Effective date: October 1, 2026 · Last updated: October 1, 2026
Voicenest is built and operated by Shengjun Sun, an individual developer. For anything in this policy, email hello@voicenest.com. A human reads every message and we aim to reply within 7 days.
This is the core promise of the product, so it comes before anything else:
Everything the app works with lives on the Customer's iPhone: the storyteller's nickname and relationship label, the weekly questions and their status, audio recordings, transcripts, follow-up questions, and any PDFs or voice archives you generate. This data stays on the device and is removed when you delete the app.
The app backs up your stories to your own private iCloud database
(CloudKit container iCloud.com.ssj.voicenest) so you can restore them on
a new phone. This is the Customer's personal iCloud storage: the developer has no
access to it, cannot read it, and cannot delete it. Apple's iCloud terms and
Apple's privacy policy apply to that storage.
To let a Storyteller record without installing anything, we run a small "mailbox" on Cloudflare (Pages Functions + R2). Here is everything it touches:
#),
which browsers never send to servers.If a family member sent you a recording link, this section is for you:
Legal basis (EEA/UK): we process a Storyteller's voice through the mailbox on the basis of consent (GDPR Art. 6(1)(a)), given when they choose to record and send. The Customer's own use of the app rests on contract and legitimate interests. Consent can be withdrawn at any time, free of charge and without any detriment, by emailing us.
Speech-to-text uses Apple's Speech framework configured for on-device recognition only. If a device cannot transcribe on-device, Voicenest simply does not transcribe — audio is never sent to any speech service. Follow-up question suggestions are generated by rule-based, on-device text analysis. No large language model and no cloud inference is involved anywhere in the app.
We do not ask for health, religious, political, racial, biometric, or sexual-orientation information, and no question in the app requests it. Because recordings are free-form, a storyteller may mention such matters on their own; we cannot read or analyse recordings, and we do not derive, infer, or use any such information. We do not collect, use, sell, or share consumer health data as defined by the Washington My Health My Data Act or Nevada SB 370, and we have no technical ability to access recording content.
Voicenest is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has recorded through a Voicenest link, email us and we will destroy anything still on the server.
You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may also complain to your local supervisory authority (in the UK, the Information Commissioner's Office). Because there is no account, please include the recording link token or the approximate recording date in your email so we can locate anything that may still be on the server — in most cases nothing is, because recordings are deleted at pick-up.
Residents of California, Colorado, Connecticut, Virginia, Texas, Washington, and other states with privacy laws have rights to know, delete, and correct personal information, and to opt out of sale, sharing, or targeted advertising. To be clear: we do not sell or share personal information, we do not run targeted advertising, and we do not profile anyone for automated decisions — so there is nothing to opt out of. We offer no financial incentives in exchange for data. If we ever deny a rights request, you may appeal by replying to our decision email, and you may use an authorised agent by including a signed permission with the request. This section, together with sections 4-6, serves as our notice at collection.
The mailbox runs on Cloudflare's global edge network, so an encrypted recording may be processed in the region closest to the storyteller. Transfers from the EEA/UK rely on Cloudflare's Data Processing Addendum incorporating the EU Standard Contractual Clauses and the UK IDTA Addendum. Remember that the content itself is end-to-end encrypted and unreadable in transit and at rest on our side.
Recordings are encrypted in the browser with AES-GCM before upload; the key travels only inside the link fragment and is never transmitted to any server. All connections use HTTPS/TLS. Tokens are single-use and high-entropy. Encrypted audio is deleted immediately after pick-up, and there is no admin console that can read mailbox content.
An honest limitation: anyone who obtains the complete link —
including the part after # — can open the question and, before pick-up,
submit a recording. Treat a recording link like a house key: send it directly to
your family member, and if it leaks, simply send a fresh one and let the old link
expire.
The Gift is a one-time purchase processed entirely by Apple. We never receive or store payment details. Entitlement is verified on your device via StoreKit; no purchase information is sent to our server.
If we make a material change, we will update this page, change the effective date at the top, and note the change in the app's release notes before it takes effect. Continued use after the effective date means the updated policy applies.
Email hello@voicenest.com and a human will answer — usually within 7 days. If you are unhappy with our answer, section 11 and section 12 describe the authorities you can turn to.