Privacy Policy

1. The short version

• Audio is processed, not kept. What is said goes to the AI services that interpret it and is not retained by us.
• We store a minimal account. A user ID and your interpreting-time ledger; if you signed in with Apple or Google in an earlier version, also the email address your sign-in provider gave us (Apple lets you hide it).
• History stays on your device. Past conversations are saved in the app on your phone and are never uploaded.
• Payments go through Apple or Google. We never see your card.
• Deletion is one tap. Deleting your account in Settings removes your account and its ledger. See section 8.

2. Who is responsible

LinkVoice is published by MissingLayer B.V., a company registered in the Netherlands (KVK 97964840), Korte Lijnbaanssteeg 1/4570, 1012 SL Amsterdam. For the purposes of the EU and UK General Data Protection Regulation, MissingLayer B.V. is the controller of the personal data described here. Contact details are in section 16.

3. Your voice and the conversation

Interpreting

When a conversation is running, what is said is sent to the interpreting services listed in section 7 to be transcribed, translated and spoken in the other language.

On iPhone and iPad, the app names these services and asks for your permission with "Allow" before anything is sent; if you choose "Not now", nothing is sent. You can withdraw it at any time in Settings, and delete your account at any time (section 8). Your answer, and when you gave or withdrew it, is kept with your account, so the app does not ask again on another device.

The conversation also passes through the other service providers listed in section 7. We do not store your audio, transcripts or translations, and none of these services uses them to train models. Google may keep them for a limited period only to detect abuse; the others keep none of it.

Only speech heard after you tap Start is sent.

Typed text and photos

In the Translate and Camera tabs, the text you type and the photos you translate are sent to the AI services listed in section 7 to be read and translated. We do not store them, and these services treat them as they treat the audio above. A photo you translate stays on your device, in History, until you delete it.

Other people's voices

An interpreter necessarily hears both sides of a conversation. You are responsible for telling the other person that LinkVoice is interpreting, where that is expected or required.

4. Your account

Interpreting time is measured on our server, so the app keeps an account for you, known to us by a random user ID. Accounts made in earlier versions may be signed in with Apple or Google; we never see a password. Our authentication service, Supabase, stores:

• a random user ID,
• if you sign in, the email address the provider shares (with Apple you may choose "Hide My Email", in which case we receive a private relay address), which provider you used and the provider's identifier for you,
• the times the account was created and last used,
• if you answer it, how you heard about LinkVoice (one question when you start, which you can skip).

Your account's sign-in is kept in your device's secure storage.

5. Interpreting time and purchases

Interpreting time is charged in seconds against your balance while the app listens. The ledger holds your remaining time, your plan and its period, and one row per charge (the number of seconds and the time). It does not record what was said. For each interpreting session our server also keeps how much the AI services processed, with your account, the mode and the language pair, so that we know what the service costs; never audio or text. For the Translate and Camera tabs it keeps, per request, how much was processed and its cost with your account, to apply the limits of your account; never the text or the picture.

Purchases are made through Apple's App Store, or Google Play on Android. To credit your time we receive the store's confirmation of each purchase, renewal and refund, and keep its transaction identifier, product identifier, expiry date and environment, so that each is applied exactly once. We also store the store country of each purchase with these records and use it to set the fair-use limit of your subscription, and, for App Store purchases, the price paid and its currency, so that we can tell which of our ads lead to purchases (section 9). We never receive your name, address or payment details from Apple or Google.

Each device gets 10 free minutes, and a small number of free text and photo translations, once. To give them once per device and to prevent abuse, we keep a marker of the device (on Android, a scrambled form of the device's identifier). The marker is not stored with your account and stays after an account is deleted, for as long as we offer free minutes.

6. What stays on your device

• Conversation history. Saved conversations and captions are stored in the app's private storage on your device. They are never uploaded, and you can delete them from the History screen. They are also removed when you delete the app.
• Settings. Selected languages and preferences.

7. Who processes data for us

We share personal data only with providers that are contractually required to protect it to the same or an equal standard as this policy and applicable law.

These providers act on our instructions as processors, except that Apple and Google act as independent controllers when you use their sign-in services. We do not sell personal data and do not share it with anyone else, except where the law requires it.

8. Retention and account deletion

Audio and transcripts are not retained by us at any point. Account and ledger data are kept for as long as your account exists. Transaction records are kept for as long as the account exists so that refunds can be honoured, and may be retained afterwards where tax or accounting law requires it, in a form no longer linked to your sign-in.

Deleting your account in the app

Open Settings and choose Delete account or Delete my data. After you confirm, the app asks our server to delete your account and sign-in identity, your balance, your usage events, your transaction records, the feedback you sent from the app, how you heard about LinkVoice, which ad brought you (section 9) and any usage statistics you linked to the account. Deletion takes effect immediately and cannot be undone. Any unused interpreting time is lost.

Deleting the account does not cancel an App Store subscription, because Apple manages subscriptions. Cancel it in your iPhone's Settings → Apple ID → Subscriptions, before or after deleting the account. If you signed in with Apple, you can also remove LinkVoice from "Sign in with Apple" in the same Settings screen. A Google Play subscription is likewise managed by Google: cancel it in the Play Store under Payments and subscriptions.

