Privacy Policy
VoiceInbox is a voice-first email client. We built it so you can talk to your inbox without handing over a copy of it. This policy explains what data we touch, why, and how to take it back.
1. Who we are
VoiceInbox is operated by Reel Works. You can reach us at support@voiceinbox.app. Postal address available on request.
2. What we collect
2.1 Account & device data
- Anonymous device identifier and iOS version
- Apple App Store purchase receipts (for subscription verification)
- Any email address you provide when contacting support
2.2 Connected email accounts
When you connect Gmail, iCloud, Outlook, Yahoo, or another IMAP account, we store:
- OAuth refresh / access tokens (or app password for IMAP)
- Server addresses (IMAP/SMTP host, port)
These credentials are stored on your device in the iOS Keychain (and optionally synced through iCloud Keychain on your own Apple account). They never sit on our servers.
2.3 Email content
When you ask VoiceInbox to summarize, rewrite, translate, or draft a reply, the relevant message body — or your dictated input — is sent to our voice and language sub-processors (see §4). It is used only to produce the result you asked for and is not retained by us or those sub-processors for training.
We do not keep persistent copies of your messages on our servers.
2.4 Voice recordings
- Audio captured by the microphone is streamed for transcription
- Recordings are not stored on our servers and are not used for model training
2.5 Usage analytics
We collect anonymous, aggregated product events (e.g. "tab opened", "trial started") to understand how features are used and to find crashes. We do not include message bodies, subjects, recipient lists, or attachments in analytics.
2.6 Google user data & Limited Use
When you connect a Gmail account, VoiceInbox requests a single Google API scope — https://mail.google.com/ — which is used over standard IMAP and SMTP to read your messages and folders, mark them read or flagged, move or delete them, detect new mail for notifications, and compose and send replies and new emails on your behalf. We access this data only to provide the app's user-facing email features (reading, organizing, summarizing, composing, and sending email by voice).
VoiceInbox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train generalized AI/ML models. Email content sent to our language sub-processors (for example, OpenAI) is used solely to produce the result you requested and is not retained for training.
3. How we use the data
- Provide the service: read, compose, summarize, translate, reply
- Process subscription payments through Apple
- Diagnose crashes and improve reliability
- Communicate with you about support requests
- Comply with legal obligations
We do not sell your data and we do not show ads.
4. Sub-processors
- Apple — App Store payments, push notifications
- Speech-to-text provider — short-lived audio processing
- Language processing provider — summarization, rewriting, translation
- Hosting & analytics — Firebase / Google Cloud (web hosting, crash reporting, anonymous analytics)
An up-to-date list of named sub-processors is available on request via support@voiceinbox.app.
5. Where data lives
- On-device: tokens, cached messages, drafts
- Apple iCloud Keychain: if you choose to enable it
- In transit through sub-processors: audio and text relevant to the requested action, processed in real time, not stored beyond that processing window
- Analytics: aggregated, retained up to 14 months
6. Retention
- Local data: until you delete the app or revoke access
- Analytics: up to 14 months, then aggregated or deleted
- Support correspondence: up to 24 months
- Billing records (held by Apple): per Apple's policies
7. Your rights (GDPR / UK GDPR / CCPA)
You may at any time:
- Request access to the personal data we hold about you
- Ask us to correct or delete it
- Object to or restrict processing
- Withdraw consent (where processing relies on consent)
- Receive an export in a portable format
- Lodge a complaint with your supervisory authority (in Slovenia: the Information Commissioner)
Email support@voiceinbox.app to exercise any of these rights. We respond within 30 days.
8. Children
VoiceInbox is not directed at children under 16 and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided personal data, contact us and we will delete it.
9. Security
- Credentials encrypted in iOS Keychain
- TLS in transit for all network traffic
- Limited internal access on a need-to-know basis
No system is perfectly secure. Report suspected vulnerabilities to support@voiceinbox.app.
10. International transfers
Where personal data leaves the EEA (for example, when a sub-processor is based in the US), we rely on Standard Contractual Clauses or another transfer mechanism approved by the European Commission.
11. Changes to this policy
We will publish material changes on this page and update the "Effective" date above. Where the change is significant we will notify you in the app or by email before it takes effect.
12. Contact
Reel Works (operator of VoiceInbox)
Email: support@voiceinbox.app