Privacy Policy

Device and Authentication Information

We collect minimal device information necessary for authentication and security:

• Anonymous Device Identifier: A unique identifier generated for your device that cannot be traced back to your personal identity
• Device Fingerprint: Technical specifications including screen size, timezone, locale, and app version for security and fraud prevention
• JWT Authentication Tokens: Temporary security tokens that expire every 24 hours for secure API access
• App Version Information: Current version of the AI Voice Character app you're using

Usage Data

To provide and improve our voice character services, we track:

• Character Usage: Number of characters in your text input for billing and usage limit enforcement
• Generation Requests: Frequency and timing of voice generation requests to manage server capacity
• Voice Character Selection: Which celebrity voice characters you choose (stored locally on your device only)
• Performance Metrics: Response times and generation success rates for service optimization

Subscription Information

Through our integration with RevenueCat (Apple's recommended subscription service):

• Subscription Status: Whether you have an active Pro subscription
• Product Identifiers: Which subscription plan you've purchased (monthly, weekly, or annual)
• Transaction History: Purchase and renewal dates for billing management
• Subscription Tier: Current access level (Free or Pro) for feature availability

Infrastructure Security

Your data is protected through enterprise-grade security measures:

• Encryption: All data transmission uses HTTPS/TLS encryption
• Secure Storage: Redis database with encryption at rest via Upstash
• Access Controls: Limited access to authorized personnel only
• Regular Security Audits: Ongoing security assessments and updates

Data Retention

• Usage Data: Character usage automatically expires based on subscription period (monthly limits reset monthly)
• Authentication Tokens: Expire every 24 hours and are automatically renewed
• Subscription Data: Retained as long as your account is active plus legal retention requirements
• Performance Logs: Aggregated and anonymized after 30 days

RevenueCat (Subscription Management)

RevenueCat processes subscription and payment information according to their privacy policy. We receive only necessary subscription status information, not your payment details or personal information.

RunPod (Voice Processing)

RunPod provides GPU infrastructure for voice character generation. Your text input is processed in real-time and immediately discarded. No audio content or text is stored on RunPod servers.

Vercel (Backend Infrastructure)

Vercel provides our backend infrastructure and global content delivery network. All data handling complies with their enterprise security standards.

Data Access and Control

• View your current character usage and limits within the app
• Control your Pro subscription through your device's App Store settings
• Reset authentication by deleting and reinstalling the application
• Select and customize voice characters locally on your device

Data Deletion

• Contact our support team to delete all associated usage data
• Usage data automatically expires and resets based on subscription periods
• Request deletion of personal information (where legally permitted)

California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: Information about personal information collected and used
• Right to Delete: Request deletion of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Opt-Out: We do not sell or share personal information for commercial purposes

EU Users (GDPR)

For users in the European Union, our legal basis for processing includes:

• Contract Performance: Processing necessary to provide voice character generation services
• Legitimate Interests: Service improvement, fraud prevention, and customer support
• Consent: Where explicitly provided for specific features
• Legal Compliance: Meeting applicable legal and regulatory requirements