Privacy Policy

Who we are. VoxClip is operated by VoxClip VOF, a general partnership (vennootschap onder firma) registered in the Netherlands, KvK 89167317 ("VoxClip", "we"). Contact: privacy@voxclip.it. We are the controller for the processing described here, under the EU General Data Protection Regulation (GDPR).

The short version. The free app keeps your Timeline content and voice on your device; we receive none of it. This website runs analytics only if you allow it — nothing is tracked and no analytics cookies are set unless you choose "Allow" on the banner. Account sign-in uses necessary Clerk cookies. Plus cloud features send content only after you turn them on: sync sends ciphertext we cannot read, AI sends only approved text, and team snippets you choose to share are stored on our servers.

1 · The free app

Your Timeline (clips, dictations, snippets, settings) is stored in a local database on your device. Dictation audio is processed on your device and held in memory only, unless you enable the optional local "keep recordings" setting; those recordings also stay on your device. Choosing a voice model downloads that model from Hugging Face to your device. No Timeline content or audio is sent with that request. By default, VoxClip also makes a version-only request to the public GitHub release feed once a day to check for updates; you can turn this off in Settings. The request never includes Timeline content or audio. We receive no telemetry, usage data or crash reports from the free app.

2 · This website

Analytics, only with your consent. On your first visit, a banner asks whether we may use analytics. If you choose "Allow", we use Amplitude (Amplitude, Inc., USA; events are stored in Amplitude's EU data center) to see which pages are visited and which elements are clicked. These events carry page and interaction metadata only — never the contents of anything you type, and we do not use session recording of any kind. Amplitude sets its cookies and local storage only after you allow it. If you decline, or simply ignore the banner, no analytics runs and no analytics cookies are set. To change your mind later, clear this site's cookies and site data in your browser — the banner will ask again. Legal basis: consent (Art. 6(1)(a) GDPR).

Everything else. The Account and Admin pages use necessary Clerk cookies for authentication. Our hosting provider (Railway Corp., USA) processes technical access logs (IP address, user agent, requested page) to serve the site and defend it against abuse; logs are retained briefly for those purposes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Downloads are served by GitHub (GitHub, Inc., USA), whose own privacy terms apply to the download request.

3 · Accounts and billing (VoxClip Plus)

If you subscribe: (a) Identity, authentication is provided by Clerk, Inc. (USA); we process your email address and sign-in metadata. (b) Billing, payments are processed by Stripe, Inc. (USA/Ireland); we never receive your full card details, only subscription status and billing country. (c) Subscription state, we store your account identifier, device names you choose, and whether your subscription is active. Legal basis: performance of a contract (Art. 6(1)(b)).

4 · Sync (end-to-end encrypted)

If you enable sync, your entries are encrypted on your device with keys only your devices hold before upload. Our servers (Supabase, hosted in the EU, region eu-central-1) store ciphertext, encrypted key envelopes, and minimal metadata (timestamps, sizes, device identifiers). We cannot decrypt your synced content, and we build and test the service to keep it that way. If you lose your recovery code, we cannot restore your synced data. Deleting sync data or your account removes the ciphertext from our servers.

5 · AI features ("talk to your stash", transforms, Enhance)

Each request sends only the specific text shown to you in the disclosure step, and only after you confirm. Audio is never sent. Requests are processed via our infrastructure and Anthropic, PBC (USA) as the model provider, configured not to use your content for model training. Request content is not stored by us beyond what's needed to return the answer. Legal basis: performance of a contract; each send is user-initiated.

6 · Shared team snippets

Team snippets are stored on our servers and are not end-to-end encrypted, so other team members can use them. Your personal snippets stay on your device until you choose to share them. Legal basis: performance of a contract; sharing is user-initiated.

7 · Processors

Railway (hosting, USA) · GitHub (downloads, USA) · Supabase (sync and team storage, EU) · Clerk (authentication, USA) · Stripe (payments, USA/IE) · Anthropic (AI processing, USA) · Amplitude (website analytics, USA — EU data residency; only if you consent). Transfers outside the EEA rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses, as applicable per provider.

8 · Retention

Account data: while your account exists, then deleted within 30 days. Encrypted sync data: until you delete it or your account. Shared team snippets: until you unshare or delete them, or delete the team or your account. Billing records: as Dutch tax law requires (7 years). Website logs: short-term rotation.

9 · Your rights

Access, rectification, erasure, restriction, portability and objection: write to privacy@voxclip.it; we respond within one month. You may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). Note that for end-to-end encrypted content, "access" and "portability" are served by your own app; we cannot read it to export it.

10 · Children

VoxClip is not directed at children under 16, and we do not knowingly process their data.

11 · Changes

We'll post changes here with a new effective date; material changes to how Plus data is handled will be announced in the app.