VoiceClub — Privacy Policy

Last updated: 24 October 2026

DRAFT for review — have counsel review before public launch.

What changed on 23 October 2026. Free accounts now see non-personalised ads from Google AdMob, and VoiceClub+ and token packs can now be bought with real money through Apple, checked by our own server. Until now this policy said VoiceClub showed no advertising; it also promised that we would tell you before that changed and ask for your consent first. This is that notice: the new version applies to you once you accept it in the app, and no ad is loaded before you have answered the consent form. The details are in §12.

1. Who we are

VoiceClub is a live-voice and messaging app, operated by VoiceClub, a trade name of Rachid Ouaalit, registered in the Netherlands with the Chamber of Commerce under number 73401161. Our address is Kruisstraat 3, 3581 GK Utrecht, The Netherlands.

We are the controller for the personal data described below. Contact us at privacy@voiceclub.live for anything about your data, or support@voiceclub.live for everything else.

2. Data we process

• Account: email, callsign (display name), optional profile photo, and a stable internal audio routing ID used to direct your audio to the right room and to enforce blocks. We do not create or store voiceprints or any other biometric data.
• Social: your friends, direct messages, and presence (online status and the public room you're in, visible only to your friends).
• Technical: a push-notification token (if enabled) and basic server logs (e.g. IP address) needed to operate and protect the service.
• Advertising (free accounts only): a device identifier, your IP address, basic information about your device and the app, and how you interact with an ad. On iOS the advertising identifier (IDFA) is only available if you allow tracking in Apple's App Tracking Transparency prompt. Processed with your consent, for non-personalised ads only — see §6. Your consent choice is stored on your device.
• Purchases: if you buy VoiceClub+ or a token pack: Apple's transaction ID, which product you bought, the purchase date and, for a subscription, its expiry date, your App Store country (storefront), and whether it was a real or a test purchase. Apple later tells our server when a subscription renews, expires or is refunded. When you buy, the app gives Apple your internal VoiceClub user ID — a random code, not your email address — so that Apple's confirmation can be matched to your account. We never receive your name, card or bank details from Apple.
• Tokens: your token balance and a ledger of how it changed — bought, earned (the daily gift or a rewarded ad you chose to watch) or spent (for example on a reaction, a day pass, a room pass or an ad-free period) — and which reactions you have unlocked.
• Rooms: the rooms you create or join, your memberships, and any request you send to join a private room.
• Blocks and reports: the people you block and the reports you file, so we can enforce them.
• Product analytics and diagnostics: in-app events (e.g. which screens you open) and crash/error reports, each linked to your account so we can find and fix faults. If you delete your account these records are kept but detached from you — the link to your account is erased.
• Waitlist: if you left your email on voiceclub.live, that address — until launch, or until you ask us to remove it.

3. Live audio

Real-time audio in rooms is transmitted through our voice provider (Agora) and is not recorded or stored — not by us, and not for moderation. We configure Agora to keep audio routing inside European data centres (see §8). Because we hold no recording, we act on accounts rather than on what was said when we handle a report.

4. Why we process it (legal bases)

• To provide the service you asked for (performance of a contract).
• To process your purchases and give you what you paid for — VoiceClub+, tokens and what you spend them on — and to handle renewals, cancellations and refunds (performance of a contract).
• To keep the service safe — anti-abuse, blocking, reporting (legitimate interest).
• To record product analytics, where you give consent (Profile → Privacy settings). Nothing is recorded while that is off.
• To record crashes and errors, so we can keep the service working and secure (legitimate interest). You can object at privacy@voiceclub.live.
• To show non-personalised ads to free accounts, where you give consent. Reading and storing information on your device for advertising happens only with your consent (Article 11.7a of the Dutch Telecommunications Act).
• To send push notifications, where you give consent.

5. Sharing / processors

We use Supabase (EU/Frankfurt — database, authentication), Railway (EU/Amsterdam — our token and push server, which sees your IP address and session token, and checks your purchases with Apple), Vercel (our websites, which see your IP address), Agora (real-time audio), and Expo (push delivery). We do not sell your data.

Purchases go from Apple straight to our own token server: the app sends it Apple's signed confirmation of your purchase, the server checks it and gives your account what you paid for, and Apple notifies the same server of renewals, expiries and refunds. No other company handles your purchases for us.

Apple handles the payment itself through the App Store. For that, Apple is an independent controller under its own privacy policy, not a processor of ours: it holds your payment method, sends your receipt and decides on refunds. We receive from Apple only the purchase data listed in §2.

Google delivers ads to free accounts through AdMob. For the data it processes to deliver and measure ads, Google acts as an independent controller under its own terms — see §6.

6. Advertising

On free accounts we show ads via Google AdMob: banners, full-screen ads at natural breaks, and — only if you choose to watch one — rewarded ads that earn you tokens. We only ever request non-personalised ads — for everyone, whatever their age. Your data is not used to build an advertising profile of you, and we do not pass your age, your callsign or anything you say or write to Google.

Non-personalised ads still read and store information on your device, for frequency capping, fraud prevention and counting how often an ad was shown, so we ask your consent before any ad loads (Google's consent form, shown when you open the app). On iOS we also show Apple's App Tracking Transparency prompt. These are two separate choices. You can decline either and keep using VoiceClub; if you decline the consent form, Google may still show limited ads that do not use a device identifier for advertising.

You can change your ad consent at any time in Profile → Privacy settings, and the tracking permission in your iPhone's Settings. VoiceClub+ members, people on a day pass, and anyone in an ad-free period bought with tokens see no ads at all. Learn how Google uses data from apps that use its services: policies.google.com/technologies/partner-sites.

