Privacy Policy

• We do not sell your data. There are no advertisers and no ad trackers on this site.
• We do not keep your audio or video. Recordings are processed to produce your feedback, then discarded. We store the transcript and the coaching report, not the recording.
• We do not use your voice to identify you. Elovox does not create a voiceprint or any biometric identifier, and does not attempt to recognize who is speaking.
• We never see your card details. Payments run entirely through Stripe.
• You can erase your entire account from your account settings, no email and no waiting. You can also delete individual practice sessions from your history, a few each day.

Elovox is operated by Tyson Youm, Arad Mehrabian, Aanya Iyer, and Kelley Gou. For anything in this policy, whether a question, a request, or a complaint, email privacy@elovox.app. We are the data controller for the information described below.

Your account. An email address and a password. The password is handled by Google Firebase Authentication and stored only as a salted hash. Elovox never receives or stores your actual password. We also record whether your email has been verified.

The tips list. We used to collect addresses for a speaking-tips list from a form on the site. That form is gone and we are not collecting for it or sending it at present. Addresses given before then are still stored, still used for nothing else, still never sold or shared, and still yours to remove: every email we sent carries an unsubscribe link that works without signing in, deleting your account removes the address, or you can email privacy@elovox.app.

Emails to your account. If you have an account, we send you things you can't switch off and things you can. The ones you can't are about your account itself: a warning when someone is trying to sign in as you, and anything to do with a payment. We think you'd want those, and turning them off would leave you in the dark about your own money and security. Everything else (a weekly summary of your practice, a nudge about a streak you're about to break, a single note if you've been away a while) is optional and switchable under Email in your account settings, or from the unsubscribe link in any of them. We do not add account holders to the tips list, or the tips list to anything else.

Your recordings. When you practice, your browser records audio, and video frames as well if you turn the camera on. These are sent to our server so they can be analyzed. See “What happens to a recording” below.

Your practice history. The transcript of what you said, the metrics we calculate from it (pace, filler words, pauses), the coaching report, your score, duration, and the date. This is the part that persists, because it's what your progress is made of.

Billing information. If you subscribe, we store the identifiers Stripe gives us: a customer ID, a subscription ID, your plan, its status, and when the current period ends. Your card number is entered on Stripe's own checkout page and never reaches our servers.

Limited technical data. Our servers log requests, including IP addresses, which we use to enforce rate limits and to stop abuse. We count how many analyses a free account has run each day in order to enforce the free-tier limit.

Your leaderboard row. Every scored session updates a public row holding your XP, your level, your streak, and the display name you choose. Any signed-in user can read it, which is what makes a leaderboard a leaderboard. Choosing a display name is optional and a row without one appears as an anonymous speaker, but the row itself is part of practising and there is no way to switch it off. Your signup name is never in it, and neither is anything you said.

This is the part most people want to know, so here it is step by step:

• Your browser records you and sends the audio to our server. It is not written to disk on our side.
• The audio is passed to AssemblyAI, which transcribes it and returns the words with their timings.
• Our server checks that transcript against a list of swear words and slurs. Matches are hashed out before anything else sees them, so the report you get, the copy we save, and the copy Gemini reads are all masked. No person reads your practice to do this.
• The transcript and the timing metrics are sent to Google's Gemini API, which writes the coaching feedback.
• If you recorded with the camera on (a Premium feature), a small number of still frames, no more than twelve, are sent to Gemini as well, so it can comment on posture, gestures and expression.
• The transcript and the finished report are saved to your account. The audio and the video frames are not saved by Elovox.

Once a recording reaches AssemblyAI or Google, their own retention rules apply to the copy they hold; both are linked below. If you sign out or use Elovox without an account, your practice history is stored only in your own browser and never reaches our servers.

If you are in the UK, EU, or another region with similar law, our legal bases are: performance of a contract for everything needed to deliver the coaching you asked for and to bill you for it; legitimate interests for keeping the service secure and preventing abuse; and your consent for the camera, which is off unless you switch it on and which you can withdraw at any time by turning it off.

We also read our own numbers in aggregate to understand and improve Elovox: how many people signed up this week, how many practiced today, the average score across everyone. Those are counts and averages about the whole userbase at once; nothing in them identifies you.

We use these companies to run Elovox. They may only process your data to provide their service to us, and none of them are permitted to sell it:

• Google Firebase: Account sign-in, and storage of your practice history
• AssemblyAI: Speech-to-text transcription of your recordings
• Google (Gemini API): Generating your coaching feedback from the transcript, the camera analysis when you record with video, and writing the practice material you ask for from the brief you type
• Fish Audio: Turning Felix's written take on a report into his voice, only when you press play
• Stripe: Subscription payments and billing, Elovox never sees your card details
• Resend: Sending our emails: account and security notices, billing receipts, and the optional ones you can switch off
• Vercel: Hosting and delivery of the website, and privacy-friendly, cookieless traffic analytics
• Google reCAPTCHA: Telling real browsers from bots at sign-in and on the recording and speech-writing pipeline, to stop abuse of the paid pipeline

These providers are based in the United States, so using Elovox involves transferring your data there. We may also disclose data if we are legally required to, or to protect the rights and safety of our users.

• Practice sessions: until you delete them, or until your account is deleted.
• Account details: for as long as your account exists.
• Billing records: retained by Stripe, and by us in summary form, for as long as tax and accounting law requires.
• Server logs: a short operational window, then discarded.
• Audio and video: not retained by Elovox at all.
• Enforcement and operator-action records: kept after an account closes. If we warn, suspend or close an account, or an operator acts on one, the record of that decision outlives the account, so we can answer for it. It holds what was decided and why, never what you said.
• Why a session was deleted: kept as an anonymous product signal, with the link to you and to the session removed when your account is deleted.

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. Depending on your region you may also have the right to object to or restrict certain processing, to receive your data in a portable format, and to complain to your local data protection authority.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any of your rights.

The fastest route for most of this is the app itself: you can delete individual sessions from your history, and your account settings will permanently erase your entire account (history, profile, and login) along with canceling any subscription. The two exceptions are named under “How long we keep things” above: an enforcement or operator-action record, if there is one, and the anonymous note of why a session was deleted, which stops being connected to you. For anything else, email privacy@elovox.app and we'll respond within 30 days.

Elovox is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal information, email us and we will delete it. If you are between 13 and 18, please use Elovox with a parent or guardian's permission.

Elovox sets no advertising cookies and runs no ad trackers. To keep you signed in, Firebase Authentication stores a token in your browser (in IndexedDB, falling back to local storage); clearing your browser data signs you out. When you're not signed in, your practice history is stored in your browser too. We use Google reCAPTCHA to keep bots off the paid pipeline, and privacy-friendly, cookieless analytics to count page views. The full list of what's kept on your device, and why there's no cookie banner, is on the cookies & storage page.

Traffic is encrypted in transit. Practice history is stored under your account and protected by database security rules so that other users cannot read it. No system is perfectly secure, so we can't promise the impossible, but we don't retain the most sensitive material (your recordings) at all, which is the strongest protection available.

Inside Elovox, a small number of operators can see account records (your email, your plan, how many sessions you've run) because running the service and answering support mail requires it. What they don't do is browse your recordings, transcripts, or reports: those stay private to your account. The one time an operator touches a copy of your content is to fulfill an export or deletion you asked for yourself, and every such action is logged.

If we change how we handle your data, we'll update this page and move the date at the top. For a significant change we'll tell you in the app or by email before it takes effect.