Privacy Policy

1. Introduction

GenderVoice LLC ("we," "us," or "our") operates gendervoice.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice training platform.

We are committed to protecting your privacy and handling your data with transparency. Given the sensitive nature of our service — supporting transgender and gender-diverse individuals with voice training — we take extra care to protect your personal information.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, password (encrypted), and optional profile information
• Profile Data: Gender identity, preferred pronouns, voice goals, training preferences
• Payment Information: Processed securely by Stripe; we do not store full credit card numbers
• Communications: Messages you send us, support requests, feedback
• User Content: Any content you create, upload, or share on the platform

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, training session frequency and duration
• Log Data: IP address, access times, referring URLs
• Cookies: See our Cookie Policy for details

3. Biometric & Voice Data

3.1 Voice Data We Collect

• Voice Recordings: Audio recordings you make during training sessions
• Voice Analysis: Pitch measurements, resonance analysis, formant data, speaking patterns
• Progress Metrics: Historical voice data showing your training progress over time
• AI Feedback Data: Anonymized voice characteristics used to generate coaching feedback

3.2 How Voice Data Is Used

• Providing real-time pitch and resonance feedback during training
• Tracking your voice feminization or masculinization progress
• Generating personalized AI coaching recommendations
• Improving our voice analysis algorithms (only with anonymized, aggregated data)

3.3 Voice Data Consent

Before any voice recording or biometric analysis, you will be asked to provide explicit consent. You can:

• Withdraw consent at any time through your account settings
• Request deletion of all voice recordings and analysis data
• Download a copy of your voice data
• Opt out of having anonymized data used for algorithm improvement

For detailed information about biometric data collection and your rights, please see our Biometric Data Consent page.

4. Health Information

Voice training for gender transition may be considered health-related services. While we are not a covered entity under HIPAA, we voluntarily apply HIPAA-like protections to your data:

• Encryption: All health-related data is encrypted in transit and at rest
• Access Controls: Strict internal access controls limit who can view your data
• No Sale of Data: We never sell health-related information
• Audit Logging: All access to sensitive data is logged and auditable

5. How We Use Your Information

5.1 Primary Uses

• Providing voice training features and AI coaching
• Processing your subscription payments
• Sending important account notifications
• Providing customer support
• Tracking your training progress

5.2 Secondary Uses (With Consent)

• Sending optional newsletters and training tips
• Conducting research to improve our services (anonymized data only)
• Personalizing your experience based on usage patterns

5.3 Product Research & Development

We may occasionally invite you to participate in product research activities such as surveys, interviews, or feedback sessions. Participation is always voluntary. When you participate:

• We will clearly explain what information we're collecting and why
• Any recordings (video, audio, screen) require your explicit consent
• Research data is used only to improve our products and services
• You may opt out of research invitations in your account settings
• You can request deletion of any research data you've provided

To opt out of research invitations or request deletion of research data, contact us at privacy@gendervoice.app.

5.4 We Do NOT

• Sell your personal information to third parties
• Share your identity with other users without consent
• Use your data for targeted advertising from third parties
• Share your data with employers, insurers, or government agencies (except as required by law)

6. Data Sharing & Third Parties

6.1 Service Providers

We work with trusted service providers who process data on our behalf:

• Stripe: Payment processing (PCI-DSS compliant)
• Amazon Web Services (AWS): Cloud hosting and storage
• Anthropic: AI services for coaching features
• Email Providers: Transactional email delivery

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

6.2 Legal Requirements

We may disclose your information if required by law, such as:

• In response to a valid subpoena or court order
• To protect our rights or safety, or that of our users
• To investigate fraud or security issues

We will notify you of such requests unless legally prohibited from doing so.

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your data may be transferred. You will be notified of any such change and your choices regarding your data.

7. Data Retention

• Account Data: Retained while your account is active, plus 30 days after deletion request
• Voice Recordings: Retained until you delete them or request account deletion
• Voice Analysis Data: Retained for the duration of your subscription plus 90 days
• Payment Records: Retained for 7 years for tax and legal compliance
• Support Communications: Retained for 3 years
• Anonymized/Aggregated Data: May be retained indefinitely for research purposes

8. Your Privacy Rights

Regardless of your location, we provide all users with the following rights:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request that we limit how we use your data
• Withdraw Consent: Withdraw consent for optional processing at any time

To exercise these rights, visit your Account Settings > Privacy page or contact us at privacy@gendervoice.app.

9. GDPR Rights (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) legal obligations
• Data Transfers: When we transfer data outside the EEA, we use Standard Contractual Clauses or other approved mechanisms
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
• Response Time: We will respond to GDPR requests within 30 days

10. CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we've collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, but you may opt out of any "sharing" for cross-context behavioral advertising
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Personal Information Collected (Last 12 Months)

• Identifiers (email, username, IP address)
• Commercial information (subscription history, payment records)
• Biometric information (voice recordings, voice analysis)
• Internet/network activity (usage data, device information)
• Inferences (voice training progress, personalization data)
• Sensitive personal information (gender identity, health-related voice goals)

Shine the Light: California residents may also request information about disclosure of personal information to third parties for direct marketing. Contact us at the address below.

11. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: TLS 1.3 for data in transit; AES-256 for data at rest
• Access Controls: Role-based access with multi-factor authentication for staff
• Infrastructure: AWS with SOC 2 Type II compliance
• Monitoring: 24/7 security monitoring and intrusion detection
• Incident Response: Documented breach notification procedures
• Employee Training: Regular security and privacy training for all staff

While we strive to protect your data, no method of transmission over the Internet is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.

12. Children's Privacy

Our Service is intended for adults aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@gendervoice.app.

If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you by email (if you have an account)
• We may display a prominent notice on our website
• For significant changes affecting biometric data, we may request renewed consent

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

We will respond to all privacy-related inquiries within 30 days.