The account's conversation history on your device is deleted with it.

Without the app

Email admin@missinglayer.com from the address you signed in with or, for a guest account, with the account ID from Settings → Copy account ID, under Delete my data (or the order number of a purchase if you can no longer open the app), and we will delete the account within 30 days. The steps are at linkvoice.site/delete-account.

9. Usage statistics; no advertising or tracking

LinkVoice sends usage statistics to PostHog so that we can see which features are used and how well they work. They never include audio, transcripts, translations or your email address. You can switch them off entirely under Settings → Help improve LinkVoice; nothing is sent then.

Statistics linked to your account

The app sends your account's random user ID with the usage events from that device, so that the LinkVoice team can see how the app worked for you, to help when you contact us and to fix problems and improve the app. This is on by default. Only the LinkVoice team sees linked statistics, next to your account's email address, plan and interpreting time (sections 4 and 5), on a page for the team that requires signing in. PostHog receives the user ID, never your email address, and linked statistics never include audio, transcripts or translations.

You can object at any time under Settings → Link statistics to my account. Switched off, the app starts a new anonymous ID and links nothing more: your statistics stay anonymous, as described above, unless you also switch off "Help improve LinkVoice", in which case none are sent. Statistics already linked stay with the account until you delete it, when they are deleted from PostHog too, or until you ask us to remove them.

Which ad brought you (iPhone and iPad)

We advertise LinkVoice through Apple Ads. Once for your account, the app asks Apple whether your download followed one of our ads. If it did, Apple tells us the campaign, ad group, ad and search keyword, where the ad appeared, whether you saw or tapped it and when, your country or region, and whether it was a first download or a download again; if it did not, only that, your country or region and whether it was a first download or a download again. Apple gives this without identifying you, and it is not tracking. We keep it with your account to see which ads lead to purchases, and it is deleted with your account (section 8).

LinkVoice contains no advertising and no crash-reporting SDK. We do not build advertising profiles and we do not track you across other apps or websites. The app's only network connections are those listed in section 7, plus the App Store or Google Play.

10. Permissions on your device

• Microphone — required to hear the conversation. You can revoke it in Settings at any time; the app then cannot interpret.
• Notifications — optional reminders, with a plan or trip pass, that unused minutes are about to expire. On iPhone and iPad they are on by default and arrive quietly in Notification Center unless you change that; on Android 12 and earlier they are on by default, and on Android 13 and later only if you allow notifications. You can turn them off in the app's Settings at any time. They are scheduled on the device itself.

LinkVoice asks for the camera only in the Camera tab. It does not ask for speech recognition, location, contacts or access to your photo library: a photo you choose is handed to the app by the system's photo picker. Playing the spoken translation needs no permission.

11. Legal bases and international transfers

We process your data to perform our contract with you (providing interpreting, accounts and purchases), to comply with legal obligations (accounting records), and where necessary for our legitimate interests in keeping the service secure, preventing abuse of the free allowance and improving the app. Speech is processed by these services only after you tap Start. Linking usage statistics to your account (section 9) is based on our legitimate interest in understanding how the app is used, so that we can fix problems and improve it (Article 6(1)(f) GDPR). You can object at any time with Settings → Link statistics to my account; your statistics are then no longer linked. Keeping which ad brought you (section 9) is based on our legitimate interest in measuring our advertising (Article 6(1)(f) GDPR); you can object by writing to us (section 16), and we then delete it.

Google, Soniox, Microsoft, Supabase, Apple, Cloudflare, OpenRouter and TypeSafe may process data in the United States and other countries outside the European Economic Area. Where they do, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, as provided in each provider's data-processing terms.

12. This website

These pages set no cookies, store nothing in your browser and load their assets from linkvoice.site itself. The home page runs the live demo described below. Cloudflare hosts the files and processes standard connection metadata (such as IP address, page requested and time) for delivery, security and operation, under its own privacy policy.

The live demo on the home page

The phone on the home page is a working demo of the app's conversation mode. Nothing is recorded until you tap its microphone button. Your browser then asks for the microphone, and for up to 30 seconds your speech is sent to Soniox to recognise it and the text to Google AI and OpenRouter to translate it. The translation is shown, and its text is sent to Soniox to read it aloud, as in the app. We do not store the speech, the text or the translations.

Cloudflare Turnstile checks that a person, not an automated script, starts the demo. It processes connection and browser data for that check, under Cloudflare's privacy policy. To limit how often the demo can be used each day, we keep a keyed hash of your IP address, never the address itself, with the number of the network you connect from (its ASN, which names your internet provider, not you), the date and the two languages you chose, and delete them after 30 days.

13. Children

LinkVoice is not directed at children under 13, and under 16 in the European Union, and we do not knowingly create accounts for them. If you believe a child has created an account, contact us and we will delete it.

14. Your rights

Depending on where you live, you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Most of these you can exercise yourself: the app shows your balance and tier, and deletion is described in section 8. For anything else, contact us. You may also complain to your data-protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

15. Changes to this policy

We will update this policy when the app or the law changes. The effective date at the top identifies the current version. For a material change in how your data is used, we will tell you in the app or through the store release notes before it takes effect.

16. Contact