VoClone Privacy Policy

1. Information We Collect

1.1 Account and authentication information

• Anonymous account data: a unique Firebase user ID, account creation and last sign-in timestamps, and account status.
• Google or Apple OAuth data: when you choose to register, link, or sign in, the provider may give us your email address, display name, profile photo URL, provider identifier, and related sign-in metadata, depending on your provider settings.
• Account profile data: your user ID, sign-in method, app version, device model, operating-system version, and platform type may be associated with your account.

1.2 Content and media

We collect and process content you submit or create when you use VoClone features, including:

• voice and sound recordings, uploaded audio, music files, and extracted audio;
• photos, cover images, video clips, and other media you select or upload;
• generated voice, music, image, and video outputs;
• text prompts, scripts, lyrics, voice descriptions, search terms, titles, and other generation instructions;
• project, library, generation-job, clip, and file metadata; and
• support-request subjects, messages, attachments, and replies.

Microphone, camera, photo, video, and media permissions are requested only when needed for a feature you choose to use. Granting a device permission does not by itself upload all data available through that permission.

1.3 Device, network, and identifier information

• device model, operating system, app version, platform, language or locale, and basic device capabilities;
• IP address and approximate location derived from an IP address;
• advertising ID, Firebase installation and app-instance IDs, device or vendor identifiers, and attribution identifiers;
• push-notification token and notification delivery information; and
• network, request, security, integrity, anti-abuse, and rate-limiting metadata.

1.4 Usage, advertising, and diagnostics

• screen views, button taps, app interactions, searches, feature usage, generation outcomes, ad interactions, and consent choices;
• subscription, credit, entitlement, and purchase events, including product identifiers, price, currency, and transaction status;
• crash logs, error reports, performance data, diagnostics, and technical troubleshooting information; and
• campaign, referrer, deep-link, installation, session, and advertising-attribution information.

Payments are processed through the applicable app store and RevenueCat. We receive purchase and entitlement information needed to provide paid features, but we do not receive your full payment-card number.

2. How We Use Information

We use the information described above to:

• authenticate users, create or link accounts, sync user libraries, and manage accounts;
• provide voice cloning, text-to-speech, voice design, music, cover, image, video, and related AI-assisted features;
• upload, process, store, deliver, and let you manage requested media and generated results;
• manage credits, subscriptions, purchases, entitlements, restoration, and customer support;
• send service, support, security, and push-notification communications;
• measure app usage, advertising performance, installations, campaigns, and product performance;
• detect fraud, abuse, duplicate free-credit claims, security incidents, and violations of our terms;
• diagnose crashes and errors, maintain reliability, and improve app features and user experience; and
• comply with legal obligations and enforce our agreements.

3. How We Share Information

We do not sell personal information for money. We disclose information to service providers and third parties when needed for the purposes described in this policy, subject to their roles, our configuration, your consent choices where applicable, and applicable law.

3.1 Cloud, authentication, analytics, and messaging

Google and Firebase provide authentication, database, cloud storage, Cloud Functions, app integrity, Remote Config, analytics, crash reporting, messaging, and related infrastructure. Google also provides Google Sign-In and Google Play services.

3.2 Purchases and subscriptions

RevenueCat processes app-user identifiers, subscription and purchase history, entitlements, and customer attributes such as email or display name when available. RevenueCat may send configured subscription lifecycle and attribution events to advertising or attribution partners such as Meta and Adjust.

3.3 Advertising, attribution, and measurement

• Google AdMob may collect or receive approximate location, device or advertising identifiers, app interactions, ad interactions, and diagnostic information to provide advertising, measurement, analytics, and fraud prevention.
• Adjust may collect or receive device and advertising identifiers, IP address, installation, session, deep-link, campaign, app-event, ad-revenue, and purchase-attribution information.
• Meta may collect or receive app events, advertising or device identifiers, attribution information, and configured subscription or purchase lifecycle events for advertising measurement and optimization.

