Privacy policy

• Your voice audio never leaves your phone. Recognition runs locally. We do not record, upload, or store recordings of you speaking.
• We collect as little as we can. An email address if you make an account, a display name, and gameplay results.
• We do not sell your personal information and we do not share it with data brokers.
• You can play without an account. Guest play needs no email address at all.

This policy describes how VoxDuel (“we”, “us”) handles personal information in the VoxDuel mobile app and on this website. You can reach us any time at support@voxduel.app.

When it is your turn, VoxDuel listens through your device microphone so you can speak your answer. That audio is processed by a speech recognition model running entirely on your device — whisper.cpp on iOS, ONNX Runtime on Android. The audio is held in memory only for as long as it takes to transcribe it, and is then discarded.

We never transmit or store your raw audio, and we never store the text of what you said. What may leave your device is the outcome of a round: whether an answer was correct and how long it took.

Because recognition is local, answer matching also keeps working when you have no connection.

Account information. If you create an account, we store your email address and an irreversibly hashed password, handled for us by Supabase Auth. If you sign in with Apple or Google, we receive the email address associated with that sign-in rather than a password. If you play as a guest, we create an anonymous identifier with no email address attached.

Profile information. A display name, which is generated for you automatically and which you can change, and an avatar. Avatars are either a built-in preset or a photo you choose to upload, which is cropped, resized, and stored in Supabase Storage.

Gameplay information. Records of duels — the game mode, the category, how many players took part, when it started and ended, and the results. This is what makes stats and leaderboards possible.

Community contributions. Category themes you suggest and votes you cast on the weekly ballot.

Analytics and diagnostics. We use PostHog to understand how the app is used and to catch crashes. This includes screens visited, in-game events, crash and error reports, device model, operating system version, and app version. PostHog session replay is used in a wireframe/screenshot mode with all text inputs masked, and passwords are always masked.

Technical information. Standard server log data, including IP address, is processed when your app or browser talks to our services.

• Recordings of your voice, or transcripts of what you said.
• Contacts, calendars, messages, or your photo library beyond a single avatar image you deliberately pick.
• Precise location. We never request location permission.
• Payment card details. Any future purchases would be handled entirely by Apple or Google, who do not share your card number with us.

VoxDuel does ask for local network access, but only to discover Chromecast devices and smart TVs on your Wi-Fi so you can cast a game. No information about your network is collected or sent to us.

• To run the game — matching players, keeping clocks in sync, and scoring rounds.
• To keep your profile, stats, and unlocked content consistent across sessions and devices.
• To fix crashes and diagnose bugs.
• To understand which modes and categories people actually play, so we build more of what works.
• To prevent abuse and enforce our terms.

We use a small number of service providers who process data on our behalf and are not permitted to use it for their own purposes:

• Supabase — authentication, database, and file storage.
• PostHog — product analytics and error reporting.
• Apple and Google — app distribution, and sign-in if you choose to use it.
• Render — hosting for the multiplayer game server.

We may also disclose information if we are legally required to, or to protect our rights or the safety of our players. We do not sell personal information.

• Account data is kept while your account is active, and deleted when you ask us to delete it.
• Guest profiles that go 60 days without being used are deleted automatically.
• Gameplay records are retained to power your stats, and are removed with your account.
• Analytics data is retained on a rolling basis in line with PostHog retention settings.

You can change or remove your display name and avatar in the app at any time, and you can revoke microphone access in your device settings — though the game cannot function without it.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to certain processing, and to withdraw consent. This includes rights under the GDPR and UK GDPR, and under the CCPA and CPRA in California.

To exercise any of these, email support@voxduel.app from the address on your account. Account deletion requests are actioned within 30 days. See the support page for details.

VoxDuel is intended for players aged 13 and over, and we do not knowingly collect personal information from children under 13. Younger children are very welcome to play in local, pass-the-phone games on an adult’s device, since that requires no account. If you believe a child under 13 has created an account, contact us and we will remove it.

Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

Passwords are hashed, data is encrypted in transit, and database access is restricted by row-level security policies so players can only reach their own records. No system is perfectly secure, but keeping voice processing on-device removes an entire category of risk by design.

If we change how we handle your information we will update this page and move the date at the top. If the change is significant, we will tell you in the app before it takes effect.

Questions, requests, or complaints: support@voxduel.app.