Privacy Policy

1.1 Account and Profile Data

When you register, we collect:

• Email address — if you sign in with email and password
• Name or display name — optional, provided during profile setup
• Authentication provider — email, Google, or Apple
• Username — auto-generated at registration; you may update your display name later
• User number — a unique, immutable identifier used to connect with other users

1.2 Conversation and Translation Content

• Message text — original and translated versions of every message you send or receive
• Audio recordings — voice recordings you make inside the App for transcription and translation
• Detected and selected languages — source and target languages for each message
• Sign Scanner images — photos you take or choose from your library for OCR-based translation (compressed on-device before processing; the original photo is not uploaded)
• Scan history — saved results from Sign Scanner sessions

1.3 Voice Cloning Data (Pro Tier)

If you choose to use Voice Cloning:

• Voice sample audio files you record
• Cloned voice metadata — name, processing status, sample count, total duration, and the third-party voice ID assigned by ElevenLabs

Voice samples and cloned voices are processed and stored by ElevenLabs on our behalf. See Section 5 for details.

1.4 Usage and Preference Data

• Translation counts — daily usage of translations and TTS generation, used to enforce plan limits
• Settings — target language, selected voice, and color theme preference
• Contacts and connection requests — display names, user numbers, and relationship status (connected, blocked, muted, custom alias)
• Presence signals — approximate last-active timestamp and which conversation you are currently viewing; visible only to contacts and used solely to show "online" indicators
• Discoverability signals — if you activate the "broadcast availability" feature, a short-lived discoverability record is visible to nearby users for up to 15 minutes
• Performance telemetry — anonymized timing data from translation pipeline stages (no message content, no personal identifiers)

1.5 Push Notification Token

If you grant notification permission, we store your device's Expo push token to deliver new-message alerts from your contacts.

1.6 Support Messages and User Reports

• Support messages — subject line, message body, and email address you provide when contacting support
• User reports — if you report another user, we record your user ID, the reported user's ID, the reason selected, any additional details you provide, and the relevant message ID if applicable

Your data is stored in the following systems:

• Google Cloud Firestore — user accounts, remote conversations, contacts, preferences, subscription data, and presence. Data resides in the United States by default.
• Google Cloud Storage — audio recordings you make, synthesized speech files, and remote conversation audio clips.
• On-device storage (AsyncStorage) — local conversations, scan history, settings, and translation cache. This data never leaves your device unless you start a remote conversation.

You can revoke any permission at any time in your device Settings. Revoking microphone access disables recording-based translation and Live Mode. Revoking notifications disables message alerts but does not affect other App features.

All AI processing occurs server-side through Firebase Cloud Functions — no third-party AI provider API keys are present in the App itself. The following services receive data as necessary to fulfill their function:

Each provider operates under its own privacy policy:

• Google / Firebase: policies.google.com/privacy
• Groq: groq.com/privacy-policy
• Deepgram: deepgram.com/privacy
• ElevenLabs: elevenlabs.io/privacy
• RevenueCat: revenuecat.com/privacy
• Expo: expo.dev/privacy

We do not sell your personal data to third parties. We share data only:

• With the third-party service providers listed in Section 5, strictly to operate the App
• With your conversation partners, who receive the translated versions of your messages and, in remote conversations, your display name and selected language
• If required by law, court order, or to protect the rights, property, or safety of An App Idea LLC, its users, or the public

• Account and profile data is retained for as long as your account is active.
• Local-only data (conversations created without a remote partner, scan history) remains on your device until you delete the App or clear its data.
• Remote conversations are retained until you or your conversation partner deletes them, or until your account is deleted.
• Voice clones are deleted from our servers and from ElevenLabs when you delete them in the App or when your account is removed.
• Support messages and reports are retained for as long as necessary to resolve the matter.

The App is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us personal information without appropriate consent, please contact us immediately and we will promptly delete it.

We implement industry-standard measures to protect your information:

• All data in transit is encrypted with HTTPS/TLS
• Firebase Security Rules restrict each user to accessing only their own data
• AI provider API keys are stored exclusively as Firebase Cloud Functions secrets — they are never embedded in the App
• Real-time streaming sessions use short-lived tokens minted by our server that expire within minutes
• All privileged administrative actions are recorded in a tamper-evident audit log

No system is completely secure. If you discover a potential security vulnerability, please contact us at the address in Section 12.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated personal data
• Data portability — receive a machine-readable copy of your data
• Object or restrict certain processing activities

To exercise any of these rights, contact us as described in Section 12. We will respond within 30 days.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. If we make material changes, we will notify you through the App or by email before the changes take effect. Continued use of the App after changes constitutes your acceptance of the revised policy.