Your privacy matters.

Who operates Voxendi

Voxendi is an independent software product operated by Vadzim Ramanouski in Poland. For the limited personal data described in this policy, Vadzim Ramanouski acts as the data controller. Privacy requests can be sent to privacy@voxendi.com.

Privacy at a glance

• In offline modes, speech recognition happens on the iPhone using Apple system technologies or an on-device Whisper model. Camera text recognition uses Apple system technologies. Downloading the Whisper model requires a connection to its model host; audio and transcribed speech are not sent to the model host. Offline translation happens on the iPhone using Apple or OPUS-MT language models. OPUS-MT models are downloaded from Hugging Face; the model host receives a download request, not the text being translated.
• Online voice translation and conversation stream microphone audio through our Cloudflare service to Google Gemini and receive translated audio and text through that service. The App informs you before starting these modes.
• Our service forwards online conversation audio and translated content in memory without storing them. Other translation text, clipboard content, and camera images are processed on the device as described below.
• Optional translation history is stored only on the device.
• RevenueCat processes pseudonymous purchase information and standard Apple Ads attribution, and Sentry receives privacy-filtered technical diagnostics.
• Where enabled, Amplitude processes product-usage events and pseudonymous identifiers, without translation content.
• The App has no third-party advertising SDK, does not access IDFA, and does not use data for cross-app tracking.

Speech, text, and camera translation

In offline live translation, Apple speech recognition creates a transcript and Apple Translation translates it locally. Other offline speech modes may use Apple speech recognition or an on-device Whisper model, and offline text translation may use Apple Translation or OPUS-MT models. Raw microphone audio is not saved by the App or transmitted to Voxendi, RevenueCat, Sentry, or Amplitude in offline mode.

When you choose online voice or conversation translation, microphone audio is streamed through our service hosted by Cloudflare to Google Gemini, and translated speech and transcripts are returned through that service. Our service forwards this content in memory without saving it; Google processes it under its applicable terms. The App does not save raw audio. Translation text may be kept locally if history is enabled. See Gemini API terms.

Typed or pasted text is processed on the device. Clipboard content is accessed only after the user selects Paste.

The camera captures an image only after the user selects the capture control. Apple Vision recognizes text locally. The image may temporarily exist in the App's system-managed cache while it is processed, but it is not uploaded to Voxendi, added to Photos, or stored in translation history.

Local history and preferences

History is enabled by default and keeps up to 20 recent translation sessions in the App's local database. A user can disable future history or clear all saved history in Settings. Language preferences, speech settings, onboarding status, and the one-time free-session state are kept in iOS-protected local storage.

Purchases and subscriptions

Apple processes App Store purchases. RevenueCat helps the App retrieve products, validate receipts, restore purchases, verify access, and measure Apple Ads campaign performance. RevenueCat may process an pseudonymous App User ID, App Store receipt and purchase history, subscription status, timestamps, standard Apple Ads campaign, ad group, keyword, placement, creative, country or region, and conversion metadata, app version, operating system, device type, locale, currency, and last-seen time.

The App uses Apple's standard AdServices attribution token so RevenueCat can request campaign information from Apple. This does not access IDFA, does not require App Tracking Transparency permission, and is not used to track activity across other companies' apps or websites.

Voxendi does not provide RevenueCat with a name, email address, advertising identifier, transcript, translation, audio, or camera image. To manage online dialogue access and purchased minutes, the App supplies RevenueCat with a randomly generated Voxendi identifier; it is not a name or email address.

Product analytics

In versions where product analytics is enabled, we use Amplitude, Inc. to understand how people use Voxendi, identify technical friction, and improve translation features and subscription flows. Analytics events may include:

• app opens, screen views, onboarding steps, and event timestamps;
• translation mode, selected source and target language codes, language-picker interactions, and search result counts; raw search text is not sent;
• language preparation, translation success or failure, result counts, session duration, and whether Bluetooth audio is in use;
• subscription offer views, selected plan, displayed price and currency, trial eligibility, purchase attempts, cancellations, restoration outcomes, and access status;
• app version, interface locale, device model, operating-system information, and SDK-generated device and session identifiers.

