Privacy policy

Last updated: 26 October 2026

This policy explains what personal data VoxKit uses, why, who receives it, how long we keep it, and what rights you have.

Who we are

VoxKit is a push-to-talk app for iOS and Android, in a private beta from 15 December 2026. The controller of your personal data is Oleksandr Shepeliev, an individual developer in Ukraine ("we", "us"). Contact: support@voxkit.io.

What we collect and why

• Account identifier: to run your account and connect you to your rooms.
• Your name (first and optional last name), from your Google account or typed by you: to show the people in your rooms who is talking.
• Your profile photo: the photo of your Google account, or a photo you upload, taken with the camera or chosen from your photo library. The app sends only the cropped photo, without your location or other metadata. We show it to the people in your rooms.
• E-mail address from your Google account: to sign you in.
• The rooms you create or join: to show your rooms and control who can talk and listen in them. For a room you join with an invite link, we also keep which link you used and the person who made it.
• Invite links you make, if you are the owner or an admin of a room: the link and its settings (its name, when it ends, how many people can join, and whether people need your approval), and who joined with it, to let you invite people and manage the links.
• Requests to join a room: when you ask to join a room with an approval link, your name, your photo, the name of the link and the time of your request, to let the owner and the admins decide.
• Removal from a room: when an owner or an admin removes you from a room, your name, your photo, the name of the person who removed you and the time, to keep you out of the room until an admin lets you back.
• Room messages: short notices in a room that say that someone joined, was approved, left or was removed, or that the room name or photo changed. A notice has the names of the people involved, as they were at that time.
• Device identifiers we use to deliver notifications: to tell you when someone talks to you or asks to join your room. On iOS, this includes the device token of Apple's notification service, which we store with the other notification identifiers of your device.
• The install referrer (Android only): when you install VoxKit from Google Play after you opened an invite link, the app reads once, at the first launch of every installation, the invitation that Google Play passes to it, and uses only the invite= value, to continue the invitation.
• Your voice while you talk: to deliver it to the people in the room.
• Technical logs, which may include your account identifier and network data such as your IP address: to keep the service secure and working.
• Crash reports: when the app crashes or meets an error, it sends a report with the type of error, the place in the app's code where it happened, your account identifier, a random identifier for the app on your device, technical details of your device, such as its model and system version, and sometimes a short list of recent problems the app noticed. If usage statistics are on, the report also shows the last steps you took in the app. A report never includes your voice, what is said in your rooms, your name or your e-mail address. We use crash reports to find and fix problems in the app.
• Usage statistics: which features people use, for example that someone signed in, created a room or opened a screen, and when the app is opened, updated or removed. Statistics also include the app version, your device type, its system version and language, and an approximate area, such as the country or city, worked out from your network address. Statistics use a random identifier for the app on your device, not your account identifier, and never include your voice, what is said in your rooms, your name or your e-mail address. We use them to see which features help people and to improve the app.
• Support messages: to answer you and handle your requests.
• Waitlist: if you join the waitlist on voxkit.io, your e-mail address, the language of the page and the time you agreed: to tell you when VoxKit launches.

We do not collect your precise location, your contacts, or files on your device. The only exception is the profile photo you choose to upload, which the app sends after you crop it. The app uses the camera only to take your profile photo. We do not show ads, track you across apps or websites, or sell your data.

Crash reports and usage statistics

Crash reports tell us when and where the app fails, so we can fix it. Usage statistics show which features people use, so we can improve the app. You can turn crash reports and usage statistics on or off at any time in the app's settings.

Invitations

An owner or an admin of a room can make invite links. A link looks like https://voxkit.io/+ followed by a code. A link is a credential: anyone who has the link can use it, and the person who shares the link decides who gets it. An admin can revoke the links they made, the owner can revoke any link of the room, and a link can end by itself on a date or after a number of people joined.

Anyone who has a link can see, on the page of the link and in the app before they join, the name of the room, its photo, how many people are in it, and the name and photo of the person who made the link. Anyone who has the link can also see the names and photos of up to four members of the room. They see this without an account. Apps that show a preview of a link, such as messengers, fetch the same room name, photo and inviter name. If a link no longer works, the page shows only that, with no room data. The page sets no cookies. Our hosting provider's request logs keep the path that was requested, so they keep the invite code next to your IP address, for the retention period of the platform's logs (usually up to 30 days). The log lines of our own functions never contain the code.

When a person joins with a link, the room shows a room message with the name of the person and the name of the person who made the link. If a link needs approval, the owner and the admins of the room see the name and the photo of the person who asks to join, and they receive a notification. The first of them who decides, decides for all. If they dismiss the request, the person is not told, and the person can ask again.

The owner and the admins of a room see the names and photos of the people they removed, with the name of the person who removed them, until they let a person back. A removed person cannot join or ask to join the room again until an admin lets them back.

