Privacy policy

Privacy Policy for Portus Voice AI

Effective Date: September 20, 2026

Last Updated: September 20, 2026

Operator: Portus Voice AI (United Kingdom)

Official Website: https://www.portusvoice.co.uk

Contact Email: support@portusvoice.co.uk

Portus Voice AI ("we," "our," or "us"), operated from the United Kingdom, provides the Portus Voice AI mobile application and website. This Privacy Policy details our policies on personal data collection, processing, protection, and your statutory rights under the UK Data Protection Act 2018, UK GDPR, EU GDPR, and the Google API Services User Data Policy.

1. Data Controller

For the purposes of the UK and EU GDPR, the Data Controller responsible for your personal data is Portus Voice AI, located in the United Kingdom. Inquiries can be directed to support@portusvoice.co.uk.

2. Personal Data We Collect

We collect only the information strictly necessary to provide user accounts, speech learning features, and app stability:

- Google Account Data: When you sign in using Google Sign-In, we access your name, email address, profile picture URL, and unique Google OAuth identifier (sub claim).

- Apple Account Data: When you sign in with Apple, we access your name, authenticated email address, and unique Apple account identifier.

- Voice and Speech Data: Audio input spoken during interactive pronunciation and conversation practice. Voice data is processed transiently in real time to generate feedback and conversational dialogue. We do not retain or store raw audio recordings on our servers after analysis.

- Diagnostics and Telemetry: Device model, operating system version, app version, and crash stack traces to diagnose platform defects and ensure stability.

- Purchase Records: Transaction identifiers, purchase timestamps, and subscription entitlement status via Google Play, Apple App Store, and RevenueCat. We never collect or store credit card or banking information.

3. How We Use Data and Legal Basis (UK/EU GDPR)

- Contractual Necessity: To authenticate your account, maintain your session across devices, and unlock subscription features.

- Consent & Contract: Processing microphone audio input to deliver real-time pronunciation feedback and AI speech dialogue.

- Legitimate Interests: Analyzing crash diagnostics, maintaining app security, and preventing fraudulent activity.

- Legal Obligation: Fulfilling statutory UK financial and accounting record-keeping requirements.

4. Google API Services User Data Policy & Limited Use Disclosure

Portus Voice AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

- Google user data (name, email, profile picture, user ID) is used solely to authenticate your identity, create your user session, and associate your learning progress across devices.

- We do not sell, rent, or lease Google user data to third parties.

- We do not use Google user data to serve advertisements, personalized marketing, or cross-context behavioral profiling.

- We strictly do NOT use personal data retrieved via Google OAuth to train, retrain, fine-tune, or improve generalized artificial intelligence or machine learning models.

- No human personnel can read your Google account data unless you explicitly give consent for technical troubleshooting, or when required by law or security investigations.

5. Third-Party Data Processors and International Transfers

Personal data is shared strictly with trusted technical processors under data protection agreements:

- Google Cloud Platform & Firebase (USA): Identity authentication and cloud hosting infrastructure.

- RevenueCat, Inc. (USA): Mobile in-app purchase verification and subscription management.

- Apple & Google Play: Mobile app distribution and payment processing.

Data transfers outside the UK or EEA are protected via UK International Data Transfer Agreements (IDTA) or European Commission Standard Contractual Clauses (SCCs).

6. Data Security

We apply industry-standard protections:

- All data in transit is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).

- Cloud databases enforce AES-256 encryption at rest.

- Authentication tokens are stored securely in hardware-backed device keystores (Android Keystore / iOS Keychain).

7. Account Deletion and Revocation

- In-App Deletion: You can permanently delete your account and all associated personal data anytime in the App via Settings -> Account -> Delete Account.

- Email Request: You may email support@portusvoice.co.uk to request permanent data deletion. We complete all deletion requests within 30 days.

- Revoking Google Permissions: You can revoke Portus Voice AI's access to your Google account at any time at: https://myaccount.google.com/permissions

8. Your Statutory Rights (UK & EU)

Under the UK GDPR and EU GDPR, you have the right to access, rectify, erase, restrict, object to processing, and request portability of your personal data. To exercise these rights, contact support@portusvoice.co.uk. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk or +44 303 123 1113.

9. Children's Privacy

Portus Voice AI is not directed to children under 13 (or under 16 in the UK/EEA). We do not knowingly collect personal data from children without verifiable parental consent.

10. Contact Us

For any inquiries regarding this policy:

Email: support@portusvoice.co.uk

Website: https://www.portusvoice.co.uk