Privacy Policy

This Privacy Policy (the “Policy”) is issued by Umakhan PRO LLC, registered at Shams Media City, Sharjah, United Arab Emirates (the “Company”, “we”, “us”). It applies to personal data processed in connection with the VocaLingo website, web application and mobile applications for iOS and Android (together, the “Service”). By accessing or using the Service you acknowledge this Policy. If you do not agree, you must not use the Service.

The Service is intended solely for persons aged eighteen (18) years or over. We do not knowingly collect personal data from children. Upon becoming aware that data relating to a person under eighteen has been collected, we shall delete the relevant account and associated data insofar as reasonably practicable, save where retention is required by law or for the prevention of abuse.

We process such personal data as is necessary to operate the Service, including account identifiers (email address, name or display name, and identifiers associated with third-party sign-in where used); language, timezone and preference settings; content you submit or generate (text, prompts, chat, documents, images, audio, video, voice samples and tool history); telephone numbers and call metadata where you use calling features; optional address-book access limited to numbers you select for a call; device, network and application technical data; approximate location derived from network address; identifiers used for security and fraud prevention; notification tokens where notifications are enabled; diagnostic and usage data; records of credits, purchases and promotions; and cookies or equivalent storage on web surfaces. Device permissions (microphone, camera, media library, contacts, notifications) are requested only where a feature so requires and may be refused or withdrawn in system settings, in which case the corresponding feature may be unavailable. We do not conduct continuous background geolocation.

We use personal data to provide, maintain and secure the Service; to authenticate users (including anonymous sessions subsequently linked to an identified account); to process payments, subscriptions and promotional credits; to transmit transactional and, where enabled, push communications; to provide support; to detect, prevent and investigate fraud, multi-accounting, promotional abuse and other misuse; to measure and improve the Service; to comply with legal, tax, accounting and platform obligations; and to establish, exercise or defend legal claims. Where the GDPR or analogous laws apply, processing is based on performance of a contract, legitimate interests (in particular security, abuse prevention and service improvement, balanced against your rights), consent where optional permissions or marketing so require (withdrawable without affecting prior lawful processing), and legal obligation.

Where you complete a token-earning task by submitting a public post, video, article or similar material, we process that URL and content to verify originality and authorship, to confirm that the material remains publicly available, to grant or refuse credits, and to prevent abuse. We may also republish and display that public material on our website, applications and social-media channels for promotional and informational purposes, as described in the Terms of Use.

The Service is an artificial-intelligence product. When you use a feature that needs it, the content you submit is sent over the internet from the application to our servers and from there to the third-party AI services that perform the task. The content sent is what you record, upload, type or speak: voice recordings, audio and voice samples, video, images, text, prompts, chat messages and attached documents, together with the settings of the request (such as language and chosen voice or model). The recipients are: OpenAI (speech, text and image processing), Anthropic, Google (Gemini) and xAI (language models), DeepSeek and MiniMax (language, speech and voice models), ElevenLabs (speech recognition, speech synthesis, voice changing and voice cloning), Replicate and fal.ai (speech synthesis and voice cloning), HeyGen (video translation and dubbing; it receives the video and the chosen languages) and Mirage (animated subtitles; it receives the video). fal.ai may also serve as a backup route for HeyGen video translation. When the AI chat uses its tools, data also goes to Tavily (web search; it receives the search query the assistant writes from your message), E2B (an isolated environment for running code; it receives the code the assistant writes and the files you attach to the chat or project) and Google Maps Platform (place search and directions; it receives the place, address or route points from your request). Which of them receives your content depends on the feature and the model you use. They process it only to perform your request and return the result. The application asks for your permission before it first sends such content, and shows this list; if you decline, features that depend on AI services are not available. You can withdraw your permission at any time by writing to info@vocalingo.app. We do not sell personal data and do not use your content to train our own foundation models. We do not routinely attach your account email or name to processor requests as an identifier; content you submit may nonetheless contain personal data if you include it. Where a processor offers a control not to use API or customer content for model training, we enable it. We do not control all independent practices of processors. Their terms and policies apply in addition to this Policy. Processors may process data outside your country of residence.

Some features send your content to service providers that are not AI services. Telnyx carries calls: it receives the telephone numbers you call or add for verification, the call audio and call metadata (time, duration, status). FastSaver, video-download-api.com and RapidAPI (Auto Download All-in-One) download media from links: they receive the link you submit and return the video or audio file. Resend delivers our emails: it receives your email address and the text of emails sent to you or to our support, such as reminders you set in the chat and messages from the support and account deletion forms. These providers process the data only to perform the request.

Calling features, where offered, involve telecommunications and, if enabled by you, real-time or recorded processing of call audio for translation or assistance. You are solely responsible for informing other parties and for obtaining all consents required by applicable intercept, recording and privacy laws in every jurisdiction implicated by the call. Custom-voice features process a voice sample to produce a voice profile. You may submit only a voice you own or for which you hold all required rights and consents, and you shall not use synthetic voice to impersonate, defraud or otherwise infringe the rights of others. We may delete voice profiles and related outputs where we reasonably believe rights are lacking or abuse has occurred. If you submit data relating to third parties, you warrant that you have a lawful basis to do so; we process such data on your instructions.

Payments are processed by the relevant app-store or payment institution (including Apple, Google, subscription-entitlement intermediaries, web checkout providers and, in selected regions, local payment institutions). We do not store full payment-card numbers. We share personal data with processors only as required to operate the Service, including artificial-intelligence and media processors, telecommunications providers, hosting, authentication and storage providers, payment and entitlement providers, security and fraud-prevention providers, analytics, diagnostics and notification providers, and professional advisers or public authorities where required by law or to protect our rights. A current description of processor categories is available on request at info@vocalingo.app. We do not sell personal data and do not share it for cross-context behavioural advertising.

Data are stored and processed on infrastructure of our hosting and database providers. We apply access controls and encryption in transit. No transmission or storage is entirely secure. Account and content data are retained while the account remains active and until deletion of items or of the account, subject to backup cycles. Payment, credit, promotional and security records may be retained after closure or suspension as required for accounting, tax, fraud prevention and disputes. You may delete results in the application and may delete your account. Immediate erasure is not available where law or fraud prevention requires retention.

The Company is established in the United Arab Emirates. Personal data may be processed in the UAE and in other countries where our processors operate, which may not afford an equivalent level of protection. Where required, we rely on appropriate safeguards. Depending on your location, including the UAE PDPL, EU/UK GDPR and California CCPA/CPRA, you may have rights of access, rectification, erasure (subject to exceptions), restriction, objection, portability, withdrawal of consent, complaint to a supervisory authority, and opt-out of sale or sharing (we do not sell personal data). Requests: info@vocalingo.app from the address associated with the account. We may verify identity. Exercise of rights will not result in discriminatory treatment. Web surfaces use cookies or local storage for locale, session and analytics; blocking them may impair functionality. Native applications use software development kits for equivalent operational and analytics purposes rather than browser cookies.

This Policy may be revised. The date of last update shall be amended accordingly. Material changes may additionally be notified in the Service or by email. Continued use after the effective date constitutes acceptance except where applicable law requires a different form of consent. Privacy enquiries: info@vocalingo.app.