Privacy Policy
Analysis and voiceprints stay on the device; only you choose when a copy leaves
This English text is a convenience translation, provided so that families outside Japan can read it in their own language. The Japanese version at voice-album.com/privacy is the controlling version; if the two ever differ, the Japanese text governs. This mirrors the language article in our Terms of Use.
This Privacy Policy explains how information is handled in the iOS app “Voice Album” (the “app”) and on this website. In this policy, “we,” “us,” and “our” mean the operator of the app, named under “Operator” at the end of this page.
In short (a summary of this policy)
Voice Album looks through your family's home videos for your child's voice and builds a voice album from what it finds. Analysing photos and videos, telling voices apart, and creating and storing voice-feature data (voiceprints) all happen inside your iPhone. There is no server of ours and no account to create. We do not receive, listen to, or gather your or your child's voice for voice search.
A copy leaves the device only when you choose a destination with the share button or “Make a Copy.” We receive none of that material. Separately, Apple handles payment if you buy Voice Album Premium. What follows explains each piece.
The short version
- Personal data the operator collects from the app — none. The app has no mechanism for sending us accounts, names, contact details, location, advertising identifiers, or usage analytics.
- On-device analysis — photo and video analysis and voice-feature data (voiceprints) are processed on the device and not sent to us.
- User-directed transfers — shares and Copies go only to the destination you choose each time. The app contains no third-party SDKs for analytics, advertising, or crash reporting.
- How long we keep data — not applicable to app data, because we never hold any. Information you send us through a support enquiry is deleted, as a rule, within one year of the enquiry being resolved.
- Withdrawing consent and deleting data — everything is handled in iOS Settings and inside the app. There is no request to send us.
- The one exception — when you contact us, we receive your email address and your message so that we can reply (see “Information we receive when you contact us,” below).
The most important thing
Audio, video, and voice-feature data are never sent to us for finding or saving voices. Detection and analysis, and storage of voice-feature data, happen only inside your device, and we never have access to your voice or your child's. A copy goes to a destination only when you explicitly share or export and choose that destination.
What we don't collect
There is no account to register. We do not receive a user's name, contact details, or location from the app. We use no advertising identifiers. We run no analytics and no behavioural tracking. We do not build a voiceprint database that gathers voices in order to identify who someone is. The voice-feature data used to tell voices apart never leaves your device.
The privacy manifest bundled with the app is configured to declare no tracking and an empty list of collected-data types in that manifest. This does not establish what has separately been declared, reviewed, or published in App Store Connect. For the App Privacy disclosure corresponding to the live app, please check the App Store product page.
Sharing with third parties
The app contains no third-party SDKs for analytics, advertising, or crash reporting. We do not pass personal data we receive to third parties. There are two routes by which data leaves your device:
- The destination you pick each time with the share button or with “Make a Copy” (another app, a family member, a place to save a file, and so on)
- Apple (StoreKit), which processes subscription payments
Apple handles payment information under its own privacy policy. We receive no audio or video content from either route.
Apple and the email service provider named under “Information we receive when you contact us,” below, handle data under their respective terms and privacy policies. We select and manage providers appropriately to the extent required.
What is stored on your device
Here is what the app stores on your device, in and around the voices themselves. All of it is placed in iOS's protected storage (encryption that cannot be read while the device is locked), and it is deliberately excluded from device backups.
- The voices you chose to keep (audio files)
- Voice covers (a still photo, and a few seconds of silent video)
- The name you gave a voice, and the automatically suggested name (short text only — no full transcript is stored)
- Tags (Laughter, Crying, Song, Chatter) and dates
- Which child a voice belongs to on this device
- Your child's name and birthday, and profiles for siblings who have no voices yet
- The reference used for voice search (average voice features for your child, and for an adult if one has been registered; no original audio is included)
- The batch-search log (which videos were examined, whether a voice was found, and a rough indication of how close it was; no audio and no voice-feature data)
- Playback history, the radio bookmark, and the titles, notes, and ordering of Favorites and Story Books
- Material that arrived through the share menu (the voice inbox — see below)
Alongside this, display preferences such as the theme, the on/off state of each feature, and the date of your last Copy are stored in the standard iOS settings area. Your child's name and birthday are never put there.
Keeping saved voices out of device backups is a design choice made to protect them. If data is lost through a device reset, loss, damage, or deleting the app, it cannot be restored from that device's ordinary backup, and we cannot recover it because we hold no copy. Please use “Make a Copy” now and then and save it somewhere safe that you choose.
Voice-feature data (the information that amounts to a voiceprint)
The “voice-feature data” created in order to tell voices apart is sensitive information: it may qualify as a personal identification code (voiceprint) under Japan's Act on the Protection of Personal Information (個人情報保護法), and as biometric data under the EU General Data Protection Regulation. That is exactly why the app is designed never to let it off the device.
This information is created inside your device and stored in protected storage that never leaves it. It contains no original audio — only averaged voice features. It is never sent to us, and it is not included in a Copy. Because we never obtain it, no voiceprint of your child is ever held on our side.
