Privacy Policy

1. What Information Do We Collect?

Personal Information You Provide

We collect personal information that you voluntarily provide when you use our Services. This may include:

• Voice recordings (the audio files themselves)
• Acoustic measurements derived from them (pitch in Hz, pitch range and stability, volume consistency, duration)
• Gender and age
• Onboarding answers, training progress and exercise completion
• Email address

Voice Data

When you record, the audio is sent over an encrypted connection to our API and forwarded to our own voice-analysis service, which measures it and returns acoustic values (pitch in Hz, pitch range and stability, volume consistency, duration). We keep both: the measurements go in your account's database record, and — once you have an account — the recording itself is uploaded to a private storage bucket reserved for your account, so that you can play your recordings back and compare them over time. Recordings you make before creating an account are analyzed but not stored. We do not use recordings for voice or biometric identification, we do not sell them, we do not use them for advertising, and we do not use them to train anyone's models. The service providers named in section 3 host and process them strictly on our instructions. Your recordings are kept until you delete your account (section 4).

Payment Data

If you make purchases, payment data is collected and stored by Apple. You can find their privacy notice at apple.com/legal/privacy. We receive only the resulting subscription status and purchase events through our subscription providers.

Information Automatically Collected

We automatically collect certain information when you use our Services, including device information, operating system and app version, language, IP address, in-app usage events, crash and error reports, and advertising and attribution identifiers. On iOS, the advertising identifier (IDFA) is only collected if you allow tracking when Apple's App Tracking Transparency prompt appears. This information is used to keep the app running, to maintain security, to improve our Services, and to measure our advertising (section 3).

2. How Do We Process Your Information?

We process your information to:

• Analyze voice depth based on your voice recordings
• Track your voice training progress over time
• Provide personalized voice comparisons and percentile rankings
• Store your recordings so you can replay them and hear your progress
• Improve our application's features and user experience
• Communicate with you about your account and our Services
• Measure the performance of our advertising campaigns

3. When Do We Share Your Information?

We do not sell your personal information. We do rely on the service providers below to run DEEPR. Each one processes data only on our instructions and may not use it for its own purposes, and each entry says what that provider actually receives.

• Supabase — hosts our database and the private storage bucket that holds your account data and your voice recordings.
• Cloudflare — hosts our API and this website; sees request metadata such as your IP address.
• Fly.io — hosts the voice-analysis service that measures your recordings.
• PostHog — product analytics: in-app events, device and usage data. No recordings, and no session or screen recording.
• Sentry — crash and error reports from the app and our servers, including device and diagnostic data.
• Superwall and RevenueCat — showing the paywall and tracking subscription status; they receive your app user ID, device data and purchase events.
• AppsFlyer and TikTok — advertising attribution and measurement; see below.
• OneSignal — push notifications, on older installations where you enabled them; receives your app user ID and the device push token those versions registered. The current app no longer includes OneSignal, so a new install never registers your device with it.
• Resend — transactional email, such as your account deletion confirmation; receives your email address.
• Apple — sign-in, payments and subscription management.
• Google — sign-in, if you choose to continue with Google; Google handles the sign-in and passes us your email address and basic profile.

Advertising and attribution

We advertise DEEPR on third-party platforms, so we need to know which campaigns work. Our attribution partners, AppsFlyer and TikTok, receive app events such as installs, onboarding milestones, trials and purchases, along with device and advertising identifiers. TikTok may use this to measure and target advertising, including showing you personalized ads. Your voice recordings are never part of this. On iOS we ask first, through Apple's App Tracking Transparency prompt: if you decline, no advertising identifier (IDFA) is shared and measurement stays aggregate and non-personalized. You can change your answer at any time in iOS Settings > Privacy & Security > Tracking.

We may also share information in connection with business transfers (such as a merger or acquisition) or when required by law.

4. How Long Do We Keep Your Information?

• Account Data: Retained while you maintain an account. Erased as soon as you delete your account; any residual copies in encrypted backups age out within 30 days.
• Voice Recordings: Kept in your account's private storage until you delete your account, so you can replay and compare them. Recordings made before you create an account are analyzed and not stored. You can delete everything at any time (section 10).
• Acoustic Measurements: Kept alongside your recordings for as long as your account exists — they are the progress history the app is built on.
• Analytics, Crash and Attribution Data: Kept by our analytics, error-reporting and attribution providers for up to 12 months.

5. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures, including encryption, access controls, and regular monitoring. Your recordings live in a private storage bucket that is not publicly readable: the app reaches them through short-lived signed links issued to your session, and audio is encrypted in transit. However, no electronic transmission over the internet can be guaranteed 100% secure.

6. Do We Collect Information From Minors?

We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data should contact us at support@getdeepr.app.

7. What Are Your Privacy Rights?

Depending on your location, you may have rights including:

• Access to your personal information, including your stored recordings
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Objection to processing
• Withdrawal of your consent to app tracking, at any time, in iOS Settings > Privacy & Security > Tracking

To exercise these rights, contact us at support@getdeepr.app or manage your data through the app settings.

8. Do We Make Updates To This Policy?

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this policy periodically.

9. How Can You Contact Us?

If you have questions or comments about this policy, email us at support@getdeepr.app.

10. How Can You Manage Your Data?

You can review and update your information in the DEEPR app settings. To delete your account and all associated data, go to Profile > Settings > Delete Account in the app. This erases your profile, your recording history, your stored voice recordings and your push subscription, and closes your sign-in account. Deletion is immediate and cannot be undone.