English
Download

Privacy Policy

Last updated: August 8, 2026

VoiceNPC (the "App") is published by Sunlit Grace Pty Ltd (ACN 690 111 374), an Australian company, which is the data controller for everything described here. Sections 1 to 7 are about the App. Sections 8 and 9 are about this website, which is a separate thing and behaves differently. Section 10 covers the legal bases we rely on and your rights.

1. What Stays on Your Device

Voice cloning and speech generation run entirely on your device, on the Qwen3-TTS model bundled with the App through Apple's MLX framework. Translation runs on your device too, through Apple's Translation framework. None of that needs a server, and we never receive any of it:

This material lives in the App's own storage on your device: recordings and voices in the App's Documents directory, history in a local database, preferences in UserDefaults. No account and no sign-in exists, so there is nothing to link any of it to you.

Two features download data from Apple the first time you use them: the speech model used to transcribe your recording into text, and the translation pack for a language pair. Those downloads carry no content of yours.

2. Copies You Make, and Device Backups

The App can produce copies of your material that you then put somewhere yourself:

Each of these hands a file to a destination you pick, such as the Files app, iCloud Drive, Messages, or AirDrop. Once a copy leaves the App that way, it is covered by whatever service or device receives it, not by this policy.

Separately, iOS includes app data in device backups. If you use iCloud Backup, a copy of the App's data, your voices and generated audio included, forms part of that backup and is held by Apple under Apple's Privacy Policy. You can exclude the App from iCloud Backup in the Settings app, or use encrypted local backups instead.

3. Rewarded Ads

Free users can watch optional rewarded ads to earn energy. Nobody has to: the ads are something you start yourself, and skipping them costs you nothing but the energy. The ads are served by Google AdMob, which may collect device identifiers, your IP address, ad interaction data such as views and taps, and general device information. We never receive any of it. Google processes it under Google's Privacy Policy.

Before any of that happens, the App asks. In the EEA, the UK, and Switzerland you get a consent dialog through Google's User Messaging Platform, and on iOS you also get Apple's App Tracking Transparency prompt. Decline either one and you still get ads, they are simply not personalized. Nothing else in the App changes.

To change your mind later, open Settings → Privacy Settings in the App, which reopens the same consent form. Tracking permission itself lives in iOS Settings → Privacy & Security → Tracking.

4. Invite & Earn (Our Server)

This is the one part of the App that talks to a server we run, at api.voicenpc.com. It exists because a referral reward is worth real money, so it has to be hard to forge. It runs only when you use Invite & Earn: getting your referral code, redeeming someone else's, or collecting energy you have earned.

What our server stores:

When you redeem someone's code, the App also sends a DeviceCheck token. Apple, not us, keeps two bits of state per physical device, which is how a one-time gift survives an uninstall and reinstall. We can read and set those two bits; we cannot read anything else about the device through it.

Like any web request, these calls carry your IP address to our host, Cloudflare, which processes it to route and protect the traffic. We do not store IP addresses in our database or use them to profile anyone.

The App never sends your voices, your text, or your generated audio to this server, or to any other server. If you never open Invite & Earn, the App never contacts it at all.

5. Purchases

Subscriptions and the lifetime purchase are handled entirely by Apple through the App Store. We receive your subscription status through StoreKit so the App can unlock Pro features; we never see your payment details, your card, or your Apple ID.

6. Promotional Settings

On launch the App reads a single settings record from Apple's CloudKit public database, so we can start and end a promotion without shipping an update. It is a read. Nothing about you is uploaded, and no iCloud account is involved.

7. Crash Reports

The App contains no analytics SDK and no third-party crash reporter. If you have turned on sharing analytics with app developers in iOS Settings, Apple sends us aggregated crash reports and performance data through App Store Connect. That is Apple's mechanism, it is yours to switch off, and it contains no voice data or text.

8. This Website

Everything above describes the App. This website is separate, and it loads one thing from Google: an ads tag that measures which ads bring people here.

It runs under Google Consent Mode. In the EEA, the UK, and Switzerland it is denied storage by default, so it sets no cookies until you accept. Elsewhere it runs unless you turn it off. On your first visit, wherever you are, you get a dialog with "Accept all" and "Essential only", and the "Cookie settings" link in the footer reopens it on any page if you change your mind. Choosing "Essential only" also expires the cookies the tag had already set. While storage is denied, Google still receives a request carrying no cookie and no persistent identifier, which it uses to estimate conversions in aggregate. We honour a Global Privacy Control signal from your browser as a refusal until you choose for yourself. Your choice is kept in your browser's local storage and is not sent anywhere.

There is nothing else. No accounts, no comments, no analytics product, no tracking pixels. Fonts are served from this site rather than from Google, so loading a page tells Google nothing unless the ads tag is allowed to run. The site is static and hosted on Cloudflare, which keeps standard server logs including IP addresses to serve and protect the site.

9. Who Else Is Involved

We use no other advertising networks, no analytics services, and no data brokers.

10. Legal Bases, Retention, and Your Rights (EEA, UK, and Similar Laws)

Why we are allowed to process anything. Ads in the App, and the ads tag on this website, store and read data on your device only with your consent, which you give in the App's consent form or the cookie dialog and can withdraw at any time by the routes in sections 3 and 8. The referral records in section 4 do two jobs: they deliver the reward you asked for, and they stop the same reward being farmed, which is a legitimate interest of ours, since without it there would be no rewards to give. Purchases are processed because that is what delivers what you bought.

How long anything is kept. Referral records stay while the referral programme runs, because they are what stops a gift being claimed twice, and are deleted when it ends or when you ask us to delete yours. The one-time challenges our server issues expire after five minutes. Your cookie choice sits in your own browser until you clear it. Everything else, meaning ad data, purchase records, crash reports and the DeviceCheck bits, is held by Google or Apple under their own retention rules, not ours.

Where it goes. Our server runs on Cloudflare's global network, and Google and Apple both process data outside the EEA and the UK under their own transfer terms, including the European Commission's standard contractual clauses. Data leaving the EEA or the UK is theirs to route, not ours.

Your rights. You can ask for access to your personal data, and for it to be corrected, deleted, restricted, or given to you in a portable form, and you can object to processing based on legitimate interests. Almost nothing in the App reaches us, so for most of it the answer is in your own hands: deleting the App removes everything it stored on your device. For the referral records, write to us with the referral code shown in Settings → Invite & Earn, which is the only handle that connects those rows to you, and we will delete them. For what Google collected from ads, use Google's Data & Privacy page. Either way you can write to [email protected] and we will answer.

Complaints. You can complain to a data protection authority. In the EEA that is the supervisory authority for the country where you live or work; in the UK it is the Information Commissioner's Office.

11. Children's Privacy

VoiceNPC is not directed at children under 13, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We update this policy when the App or the site changes what it does with data. Changes are published on this page with a new date at the top.

13. Contact

Questions about this policy, or a request about your data:

Sunlit Grace Pty Ltd
ACN 690 111 374
201 Ripon St S, Ballarat Central VIC 3350, Australia
Email: [email protected]
Website: https://sunlitgrace.com