Privacy Policy

Information We Collect

We collect information needed to create accounts, connect people, and deliver voice messages:

• Account information. Your verified phone number, username, account identifier, account timestamps, notification token, and a one-way hash of your normalized phone number.
• Contacts information. If you grant Contacts access, the app reads names, photos, and phone numbers on your device. Names and photos are cached on your device. Phone numbers are normalized and hashed before matching with registered users. If you invite an unregistered person, we store the contact name and hashed number so the invitation can be connected to an account later.
• Messages and content. Voice recordings, transcripts and word timing, message duration, sender and recipient information, group membership, replies, reactions, delivery and listening state, and message timestamps. Transcription is performed on your device when supported and authorized, then the transcript is stored with the message.
• Safety information. Block records and reports. A report may include the reported account, message identifier, group identifier, and up to 500 characters of transcript.
• Technical and usage information. App and device information, IP address and server logs, authentication and security signals, notification delivery information, and feature and performance events. Our custom analytics events do not include message content, message identifiers, recipient identifiers, or group identifiers.

How We Use Information

• Create and secure your account and verify your phone number.
• Find registered contacts, manage connection requests, and deliver direct and group messages.
• Store and play recordings, show transcripts, send notifications, and provide requested translations.
• Maintain message state, retries, blocking, reporting, abuse prevention, and service limits.
• Diagnose failures, measure feature performance, protect the service, and comply with legal obligations.

Permissions and Choices

Microphone access is required to record messages. Contacts, speech recognition, and notifications are optional and can be changed in iOS Settings. Without those permissions, contact matching, transcripts, playback highlighting, or alerts may be limited. You can use Voicemail's Settings screen to review permission status.

Service Providers and Sharing

We use service providers only to operate and protect Voicemail:

• Google Firebase provides phone authentication, database, file storage, cloud functions, push notifications, app integrity checks, and analytics.
• Apple provides iOS permissions, on-device speech recognition, push notification delivery, and App Store distribution.
• ElevenLabs receives a recording when translation is enabled for a message and returns a translated recording and transcript. The temporary dubbing project is deleted after processing.

We may also disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal information or use message content for advertising.

Provider information is available from Firebase, Apple, and ElevenLabs.

Storage, Security, and International Processing

We use access controls, authenticated requests, app integrity checks, and private storage rules designed to limit access to account and message data. No system is completely secure. Our providers may process information in the United States and other countries where they operate.

Retention and Deletion

We keep account and message information while your account is active and as needed to provide the service, resolve failures, prevent abuse, and meet legal obligations. You may delete messages in the app. Delete Account in Settings removes your account, profile, messages you sent, recordings, contacts, group membership, pending local sends, and authentication record. Reports you submitted are deleted. Reports about your account may be retained for safety review without your account identifier or username. Some backups and provider logs may remain for a limited period before normal deletion cycles complete.

Your Requests

Depending on where you live, you may have rights to access, correct, delete, or restrict certain uses of your personal information. To make a request, email privacy@universals.co. We may need to verify that you control the associated account.

Children

Voicemail is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to the service.

Changes and Contact

We may update this policy as the service changes. We will post the revised policy here and update the effective date. Privacy questions can be sent to privacy@universals.co. General support requests can be sent to support@universals.co.