Your device is the only place this information exists. Since we never receive it, there is no disclosure or deletion request you need to make to us. You can delete it yourself at any time with “Delete registered and unregistered voice profiles” inside the app.
Your photo library
The app reads video when you select a video, when you explicitly start a batch search, or when it checks additions after you explicitly turn on “Watch for new videos.” Items found through watching stay in the inbox and are not saved automatically. Temporary copies made for analysis are deleted promptly once the analysis is done, and if one is left behind — after a force quit, for example — it is cleaned up automatically the next time the app starts. The app never modifies or deletes your original photos and videos.
There is a setting (off by default) that fetches originals that have been offloaded to iCloud. Turning it on has iOS bring your own videos down from your own iCloud to your device. That is a download, not an upload: no analysis results and no voices go out.
The voice inbox (when you send material from a share menu)
When you send a video or audio file to Voice Album from another app's share menu, that material is placed in a protected inbox. What is placed there is only the material itself, its original filename, a rough type, its size, and the time it arrived. No captions, no transcripts, no voice-feature data, and no assignment to a child are placed there. The material is not analysed; nothing happens until you open the app and start a search.
Material in the inbox is deleted automatically 30 days after it arrives (up to 2 GB per item, and up to 100 items in total). You can delete it by hand at any time before that. Material sitting in the inbox is never sent outside your device.
Permissions the app asks for
The text in quotation marks below is exactly what appears in the iOS permission dialogue.
- Photos — “Allow photo access to find voices in videos. Selected videos are analyzed and found voices are saved on this device; original videos, analysis audio, and voiceprints are not uploaded. A copy of a saved voice leaves this device only when you explicitly choose its destination—either in the share sheet or through a manual export such as ‘Create a Backup.’”
- Microphone — “Record up to 20 seconds of a voice so a parent can review it before saving. Recording, analysis, and saving stay on this device. A copy of a saved voice leaves this device only when you explicitly choose its destination—either in the share sheet or through a manual export such as ‘Create a Backup.’”
- Speech recognition — “Use on-device speech recognition to suggest voice names and search for words spoken in videos. Recognition stays on this device, and audio is never sent outside it.”
- Face ID — “Authenticate when opening the app to protect the voices you saved.” (optional)
Speech recognition is used on the device to suggest an automatic title; it does not send voice audio to Siri or Shortcuts. Only if you separately turn on the optional “Your child's voice via Siri” setting may children's names appear in Siri or Shortcuts. Voice audio and voice-feature data are not passed to them.
Beyond these, the app asks for iOS notification permission only the first time you turn on Memory notes. Every permission is requested only when you use the feature it belongs to, and declining one leaves the rest of the app usable.
Sharing
A voice or digest video goes to a destination only when you press the share button and choose that destination. Once shared, the material is handled under the rules of the receiving app or service. A copy that has gone out is no longer something you can control from your device.
Copies (the exported backup)
The ZIP that “Make a Copy” exports contains the voices you saved (M4A), voice covers (still-image JPEG and a few seconds of silent MOV video), records such as names, tags, dates, and save times, the contents of your Story Books, your child's name and birthday, and an index used to verify integrity. Voice-feature data (voiceprints) is not included. You choose where the Copy goes; it never reaches us.
A voice cover may show your child's face. A Copy is an ordinary ZIP file that can be handed straight to AirDrop or email. Please look through it before you pass it to anyone.
Moving voices to another device
The app does not create an account or link multiple devices. To use saved voices on another device, choose “Make a Copy,” export the ZIP to a safe destination you select, and restore it on the other device. Export and restore happen only when you start them.
Notifications
Memory notes are local notifications created entirely inside your device (optional, off by default). No data is sent anywhere for them, and the notification text never contains your child's name or anything about the content of a voice.
Purchase information
Subscription purchases and restores are handled through Apple's StoreKit. We never receive payment details such as card numbers. All we receive from Apple is aggregate sales figures that cannot identify an individual.
Reviews you post on the App Store are published on Apple's site, where we can also read them. If we reply to a review, our reply is published on the App Store as well.
How your device keeps this safe
- Saved voices and the data around them are protected with encryption that cannot be read while the device is locked (Complete File Protection), and excluded from device backups.
- With App Lock (optional) turned on, the app opens only after Face ID / Touch ID or your passcode. The lock screen appears in front of the share sheet and the photo picker, so it cannot be bypassed. However, if the device has neither a passcode nor Face ID / Touch ID set up, iOS cannot verify who you are and the lock will not work.
- Word search inside the album is not registered with the device's Spotlight. Nothing from inside the app turns up in iPhone search — unless you turn on the Siri / Shortcuts setting described below, in which case your child's name may appear in iPhone search or in Shortcuts.
- Automatic captions during playback (iOS 26 and later, optional) exist only in memory while you have them turned on. They are never left in storage, in a backup, in anything shared, or in an external service.
- The Transparency Report inside the app lets you check these promises for yourself, on your own device, on the spot.
Children's privacy
The app is for parents and guardians, who are adults. It is not designed to be used by children themselves, and it is not an app in Apple's Kids category. Detecting, matching, and saving a child's voice all happen entirely inside your device. We cannot access your child's voice, their voice-feature data, or their name and birthday. We never gather children's voices to use as training data, and we never build a voiceprint database that identifies who someone is.
