Legal

Privacy Policy

This Privacy Policy explains how Flow Lab (“Flow Lab,” “we,” “us,” or “our”) handles information when you use FlyVox, our real-time AI translation application for iOS and Android.

Effective date: August 5, 2026 · Last updated: August 5, 2026

Important AI and audio notice When you start a translation feature, audio and related language settings are transmitted to service providers, including Google’s Gemini services, to generate transcripts, translations, and synthesized speech. In AI real-time calls, voice communications are also transmitted through LiveKit infrastructure. FlyVox does not independently record or store raw audio on Flow Lab servers, but providers may process information under their applicable terms and data-processing commitments. Before FlyVox sends personal data to these AI and communications providers, the app presents this disclosure and asks for your explicit permission. You may decline or later withdraw that permission in Settings. Features that require third-party AI processing will remain unavailable unless permission is granted.

1. Scope

This Policy applies to FlyVox and related support interactions. It does not govern Apple, Google, LiveKit, or other third-party services that operate under their own privacy terms. FlyVox is operated by Flow Lab.

2. Information we handle

Category	Examples	Purpose
Account information	Email address, display name, authentication provider, account identifier, email-verification status, and anonymous guest identifier.	Create and secure accounts, provide guest mode, synchronize data, recover access, and prevent abuse.
Audio and AI inputs	Microphone audio, device-playback audio you choose to share, call audio, source and target languages, and prompts or instructions required for translation.	Recognize speech, generate translations and synthesized speech, and provide real-time calling.
Translation content	Source transcripts, translated text, language settings, session timestamps, and translation history.	Display translations, maintain history, synchronize signed-in accounts, and let you review sessions.
Usage and diagnostics	App-start and translation-session events, device/app information, crash reports, error logs, performance data, and approximate technical identifiers such as IP address processed by providers.	Operate, secure, troubleshoot, and improve FlyVox.
Purchase and quota data	Product ID, store transaction or receipt data, purchased credits, remaining minutes, session duration, and estimated service cost. Flow Lab does not receive your full payment-card details.	Verify purchases, credit your account, meter usage, prevent duplicate redemption and fraud, and meet accounting obligations.
Call connection data	Temporary room code, participant identifiers, connection state, and call duration.	Create and secure AI real-time calls and connect participants.
Support communications	Your email address and the content of requests you send to us.	Respond to questions, privacy requests, and account issues.

We do not sell personal information and do not use FlyVox content for third-party behavioral advertising.

3. Device permissions and capabilities

Microphone: used only when you initiate microphone translation or a real-time call. It is necessary to capture speech for translation and communication.
Device audio or screen/media projection: used when you explicitly start device-sharing translation. FlyVox processes the shared audio. It does not save screen images or video as part of this feature.
Bluetooth: used to discover and route sound through a connected headset or audio device.
Background audio: may keep an active audio session working when supported by the operating system and the selected feature.
Display over other apps / picture in picture: used only if you enable floating bilingual subtitles. You can disable this in FlyVox or system settings.
Camera and photo library: used only when you actively take or select an image for your profile avatar. The selected avatar may be uploaded to Firebase Storage and associated with your account. FlyVox does not use the camera during its audio-only translation or calling features.
Notifications or network access: system notices may show active media sharing, while network access connects to authentication, translation, calling, storage, and purchase-verification services.

You may deny or revoke optional permissions through device settings, though the related feature may stop working.

4. How we use information

We use information to provide and personalize translation features; authenticate users; connect calls; display and synchronize history; verify purchases; maintain credits; secure the service; prevent fraud and abuse; diagnose crashes; improve reliability; communicate with you; comply with legal obligations; and enforce our Terms of Service.

Depending on where you live, our legal bases may include performing our contract with you, your consent, our legitimate interests in operating and protecting FlyVox, and compliance with law. You may withdraw consent where consent is the applicable basis, but this does not affect earlier lawful processing.

5. Service providers, disclosures, and AI processing

We disclose information only as needed to operate FlyVox, comply with law, protect users, or complete a business transaction. Provider categories currently include:

Google Cloud, Firebase, and Gemini: authentication, database, storage, server functions, analytics, crash reporting, app integrity, and AI speech recognition, translation, and speech generation.
LiveKit: real-time communications, call routing, and participant connectivity.
Apple App Store and Google Play: sign-in, app distribution, payments, receipts, purchase verification, refunds, and fraud prevention.
Apple iCloud or Google Drive: optional encrypted backup and restoration of audio recordings, only after you enable recording cloud sync. iOS uses your private iCloud container; Android uses the hidden application-data area of your Google Drive.

AI processing is probabilistic. Audio, transcripts, language choices, and contextual instructions may be processed to return a translation. FlyVox uses short-lived credentials so the mobile device can connect to the AI service without exposing Flow Lab’s long-term API credentials. Raw audio is not routed through or intentionally retained on Flow Lab’s application servers. AI and communications providers may temporarily process network and service data as necessary to deliver and secure their services.

Optional product analytics are disabled by default. If you enable analytics in Settings, FlyVox may send app interaction and feature-usage events to Firebase Analytics to improve the product. FlyVox does not use this data for cross-app tracking or advertising, and you may turn optional analytics off at any time. Crash diagnostics may still be processed separately to maintain reliability and security.

We may also disclose information when reasonably necessary to comply with lawful requests, protect rights or safety, investigate fraud, or support a merger, financing, acquisition, or transfer of assets, subject to appropriate safeguards.

6. Retention and deletion

Local translation history is stored on your device, currently limited to recent sessions, until you remove app data or uninstall the app.
For signed-in and guest accounts, account data, credits, session records, and synchronized transcript text may remain while the account is active or as needed to provide the service.
Temporary call rooms, short-lived AI credentials, and token-reservation records are retained only for operational, security, reconciliation, or expiration periods.
Purchase-verification records may be retained to prevent duplicate redemption, address refunds and fraud, and meet legal, tax, and accounting requirements. When an account is deleted, these records may be de-identified rather than erased where retention is necessary.
Diagnostics and provider logs are retained according to configured operational needs and the applicable provider terms.

You can permanently delete your account from FlyVox under Settings → Account actions → Delete account, or follow our Account Deletion instructions. Deletion removes the account and associated user data from Flow Lab systems, subject to limited legal, security, fraud-prevention, backup, and transaction-record exceptions. Copies in backups may remain until those backups are overwritten.

7. Your choices and privacy rights

You can use guest mode, change device permissions, stop an active translation, manage history stored on your device, sign out, or delete your account. Depending on your location, you may also have rights to request access, correction, deletion, portability, restriction, or objection, and to appeal or complain to a privacy regulator.

To make a request, email support@flyvox.app. We may need to verify your identity and may decline or limit a request where permitted by law.

8. Security

We use measures designed to protect information, including encrypted network connections, platform authentication, app-integrity checks, access controls, short-lived AI credentials, and server-side purchase verification. No system is completely secure, and we cannot guarantee absolute security.

9. Children

FlyVox is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below the applicable age without valid authorization. If you believe a child has provided information improperly, contact us so we can investigate and delete it.

10. International processing

FlyVox and its providers may process information in countries other than your own. Privacy laws may differ in those locations. Where required, we rely on appropriate contractual or legal safeguards for international transfers.

11. Changes to this Policy

We may update this Policy as FlyVox, our providers, or applicable requirements change. We will update the date above and provide additional notice when required. Continued use after an update is subject to the revised Policy.

12. Contact

Operator: Flow Lab
Privacy contact: support@flyvox.app