7. Our websites

Our websites — voiceclub.live and legal.voiceclub.live — run no analytics, no advertising and no tracking cookies of any kind. Nothing is stored on your device when you visit them.

8. International transfers

Our database (Frankfurt) and our own servers (Amsterdam) are in the EU, and our voice provider is configured to keep audio routing inside European data centres. Several of our providers are US companies, including Google. Where a provider is certified under the EU-US Data Privacy Framework we rely on the European Commission's adequacy decision; where it is not, we rely on the Commission's standard contractual clauses. A copy of the safeguards we use is available on request at privacy@voiceclub.live.

9. Retention

Direct messages ~180 days, inactive push tokens ~90 days, resolved reports ~90 days, and product-analytics and error records ~12 months. Those four are enforced by an automated job that runs every night, not by hand. Analytics and error records are also detached from your account the moment you delete it. Server logs, which contain IP addresses, are kept by our hosting providers for at most 7 days and are then deleted automatically. Waitlist emails are kept until launch, or until you ask us to remove yours. Account data is kept until you delete your account.

Our record of each purchase — which product, what kind of event, and when — is kept as long as your account exists and is deleted with it. Apple keeps its own record of your payment under its own policy. Your ad consent choice is stored on your device until you change it or remove the app; what Google keeps is described in Google's own policy.

10. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to certain processing, and to data portability — a copy of your data in a machine-readable format.

Two of these you can exercise yourself, straight away: Profile → Download my data gives you that machine-readable copy, and Profile → Delete account erases your account and its data. For anything else, contact privacy@voiceclub.live; we answer within one month.

Where we rely on your consent — advertising and product analytics — you can withdraw it at any time in Profile → Privacy settings. Withdrawing does not affect processing that already happened, and it never costs you access to VoiceClub. Push notifications are controlled by your device's notification settings, and on iOS the App Tracking Transparency permission can also be changed in system Settings.

Your purchases and subscriptions are also visible, and can be cancelled, in your Apple account settings. Refunds are requested from Apple.

If you think we handle your data wrongly, you can lodge a complaint with a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl. You may also complain to the authority in the EU country where you live.

11. Young people under 18

You must be at least 16 to use VoiceClub, or older where your country sets a higher minimum. Accounts below that age are not permitted, and we close the ones we find. That means people aged 16 and 17 do use VoiceClub, and this section is about them: it sets out what we do differently because they are minors, as Article 28 of the Digital Services Act requires.

We never advertise to you on the basis of profiling. Free accounts see ads, but every ad request is non-personalised — for everyone, whatever their age — so no advertising is ever built on what we know about you. We do not build advertising profiles, we do not pass your age or anything about you to the ad network, and a device identifier is only read for advertising if you consent.

Buying things. Purchases go through your Apple account, so any limits a parent has set there, such as Ask to Buy or Screen Time, apply. Tokens are a currency inside the app only: the price of everything you spend them on is shown in tokens before you confirm.

We do not profile you. There is no recommender that ranks people or rooms by your behaviour, and no scoring of accounts. What you see is what you searched for or joined.

The protections below apply to everyone, and they exist because of who is on the other side of them:

• A stranger cannot message you. Direct messages are only possible between people who have accepted each other as friends. This is enforced by the database, not by a setting in the app, so a modified app cannot get around it. Friend requests carry no free text, so there is no message hidden inside a request either.
• Nothing you say is recorded. Live audio is not stored, by us or by anyone acting for us, so there is nothing that can resurface, be shared or be sent on later.
• Reports involving a minor are a named safety category in the reporting form, acted on within 24 hours, and where someone's safety is at immediate risk we restrict the account first and look afterwards.
• Reports from several people act on their own. If three different people report the same account within an hour, that account is restricted automatically, without waiting for one of us to be awake.
• Names and written text are filtered — callsigns, room names, descriptions, bios and direct messages — in the database rather than in the app.
• You can block anyone, and a room's host can silence or remove a participant. A removal is enforced by our servers, so it cannot be undone by a modified app.

How we ask your age, and what we keep. We ask for your date of birth rather than a box to tick. We do not store the date: we keep only which age band you fall into. If a device tells us someone is under 16, we remember that refusal on the device for a year, so the same person cannot come back a minute later through Apple or Google sign-in instead.

This is self-reported, and we say so plainly: we cannot verify it. It is proportionate to our size today, and it is the first thing we will strengthen as we grow.

If you are worried about a young person on VoiceClub, write to support@voiceclub.live. If it concerns their data, write to privacy@voiceclub.live. Anyone with parental responsibility can ask us to delete a minor's account, and we will.

12. Changes

We'll update this policy as the app evolves and note the date above. When a change affects how we use your data, we tell you in the app before it applies to you and ask you to accept the new version. Where a change needs your consent, we ask for that separately, and you can say no and keep using VoiceClub.

23 October 2026. What changed compared to the version of 25 August 2026:

• Advertising is switched on for free accounts (§6): non-personalised ads from Google AdMob, only after you have answered Google's consent form, with Apple's tracking prompt on iOS. You can decline both. VoiceClub+ members see none.
• Real in-app purchases (§2, §4, §5): VoiceClub+ and token packs are paid through Apple, and our own server checks each purchase with Apple.
• Retention, your rights and the section on young people are updated to match (§9, §10, §11).

This version applies to you from the moment you accept it in the app. No ad is loaded before that, and none before you have answered the consent form.