VoiceShelf Privacy Policy

Last updated: 28 October 2026

VoiceShelf is an app for recording memories in your own voice and sharing them with the people you choose. This policy explains what we collect, why, who can see it, and the choices you have. "We", "us" and "our" mean Vydeesh Reddy Pendru, an individual developer in India who publishes apps under the name AllBlue (a brand name, not a registered company). Contact: privacy@voiceshelf.app.

What we collect

When you create an account: your email address and a password (stored only in hashed form by our authentication provider). You choose a username, which others can see, and may add a bio.

What you create: recordings of your voice, with an optional title and caption, the prompt you answered (if any), when you recorded it, how long it is, and who may listen to it. Likes and comments you leave, people you follow or ask to follow, who follows you, your close-knit group, people you block, and reports you make. Questions you send to people who follow you, and questions sent to you, with whether you answered or dismissed them.

On your phone only: recordings you keep on the device and haven't uploaded, a copy of your own username and bio so the app can open without a connection, and settings needed to keep you signed in. These stay in the app's private storage on your phone; we don't receive them unless you upload a recording. Android's cloud backup copies none of it; a phone-to-phone transfer may copy recordings kept on the device, which then appear only when you sign in to your own account.

If you write to us: what you send, for example through "Send feedback", which opens your own email app with the app's version and your Android version filled in. Nothing else is attached.

Security check: before you sign up, sign in, confirm your password to delete your account, or ask for a code by email — in the app or on our account-deletion page — a short automatic check by Cloudflare, Inc. ("Turnstile") tells people apart from automated scripts. To do that, Cloudflare receives information from your phone or browser, such as your IP address and technical details about the browser and device, under its own privacy terms. We receive only whether the check passed; we don't store what Cloudflare collected.

On your phone, for recovering your recordings: when you type your password in the app, your phone keeps a one-way check of it, locked with a key that never leaves your phone's secure storage. It lets your username and password open recordings still kept on that phone if you can no longer sign in (for example, after deleting your account elsewhere). It is never sent to us or anyone, can't be turned back into your password, and is removed when you delete your account in the app on that phone.

We do not collect: your location, contacts, photos, advertising identifiers, or analytics about how you use the app. There are no ads. We don't add crash-reporting tools to the app; Google Play may give us anonymous crash statistics for the app. We don't track you across other apps or websites, and neither the app nor our website loads advertising or analytics code from other companies. The security check below collects technical information only to tell people from automated scripts. Because we don't track you, we treat browsers that send a "Do Not Track" signal the same as any other.

Why we use it

To run the service you asked for — your account, storing and playing recordings, sharing them with the people you choose, follows, likes and comments; to keep people safe — handling reports, blocking, and acting on content or accounts that break our rules; to send you account emails (verification codes, password reset codes); and to answer you when you write to us.

Who can see what

• Your username and bio are visible to signed-in users, except people you have blocked or who have blocked you. Follower and following counts are visible; the lists only to you.
• Each recording has one setting: Public (anyone signed in), Followers (people you've approved), Close-knit (people you put in your close-knit group), or Private (only you). You can change it at any time. Links to a recording only work for people who may already listen.
• Comments are visible to everyone who can hear the recording, with the commenter's username. Likes are shown as a count.
• Questions someone sends you are seen only by the two of you. If you answer, your answer is a recording like any other: you choose who hears it, and the question is shown with it to those people (never who asked). The person who asked sees that you answered only if they may hear your answer, and sees if you dismissed the question.
• Reports are private: the person you report, and other users, can't see who reported them. We, and anyone we authorise to help with moderation, can see who made a report, only to handle it.
• We, and anyone we authorise to help with moderation, can access content to handle reports and keep the service safe and working, and only for that.

