Privacy Policy
Overview
This Privacy Policy explains what information Voco ("we", "us") collects when you use the Voco app, how we use it, who we share it with, and the choices you have. Voco is a voice-translation messenger that helps people who don't share a language talk by voice, text and video, in their personal lives and at work.
Your account
You sign in with Apple or Google. We receive and store an account identifier and the email address of that account. If you sign in with Apple and choose to share it, we also receive your name. Apple lets you hide your real email address; in that case we receive a relay address instead. Before you sign in, the app uses a temporary anonymous identifier.
Your profile
The username you choose, the language you speak, the app language, your preferred voice for read-aloud (male or female), your color theme, and an optional profile photo.
Messages, photos and files
We store the text you type or dictate, its automatic translations, reactions, replies, read receipts, and which messages you deleted for yourself. We also store the photos and files you send in a chat. They are private: they open through temporary links that only the two participants of that conversation can get.
Voice recordings
When you record a voice message, the audio is sent to Deepgram's speech-to-text service to produce a transcript. Voco does not keep the audio; only the resulting text is stored, the same as a typed message. We instruct Deepgram not to retain the audio to train its models.
Translation and read-aloud
Message text is translated by Azure AI Translator, with Google Cloud Translation used for a few languages Azure doesn't support. When you play a message aloud, its text is turned into speech by Google Cloud Text-to-Speech or by your device.
Video calls
Video and audio are streamed live between the two participants via LiveKit Cloud and are not recorded. Your camera and microphone are used only while a call is active. To show live captions, call audio is transcribed by Deepgram and translated by the services above, through a captioning service we run on Railway. Captions are shown to the other participant and are not stored. We do keep a record of each call: who took part, when it started and ended, and each participant's language.
Usage and purchases
We record how much time you use, to manage free time, hour balances and video-minute balances, and we keep your purchase and subscription history. Payment is handled by Apple or Google, and purchases are managed through RevenueCat. We never receive your card details.
Referral program
If you take part, we store your referral code, who referred you and whom you referred, the commissions you earned and their payment status, and the PayPal email address you give us for payouts. Commissions are paid through PayPal.
Notifications
If you allow notifications, we store your device's push token. Notifications are delivered through Expo and Apple or Google. A notification includes the sender's name and, unless you turn off "Show message text" in your Profile, the text of the message.
Other information
Phrases you save in the Phrasebook; people you block and reports you file; and, when a message contains a link, a preview of that link (title, description and image), which our server fetches from the linked website.
Camera translation
If you use Camera translation, the photo you take or choose is sent to Google Cloud Vision only to read the text in it, and the text is then translated like a message. Voco does not store the photo or the text.
Crash reports
If the app crashes or runs into an error, a crash report is sent to Sentry so we can find and fix the problem. A report contains technical details only: your device model and operating system, the app version, the screen and the point in the app's code where the error happened, and your Voco user ID (a random identifier, not your name). It never includes your messages, voice recordings, photos or files, your name or your email address, and we never record your screen. Crash reports are stored by Sentry in the European Union and kept for up to 90 days.
What we don't collect
We don't collect your location or your contacts, we don't use advertising identifiers, and the app contains no third-party analytics or advertising tracking (the crash reports described above are used only to fix errors). We do not sell your personal information and we do not use it for advertising.
Device permissions
Microphone: voice messages and video calls. Camera: video calls, taking photos to send, and scanning a QR code to connect with someone. Photos and files: choosing something to send, and your profile photo. Notifications: new messages and incoming calls. A video call can continue in a small picture-in-picture window when you leave the app; when you close the app, the call ends.
How we use your information
To deliver, transcribe, translate and read aloud your messages and run video calls with live captions; to manage your account, balances, subscriptions and purchases; to run the referral program and pay commissions; to send the notifications you allowed; and to keep Voco safe by reviewing reports and acting on accounts that break our Terms.
Service providers
Voco relies on: Supabase (sign-in, database, file storage and server functions), Deepgram (speech-to-text), Azure AI Translator and Google Cloud Translation (translation), Google Cloud Text-to-Speech (read-aloud), Google Cloud Vision (reading text in photos for Camera translation), LiveKit Cloud (video calls), Railway (hosts our captioning service), RevenueCat (purchases), Apple and Google (sign-in, app-store billing and notifications), Expo (notification delivery), Sentry (crash reports), and PayPal (referral payouts). They process data on our behalf under their own security and privacy commitments. We may also disclose information when required by law.
Cross-border data transfer
Our database and file storage are hosted in Frankfurt, Germany (European Union), and most of our service providers are based in the United States, so using Voco means your data leaves your country. By using Voco and accepting this Privacy Policy, you consent to this transfer, understanding that data protection standards in the destination country may differ from your own. If local law gives you a right to withdraw this consent, restrict processing, or lodge a complaint with your local data protection authority, you can exercise it by deleting your account (Profile > Delete account) or contacting us.
Who can see what
Your messages, photos and files are visible only to you and the other participant of that conversation. Your username and profile photo are visible to people you connect with, and a profile photo can be opened by anyone who has its link.
Using Voco at work
Voco is also used in workplaces where people speak many different languages, for example between managers and foreign workers. Every Voco account is personal, including when an employer asked you to use Voco. There are no employer or administrator accounts: an employer cannot see your other conversations, your contacts or your usage. In a work conversation, the employer or manager sees only the messages of that conversation, like any participant, and the participant set as host pays for its usage. You can block, report or leave a work conversation and delete your account like any other user.
Data retention & deletion
We keep your data for as long as your account exists. You can delete your account at any time from Profile > Delete account. This immediately and permanently deletes your profile, profile photo, the photos and files you sent, your conversations and messages, blocks, and reports filed by or against you. Because conversations are shared, deleting your account also removes those conversations from the other participant's Chats. "Delete for everyone" removes a message and any photo or file attached to it for both participants; "Leave conversation" removes a conversation only from your own Chats. Apple, Google, RevenueCat and PayPal keep their own records of purchases and payments under their own policies.
How to delete your Voco account
In the app: open Profile and tap Delete account. Your account is deleted immediately. Without the app: email [email protected] from the email address of your Voco account (the address of the Apple or Google account you signed in with) and ask us to delete your Voco account. We will delete it within 30 days and confirm by email. Deleting your account permanently deletes your profile, profile photo, the photos and files you sent, your conversations and messages, blocks and reports, as described above. Records of purchases and payments are kept by Apple, Google, RevenueCat and PayPal under their own policies.
Your choices
In the app you can edit your username, languages and photo, turn notifications and message text in notifications on or off, block and report people, leave conversations, delete messages, and delete your account. For any other privacy request, such as a copy of your data, contact us at [email protected].
Children
Voco is not directed at, and should not be used by, anyone under 18.
Security
We use encrypted connections, access controls on our database and storage, and time-limited links for files. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
Changes to this policy
We may update this policy as Voco changes. If we make material changes, we'll make a reasonable effort to let you know inside the app.
Contact
Questions about this policy? Reach us at [email protected].