We use the RevenueCat App User ID as the Amplitude user ID to associate usage with subscription outcomes. When the RevenueCat integration is enabled, RevenueCat also sends subscription events such as trial starts, paid conversions, renewals, cancellations, and related transaction metadata to Amplitude. These identifiers are pseudonymous, not anonymous: they allow events from the same customer or app installation to be linked without requiring a name or email address.

We do not send microphone audio, transcripts, translations, typed or pasted text, camera images, local history, raw language-search text, or raw error messages to Amplitude. Session replay and automatic interaction or network-request capture are disabled. Advertising identifiers (IDFA), IDFV, carrier information, and IP-based location enrichment are disabled in the analytics SDK. Network providers still process IP addresses in transit to deliver requests.

The intended hosting region for Voxendi's Amplitude analytics is the European Union. Analytics is not enabled in versions without a configured analytics project. Clearing local translation history does not delete analytics events already sent to our service providers.

Privacy-filtered diagnostics

Sentry helps diagnose crashes and technical failures. A diagnostic event may contain a filtered stack trace, App and iOS version, general device model, time, runtime information, a technical operation name, and a non-content error code.

The App removes user fields, request data, breadcrumbs, screenshots, view hierarchy, free-form messages, and extra context before transmission. Session replay, profiling, performance tracing, screenshots, and interaction tracking are disabled. Network information such as an IP address may be processed in transit to deliver the event.

Service providers

Limited information is processed by Apple for iOS technologies, purchases, and standard Apple Ads attribution; RevenueCat for subscription management and campaign measurement; Cloudflare for hosting our online dialogue relay and usage ledger; Google for online voice and conversation translation; and Functional Software, Inc. (Sentry) for privacy-filtered diagnostics. Sentry is configured for European data hosting. Amplitude, Inc. processes usage and subscription events where product analytics is enabled; its intended hosting region is the EU. See Amplitude’s Privacy Notice. We do not sell personal data or disclose it for behavioral advertising.

Purposes, legal bases, and international transfers

Where EEA or UK data-protection laws apply, we rely on contract for subscription access and support; legitimate interests for security, reliability, fraud prevention, and campaign measurement; and legal obligations where applicable. For product analytics, we rely on consent where required, including for device storage or access. Where permitted without consent, we rely on our legitimate interest in understanding feature use and improving the App, subject to applicable safeguards and rights to object. Microphone and camera permissions are not analytics consent.

Some providers may process data outside Poland or the EEA. Where required, we use recognized transfer safeguards, such as adequacy decisions and standard contractual clauses. EU hosting does not mean every subprocessor or support activity takes place exclusively in the EU.

Your choices and deletion

• Revoke microphone, speech-recognition, or camera permission in iOS Settings.
• Withdraw consent for online voice translation in Voxendi Settings; offline translation remains available.
• Disable or clear translation history in Voxendi Settings.
• Manage or cancel subscriptions through Apple's subscription settings.
• Where analytics relies on consent, withdraw it; where it relies on legitimate interests, object by contacting us.
• Email privacy@voxendi.com to request access, correction, deletion, restriction, portability, or objection where applicable.

Because the App does not require an account and uses an pseudonymous subscription identifier, limited receipt or device-side reference information may be needed to locate a record. We will never ask for an Apple Account password or full payment-card information.

Retention and security

Local history remains until the user clears it or iOS removes the App database. RevenueCat records are retained as needed for subscription operation, fraud prevention, accounting, and legal requirements. Sentry diagnostics follow the limited retention configured for the project. Amplitude events are retained only as long as needed to evaluate feature use and subscription outcomes, subject to project retention settings and applicable deletion requests. Clearing local history or uninstalling the App does not automatically delete remote analytics records. We use data minimization, encrypted connections, iOS-protected storage, and processor safeguards.

Children, changes, and contact

The App is not directed specifically to children under 13, and Voxendi does not knowingly collect a child's translation content or contact information. We may update this policy when the App, law, or providers change.

Privacy questions: privacy@voxendi.com.