Privacy Policy

This Privacy Policy explains what Voca Vela ("the Service"), operated by Voca Vela ("we", "us"), collects, how we use it, who we share it with, and the choices you have. It reflects how the app actually handles data.

1. Data we collect

Account data. If you create an account, we store your email address and authentication details through our authentication provider (Supabase). You can also use the Service anonymously, in which case only a device-local session identifier exists until you choose to sign up.

Audio you speak. When you run a live session or record a reply, your microphone audio is streamed to speech-to-text and translation providers to produce text in real time. We do not store your raw audio — it is processed in transit and discarded by us once the text is produced. Providers process it under their own terms (see section 4).

Transcripts and conversation history. The text of your conversations (original and translated lines) is saved to your account so you can revisit and replay past conversations under "History". You can delete any conversation, which removes its transcript.

Saved phrases. Phrases you choose to keep ("Vocabulary"), with their translations and the language, are stored against your account until you delete them.

Photo translations. Images you submit for photo translation are sent to an image-translation provider, and the original and translated images are stored in your account's private storage so you can view them again. You can delete them.

Usage and balance. We store your remaining translation-time balance and the amount of translation time you use per day, to enforce limits and operate the Service.

Product analytics (optional). If analytics is enabled, we use a privacy-conscious analytics provider (PostHog) to understand how the Service is used. We capture events such as starting a session, language codes, and counts — never the content of your transcripts, audio, or photos. Automatic element-level capture and session recording are turned off, and only signed-in users are associated with a profile. You can turn analytics off at any time (see the Cookie Policy).

Technical data. Like any web service, our hosting and infrastructure providers process standard technical information (such as IP address and browser type) to deliver and secure the Service.

2. How we use data

We use data to: provide translation, transcription, speech, photo translation, vocabulary, and history; maintain your account and usage limits; secure the Service and prevent abuse; understand and improve the product (analytics); and comply with legal obligations.

3. Legal bases (where GDPR applies)

We rely on: performance of a contract (to provide the Service you ask for); legitimate interests (to secure and improve the Service); consent (for optional analytics, which you can withdraw); and legal obligation where applicable.

4. Providers we share data with

We share data only as needed to run the Service, with providers acting on our behalf:

• OpenAI — real-time translation, transcription, and speech.
• Deepgram — live speech-to-text.
• Cartesia — text-to-speech (reading translations aloud).
• OpenRouter (using Google Gemini models) — photo (image) translation.
• Supabase — authentication, database, and file storage.
• PostHog — optional product analytics.
• Google — sign-in, if you choose Google authentication.
• Vercel — application hosting and delivery.

These providers process data under their own terms and privacy policies. Data may be processed in countries outside your own, including the United States and the European Union; where required, transfers rely on appropriate safeguards such as standard contractual clauses. We do not sell your personal data.

5. Retention

We keep account data while your account exists. Transcripts, saved phrases, and photo translations are kept until you delete them or delete your account. Raw audio is not retained by us. Analytics and technical data are retained according to the relevant provider's settings. When you delete your account, associated data is removed (subject to short-lived backups and any retention the law requires).

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing or withdraw consent. You can delete conversations, phrases, and photos in the app at any time. For account deletion or any other request, email ic.icreator@gmail.com. You also have the right to complain to your local data-protection authority.

7. Security

We use industry-standard measures, including encryption in transit and row-level access controls so each account can reach only its own data. No system is perfectly secure, but we work to protect your information.

8. Children

The Service is not directed to children under 16 (or the age of digital consent where you live), and we don't knowingly collect their data. If you believe a child has provided us data, contact us and we'll remove it.

9. Cookies

We use cookies and local storage as described in the Cookie Policy, which also explains how to manage or withdraw analytics consent.

10. Changes

We may update this Policy. Material changes will be reflected in the date above and, where appropriate, announced in the app.

11. Contact

For privacy questions or to exercise your rights, email ic.icreator@gmail.com.