A parent decides each save and every share or export. Home videos often contain other children's voices — siblings, friends. Before you save or share, please give thought to what those children's parents would want. And when your child is old enough to have a view about how their own voice is handled, please respect it. Deleting is always available inside the app.
Turning on the setting that makes your child's name usable from Siri / Shortcuts (off by default) passes that name to iOS system features. It does not pass it to us. No audio and no voice-feature data is passed to Siri.
Retention
Because we hold no data, there is no retention period on our side. Data on your device stays on your device until you delete it or delete the app; nothing expires on its own. There are two exceptions: temporary copies made for analysis are deleted immediately after the analysis, and material that arrived in the voice inbox is deleted automatically once 30 days pass without it being imported.
Managing your data and withdrawing consent
The app creates no account, so there is no account to delete. Every permission can be revoked at any time from iOS Settings.
- Delete one at a time — saved voices, voice covers, names, and tags can each be deleted individually inside the app, at any time. In case of a slip there is a 6-second undo, and nothing is deleted until it is confirmed.
- Delete everything at once — “Delete all saved voices” removes saved voices, covers, names, tags, dates, assignments, playback history, Favorites, and inbox material together. Or choose “Delete registered and unregistered voice profiles” to leave your saved voices untouched while erasing the reference used for voice search (the voiceprints), the search log, which child each voice belongs to, and profiles for siblings who have no voices yet.
- Verified before it's called done — deletion writes a record first, then re-reads the disk afterwards and confirms everything is gone before it finishes. If it is interrupted, it picks up where it left off the next time the app starts.
- Delete the whole app — deleting the app erases all of its on-device data, including its app-group storage. A Copy (ZIP) you exported or a copy you passed on with the share button remains at the destination you chose; delete it there as well if needed.
Because we hold no copy of your data, there is no deletion request for you to send us. For the same reason, we cannot recover data that has been lost.
Information we receive when you contact us
What we receive: your email address, your name (if you give it), the content of your enquiry, and your device model and iOS and app versions.
Why we use it: to answer your enquiry, to investigate and fix problems, and to improve the app. We use it for nothing else.
Third parties: we do not provide it to third parties, except where required by law. We never use it for advertising or marketing, and never add it to a mailing list.
How long we keep it: as a rule, deleted within one year of your enquiry being resolved.
Processors and handling outside Japan: to send and receive support email we use Apple Inc.’s iCloud Mail (country: United States). That company maintains arrangements meeting the standards prescribed by the rules of Japan's Personal Information Protection Commission (個人情報保護委員会). We will tell you about those arrangements on request.
Security measures we take: only the operator personally can handle the information you send us. It is handled only from an account with two-factor authentication enabled, on a device with a screen lock and full-disk encryption. It is deleted, as a rule, within one year of your enquiry being resolved. We will describe our other measures on request.
Where to send requests and complaints: please use the contact address under “Operator” below (the email address on the Contact page, in Japanese). We respond to requests to be notified of the purpose of use of retained personal data, and to disclose, correct, add to, delete, suspend the use of, erase, or stop the third-party provision of that data.
How to make such a request: write to the address above with what you are requesting (notification of purpose of use / disclosure / correction, addition, or deletion / suspension of use or erasure / cessation of third-party provision) and with information confirming your identity (send from the same email address you used to contact us, and tell us the date and subject line of that enquiry). As a rule we reply to the same email address within two weeks. There is no fee. If you are acting as an agent, please attach a power of attorney.
If there is a data breach: in the unlikely event that information you sent us is leaked or otherwise compromised, we will report it to Japan's Personal Information Protection Commission as the law requires, and notify you.
Please don't attach your child's voice or videos to a support enquiry. It is to avoid a precious voice leaving your device unintentionally. A description of what happened is quite enough.
If the business is transferred
If we transfer the business relating to this app to a third party, information you sent us through a support enquiry may be passed to the transferee. Even then, it will not be handled beyond the purposes set out in this policy. Voices stored on your device are not part of any such transfer, because we do not hold them.
About this website
This website uses no cookies, no analytics, and no advertising. Fonts and images are embedded in the page itself, so displaying it requires no request to any third-party server. There is no contact form here either.
The site itself is served from a hosting provider (Vercel Inc., United States), so connection records (IP addresses and the like) may be logged there temporarily as a side effect of your visit. We never use those records to identify individuals or for advertising.
Changes to this policy
This policy may be revised as the app is updated or the law changes. When we revise it, we will update the last-updated date on this page, and where the change warrants it, tell you inside the app as well.
Contact
For privacy questions and for requests about your information, please write to hello@voice-album.com. You can also reach us from the Contact page (in Japanese) or through “App Support” on the App Store. For the terms of use, see the Terms of Use.
Operator
Taro Ueno(上野太郎)
Our address and telephone number (including the name of the representative, in the case of a company) will be provided on request without delay — as a rule within three business days — by email or in writing. Please send requests to the email address on the Contact page (in Japanese).