers rely on the European Commission's standard contractual clauses or an equivalent safeguard. You can ask us for a copy of the safeguard that applies.

6. How we keep it safe

• All traffic between the apps and our servers is encrypted in transit with TLS.
• Synced content is stored in a database whose access rules restrict every document to the account that owns it — one account cannot read another's scripts.
• AI requests are authenticated: our server verifies your account before processing a request.
• We never see your password. Firebase Authentication stores it only as a salted hash, and if you sign in with Google or Apple we receive no password at all.
• Data on your device is protected by your device's own encryption and app sandboxing.

No system is perfectly secure. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

7. Cookies and local storage

This website sets no cookies. It measures traffic with a cookieless analytics script that records only aggregate page views, referrers and coarse country — no cookies, no device fingerprint, no advertising identifier, and no profile that links one visit of yours to the next. Because nothing is stored on your device and nothing identifies you, there is no consent banner to click and nothing to opt out of. The web app stores a sign-in session on your device (via browser storage) purely so you stay signed in, and keeps your scripts in your browser's local database (IndexedDB) so they're there when you come back. Both are strictly necessary for the service and neither is used to track you. The mobile apps use no cookies.

8. Deleting your account, and withdrawing consent

Withdrawing consent and stopping optional processing. You can turn Cloud Sync off at any time in Settings → Account, which stops your scripts leaving your device. You can stop AI processing by not using the AI features. You can revoke camera, microphone and photo permissions in your device settings — the teleprompter keeps working without them. To leave the mobile launch list, email privacy@voicecue.app from the address you joined with. Withdrawing does not affect processing that already happened.

Deleting your account does not delete anything stored only on your device — your local scripts and recordings stay where they are, under your control. Cancelling a subscription is separate and handled by the App Store or Google Play; see our Terms.

9. How long we keep things

• Mobile launch-list email — until you withdraw, or until 60 days after we send the mobile launch notice, whichever comes first.
• Account and synced content — until you delete your account, or, if we ever discontinue the service, until the end of the notice period described in our Terms.
• Subscription records — as long as needed for billing, tax and accounting obligations (typically the period required by law in our country of establishment).
• Crash and error reports — up to 90 days.
• AI prompts and generated text — not stored by us.
• Server logs — a short operational period, then deleted.

10. Your rights

If the GDPR or UK GDPR applies to you, you have the right to: access the personal data we hold about you; have it corrected; have it erased; restrict how we use it; object to processing based on legitimate interests; receive a copy in a portable, machine-readable format; and withdraw consent where processing relies on it.

Email privacy@voicecue.app and we'll respond within 30 days, free of charge. If you think we've handled your data wrongly you can complain to your local supervisory authority — for us that is the Bulgarian Commission for Personal Data Protection (CPDP / КЗЛД) — but we'd appreciate the chance to put it right first.

11. California privacy rights

If you live in California, the CCPA as amended by the CPRA gives you specific rights. In the past 12 months we have collected these statutory categories of personal information:

Category	Examples we collect	Source
Identifiers	Email address, account ID, installation identifier, IP address	From you; from your device
Commercial information	Subscription status and purchase history	From Apple, Google and RevenueCat
Internet or network activity	Crash diagnostics, app and OS version, request metadata	From your device
Your own content	Scripts you choose to sync, prompts you send to the AI writer	From you

We collect these for the business purposes described in §3. We do not sell or share personal information, and have not in the preceding 12 months. We do not use or disclose sensitive personal information for purposes that require an opt-out, so there is no "Do Not Sell or Share My Personal Information" link and nothing for a Global Privacy Control signal to opt you out of.

You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights — we do not offer different pricing or service based on them. Exercise any of these by emailing privacy@voicecue.app, or by using Delete Account in the app. We verify requests by confirming you control the account's email address. You may use an authorised agent, in which case we'll ask for written proof of their authority.

12. Children

VoiceCue isn't directed at children. We don't knowingly collect personal data from children under 13 (or under the applicable age of digital consent in your country, which is up to 16 in parts of the EEA). If you believe a child has given us personal data, email us and we'll delete it.

13. Changes to this policy

If we change this policy we'll update the date at the top, and — for changes that materially affect you — tell you in the app before they take effect.

14. Contact

Privacy: privacy@voicecue.app
Everything else: support@voicecue.app
Post: Dice Systems EOOD, zh.k. Lyulin 7, bl. 737, vh. B, et. 4, ap. 50, 1324 Sofia, Bulgaria