Where required, VoClone provides consent controls for analytics, ad storage, ad user data, ad personalization, or tracking. Your choices can limit some advertising and analytics processing, but information required for authentication, security, purchases, fraud prevention, or core app operation may still be processed.

3.4 AI and media processing

We send the content and instructions needed to fulfill your request to cloud, AI, voice, music, image, video, and media-processing providers. Depending on the feature, this may include Google AI services, ElevenLabs, and infrastructure or model providers operating on our behalf. We limit these transfers to information reasonably needed to provide the requested feature.

3.5 Other disclosures

We may also disclose information when you direct us to share or export content, when required by law or legal process, to protect users or our services, or as part of a merger, financing, acquisition, or transfer of assets subject to appropriate safeguards.

4. Data Retention and Security

4.1 Retention

• Account information: retained while your account is active and then deleted or de-identified in accordance with the account-deletion process below, subject to limited retention exceptions.
• User content: retained while needed to provide your library, projects, generated results, or requested features, or until you delete it or request deletion.
• Temporary processing data: retained only as long as reasonably needed to complete, retry, secure, or troubleshoot processing, unless it becomes part of a saved project or result.
• Purchase and transaction records: retained as needed to provide entitlements, handle refunds and disputes, prevent duplicate grants, and meet accounting or legal obligations.
• Security and anti-abuse records: limited identifiers, rate-limit records, deletion records, and credit or migration signals may be retained as reasonably necessary to prevent fraud, abuse, or repeated free-credit claims and to protect transaction integrity.
• Analytics and diagnostics: retained according to our configured retention periods and the applicable service provider's retention settings.

Information may remain for a limited period in backups, logs, or a service provider's systems before being deleted or de-identified under applicable retention schedules. We may retain information longer when required by law, to resolve disputes, or to enforce agreements.

4.2 Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. VoClone uses HTTPS/TLS for network transmissions to its configured services, authentication and access controls for user-specific resources, and platform security services. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

5. Account and Data Deletion

What the account-deletion process removes

The account-deletion process removes your Firebase Authentication identity and deletes or de-identifies active account-profile records, including available email, display name, profile-photo URL, account-linked generation jobs, clips, purchaser information, credit history, and custom-voice-slot records.

You can delete individual media and generated outputs in VoClone before deleting your account. If your account has already been deleted, or you want us to locate and delete remaining account-linked media in active cloud storage, email info@mobover.com with the subject "VoClone Data Deletion Request".

Information we may retain after deletion

We may retain limited security, fraud-prevention, credit-migration, transaction, legal, and deletion-request records, such as a deleted-user marker, user or transaction references, advertising ID, IP address, rate-limit information, and purchase-integrity records. We retain these only for the purposes described in Section 4 and restrict their use accordingly. Service-provider records and backups may remain until their applicable retention periods expire.

6. Your Choices and Privacy Rights

• You may use the App anonymously or choose to link a Google or Apple account.
• You may deny or revoke microphone, camera, photo, video, notification, or tracking permissions through your device settings, although related features may stop working.
• Where available, you may change advertising and analytics consent choices through the App or platform controls.
• You may delete individual content through available App controls and request account or data deletion as described above.
• Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal information, and to withdraw consent.

To exercise a privacy right, contact us using Section 10. We may need to verify your identity before fulfilling a request. You may also have the right to complain to your local data-protection authority.

7. Children's Privacy

VoClone is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to VoClone, contact us so we can investigate and take appropriate action.

8. International Data Transfers

Mobover is based in Türkiye, and our service providers operate in multiple countries. Your information may therefore be processed in countries other than where you live. Where required, we rely on appropriate legal mechanisms and safeguards for international transfers.

9. Changes to This Policy

We may update this Privacy Policy as VoClone, our providers, or legal requirements change. We will post the updated policy, revise the "Last Updated" date, and provide any additional notice required by law.