Room messages

Room messages (that someone joined, was approved, left or was removed, or that the room name or photo changed) show the names of the people involved as they were at the time. We keep them on our servers for 30 days. The app of each member keeps the messages it has read on the phone, like audio messages, until the room history leaves the phone. A member sees only the messages from the time they joined.

Opening an invitation on a new device

If you open an invite link on a device where VoxKit is not installed, the page of the link has a button for the app store. When you tap the button, your browser copies the link to the clipboard of your device, so the app can continue the invitation after you install it. The page does not read the clipboard.

On Android, the app reads the install referrer once, at the first launch of every installation. It uses only the invite= value, to open the invitation, and ignores the rest. If there is no invitation in it, the app checks only whether the clipboard holds text, without reading it, and shows a card with a Paste button when it does. The app reads the clipboard only when you tap Paste. Android 13 and later shows its own notice when the app pastes.

On iOS, the app checks at the first launch only whether the clipboard holds a web address, without reading it. If it does, the app shows a card with the system Paste button. The app reads the clipboard only when you tap that button. If what you paste is not a VoxKit invite link, the app tells you so and does nothing else with it. The card shows for 24 hours after the first launch, or until you use it or close it.

Your voice

Your voice is sent to the people in the room while you talk. We do not record or store it on our servers; it is only held briefly in memory to deliver it. If the app keeps recent messages on your device, they stay on your device, and you can delete them there.

Legal bases

• Contract (GDPR Article 6(1)(b)): to provide the service you asked for, including rooms, invitations and notifications.
• Legitimate interest (Article 6(1)(f)): to keep the service secure and prevent abuse, to find and fix crashes with crash reports, and for usage statistics where the law allows it. Our interest is an app that works well.
• Consent (Article 6(1)(a)): for the waitlist e-mails, and for usage statistics where the law requires consent. You can withdraw consent at any time. Withdrawing consent does not affect the use of data before you withdrew it.

You can object to crash reports and usage statistics by turning them off in the app's settings.

Who receives your data

Service providers process data for us, under our instructions:

• cloud hosting and infrastructure providers: Google Cloud and Firebase, including Firebase Hosting, which serves voxkit.io and the invite pages; and Cloudflare, which relays voice, manages the DNS records of voxkit.io and routes support e-mail;
• Apple and Google, to deliver notifications and to check that requests come from a genuine copy of the app;
• Google, to process crash reports and usage statistics for us;
• app stores (Apple TestFlight, Google Play) for beta distribution;
• our e-mail providers, for support messages;
• Cloudflare Turnstile, which checks that a waitlist sign-up comes from a person and not a bot. It runs when you open a page with the waitlist form, and it sees technical data such as your IP address and browser, not your e-mail address.

The people in your rooms see your name, your photo and what you say to them. The owner and the admins of a room also see the name and photo of each person who asks to join it, and of each person they removed from it. Anyone who has an invite link sees the room, the inviter and member data that "Invitations" describes.

Anyone who has the link to a photo can open it. We give the link to your profile photo to the people in your rooms, so only the people in your rooms receive the link.

Where your data goes

We use servers in the European Union and in other countries where our providers operate, including the United States. These transfers rely on the providers' Standard Contractual Clauses and, where they apply, the EU-U.S. Data Privacy Framework.

How long we keep data

• Account data, your name, photo and e-mail address: until you delete your account.
• A photo you remove or replace: it is deleted from our storage, usually at once. If a deletion fails, the photo stays until you delete your account.
• Room data: until you leave the room or the room is deleted.
• Invite links: until the owner, or the admin who made them, deletes them or the room is deleted. A revoked link stays in the list until it is deleted. The link code itself holds no personal data, and it is never used again. Technical logs can keep the code, as "Invitations" describes.
• A request to join: until an owner or an admin decides, or until the room is deleted.
• The record that you were removed from a room: until an admin lets you back, or until the room is deleted.
• Room messages: 30 days on our servers; on phones, like audio messages.
• The technical record that an owner or an admin decided a request to join: 1 day.
• Device identifiers: until you stop using the device with VoxKit.
• Your voice: only while it is delivered.
• Technical logs: for a limited time, usually up to 30 days.
• Crash reports: 90 days.
• Usage statistics: 2 months. After that, only totals that do not identify anyone remain.
• Backups: up to 7 days after deletion.
• Support messages: until we resolve your request, then deleted within 12 months.
• Waitlist: until you unsubscribe or ask us to delete it, and at most 12 months after the e-mail that announces general availability.

Every waitlist e-mail has a link to unsubscribe. You can also write to support@voxkit.io to leave the waitlist.

To delete your account, see Delete your account.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, send it to you in a machine-readable format, or restrict its use. You can object to use based on our legitimate interest, and you can withdraw consent at any time. Write to support@voxkit.io; we answer within one month.

You can also complain to a data protection authority.

Children

VoxKit is not for children under 13. In the EU, a child under 16 needs a parent's consent.

Changes

The date at the top shows the last change. We announce material changes in the app.