We don't sell your information and don't share it for advertising. We use service providers who process it on our behalf: Supabase Pte. Ltd. (database, storage and sign-in; hosted in India, in Supabase's Mumbai region — recordings are delivered through its content delivery network, which may keep temporary copies on servers in other countries), Resend (Plus Five Five, Inc., a US company; sending account emails from Japan and storing their data and logs in the United States), Cloudflare, Inc. (the security check above, and hosting our website, including the account-deletion page), Zoho Mail (Zoho Corporation Private Limited; receiving, in India, the emails you send to our contact addresses) and Google Play (distributing the app).

Your account, recordings and the emails you send us are stored in India. Some of your information is also processed in other countries: account emails are sent from Japan and their data and logs are stored in the United States, recordings may be cached on servers in other countries, and the security check runs on Cloudflare's worldwide network. Wherever it is, it may be accessed by courts, law enforcement or national-security authorities under the laws of that country.

How long we keep it

• Your account and everything you uploaded: until you delete them or your account.
• When you delete your account (in the app or at https://voiceshelf.app/delete-account/): your account, profile, recordings, likes, comments, follows, close-knit group and blocks are deleted right away; files and sign-in records within about 15 minutes. What remains: your username, in a list of names that can't be registered again, so nobody can take it over (that list doesn't record your email address or account, but people who knew your username may still recognise it); a record of your registration (your email address, username, when you signed up and which terms you accepted) for 180 days, as Indian law requires; reports about content, with a small snapshot, until they expire (at most one year after they're resolved); if a recording was deleted while a serious report about it was open, its audio, kept as evidence until the report is resolved and for at most 90 days; content we removed — for breaking our rules, or on a complaint or legal order — with its report, for 180 days from its removal, as Indian law requires, even if the report is resolved sooner; anything under a legal hold, for as long as the hold lasts; reports you made, with your name removed; a record that a deletion took place, without content, for 30 days; and, if a backup was made while your information existed, the copy in that encrypted backup until the backup is deleted. We make and delete backups by hand and delete each one once it is 30 days old; because this is a manual step, a backup can sometimes be kept longer before it is deleted.
• Recordings on your phone stay there until you delete them or the app.

Your choices and rights

• Download your recordings: Account → Export my recordings saves a copy of all of them — uploaded and on your phone — as one file you keep.
• Correct: edit your bio; change who can hear each recording; delete recordings or comments.
• Delete your account: Account → Delete account, or at https://voiceshelf.app/delete-account/ if you no longer have the app.
• Sign out of all devices: Account → Sign out of all devices. Other phones are signed out when their current sign-in runs out, not instantly.
• Ask about your information: write to privacy@voiceshelf.app to ask for a copy of the information we hold about you, or to have it corrected or deleted. We'll answer within 30 days. If you're not satisfied, you may be able to complain to a data protection or privacy authority, depending on the law that applies to you — in Canada, the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d'accès à l'information.
• Complain about content or a moderation decision: report it in the app, or write to safety@voiceshelf.app. To ask for something to be removed urgently — for example intimate images of you shared without your consent, or someone impersonating you — write to safety@voiceshelf.app and say what it is and where; we handle these first, within the time the law sets.

Children

VoiceShelf is not meant for children. You must be 18 or older to use it.

Security

Access rules are enforced by our servers for every request, not only in the app. Connections are encrypted. If we make backups, each is encrypted (AES-256) with a passphrase that is never stored with it, and kept only on our own computer and drives, not on any online service. No system is perfectly secure; if you think your account has been misused, change your password and use "Sign out of all devices", and contact us.

Changes

We'll update this page and its "Last updated" date when our practices change. If a change significantly affects how we use your information, we'll post a notice on this page at least 30 days before it takes effect. Changes to the Terms of Service or Community Guidelines are also shown in the app, which asks you to accept them before you go on.

Who is responsible

Vydeesh Reddy Pendru is responsible for how we handle personal information, and is the person in charge of the protection of personal information for Quebec: privacy@voiceshelf.app. The same person is our Grievance Officer under Indian law, for complaints about content and moderation: safety@voiceshelf.app. We acknowledge those complaints within 24 hours and resolve them within 7 days, or sooner where the law requires.

Contact

privacy@voiceshelf.app · Safety concerns: safety@voiceshelf.app