Privacy

What this website and its waiting list do with your data, in full, and a plain summary of how the Voice Heritage app treats your family’s voices, stories and personal data.

The parts about this website and the waiting list are complete. The app’s part is a summary: Voice Heritage is still being built, and only the founder’s own family uses it so far. The app’s full privacy policy, reviewed by a lawyer, will be published here before other families join.

Who is responsible

Edgar Bedewkin, Voice Heritage, Stisilaou 28, 11363 Athens, Greece. Email: info@voiceheritage.app. Write to this address about anything on this page, including your rights below.

This website

This website sets no cookies and runs no analytics, tracking or monitoring scripts. Its fonts come from this website itself, not from Google.

Like every website, it is delivered by a server that writes a short technical log of each request: your network (IP) address, the time, the page asked for, and what your browser says about itself. We need this to deliver the pages and to protect the website from attacks; the legal basis is our legitimate interest in running the website securely (Article 6(1)(f) GDPR). Netlify, which delivers the website, keeps these logs; we don’t combine them with anything else.

The invitation page sends only the invitation’s code to our database, to play the few words of the person who invited you.

The waiting list

When you join, we keep your email address and your language in our database in Frankfurt, only to write to you when Voice Heritage opens. The legal basis is your consent (Article 6(1)(a) GDPR).

First we send you an email to confirm. With the address we keep the time you joined and the time you confirmed, as proof of your consent. If you don’t confirm, we delete your address 7 days after our last email.

You can leave the list at any time with one click in any of our emails, or by writing to us; we then delete your address at once.

We also keep which page of this website you joined on (for example the home page or one of the question pages), so we can see which of our pages helps families. It is only the page’s name, nothing about you or your device, and it is deleted with your address.

So that nobody can fill the list with other people’s addresses, we keep a one-way fingerprint of your network address (a code from which the address itself can’t be read back) for one to two days. The legal basis is our legitimate interest in preventing abuse (Article 6(1)(f) GDPR).

Who helps us

  • Netlify, Inc., San Francisco, USA Delivers this website and keeps its technical logs. Data may be processed in the USA. Netlify is certified under the EU-US Data Privacy Framework, which the European Commission recognises as adequate protection.
  • Supabase, Inc., USA Runs our database in Frankfurt, Germany, and the small program that receives the waiting list form and sends the emails; it keeps technical logs of these requests, with the network address. The basis for access from the USA is the EU Standard Contractual Clauses in our agreement with Supabase.
  • Zoho ZeptoMail (Zoho Corporation) Sends the confirmation email and our other emails to you, from its servers in the European Union.

How long we keep what

  • Confirmed addresses on the waiting list Until you leave the list.
  • Unconfirmed addresses on the waiting list 7 days after our last email.
  • The fingerprint of your network address One to two days (deleted every night once it is a day old).
  • Supabase’s technical logs At most 7 days.
  • Netlify’s technical logs As long as Netlify needs them to deliver and protect the website; Netlify names no fixed period.
  • Our email provider’s record of each email To whom and when it was sent, and whether it arrived: 60 days. It doesn’t keep the email’s content.

Your rights

You may ask us what we keep about you and get a copy of it, also in a common format; have it corrected or deleted; ask us to limit how we use it; and object to what we do on the basis of our legitimate interest. You can withdraw your consent at any time, with effect for the future. Write to info@voiceheritage.app.

You may also complain to a data protection authority: where you live or work, or in Greece, where we are based, to the Hellenic Data Protection Authority (www.dpa.gr).

The app: our principles

  • No voice without spoken consent. A voice is only created from recordings made in the app, after spoken consent, kept as proof. We don’t copy voices from old recordings of people who can’t give their consent.
  • Always labelled. Anything made by AI is marked as AI-generated.
  • Families are sealed off from each other. Only members of a family can see its people and stories.
  • Delete means delete. Deleting a recording, a voice or an account removes it, and we ask our service providers to delete their copies.
  • As little data as possible. We collect no usage statistics about anyone. Error reports never contain names, email addresses, audio or transcripts.
  • Nothing goes to an AI service without your yes. Before a recording is sent to a voice or transcription service, you are told what is sent and to whom, and you decide. You can change this at any time in Settings, under “AI services”.

The app: what we keep

Your account: email address, name, language and time zone.

Your family: its name, members and roles, and the people in it with only what the family chooses to add (birthdays, where they were born, languages, photos, how they are related).

Voice recordings, with the spoken consent and the wishes that go with them, and the stories, transcripts, photos, recipes, letters and questions your family adds.

Lesson progress and your reminder time, and later your subscription status.

If you switch on family alerts: your phone’s push address, which alerts you want, and for 30 days a note of which alerts were due (who and about what, never the words of a story).

Our database is in the European Union (Frankfurt, Germany). Sign-in and invitation emails are sent through a provider in the EU. Family alerts pass through Expo’s push service and Apple or Google, which see only the alert’s few words. The voice service is being set up; it will receive only what it needs, after your yes, and will be named in the full policy.

Some things never leave your phone: how the app looks, where you stopped listening in a long story, a recording kept safe if you leave the app in the middle of it, and, only if you ask for it, your location for Family sky.

The app: your choices

In the app you can download a copy of your data (Settings, then “Download my data”), correct your data, delete a recording, a story, a voice or your whole account, and withdraw consent for your voice at any time.

Deleting your account deletes your voice (also at the voice service), your recordings, the stories you told and your lessons. Stories you recorded of other people stay for your family, without your name. We keep only the record of the consents you gave, without any recordings, as proof.

How to delete your account, in the app or by email

Last updated 5 November 2026