Effective date: July 21, 2026
Voco is a voice-first calorie and macro tracker for iOS (App Store bundle fit.voco.app). This policy explains what Voco collects, why, where it lives, and the control you have over it. It is written to be read, not to be survived — plain language, short sections.
Voco is built and operated by an individual developer ("Voco," "we," "us"). If anything here is unclear, email us (see Contact).
We only collect what the app needs to work. That is:
We do not collect your contacts, your photos, your precise location, or any advertising identifier. We do not track you across other apps or websites.
We do not sell your data. We do not share it with advertisers or data brokers. We do not use it for third-party marketing.
This is the part people care about most, so here is exactly what happens.
When you record a meal by voice, the app uploads that short audio clip once to our secure server function. There, the clip is sent to a speech-to-text service, transcribed into text, and then the parsed text is analyzed to estimate the food and its macros.
The audio itself is never stored. After transcription, the server discards the audio clip — there is no code path that writes the recording to any database, file store, or bucket, and the in-memory copy is released as soon as the transcript comes back. What we keep is the text transcript and the nutrition numbers derived from it. Nothing else.
On your phone, the app holds the clip only transiently — long enough to retry the upload if the network hiccups — and does not save it to your camera roll or anywhere persistent.
Speech-to-text is performed by ElevenLabs (primary) with OpenAI as an automatic fallback if the primary service is unavailable; the text is then interpreted by an OpenAI model. These providers process the audio and text to return a result and act as our processors under this policy (see the table below). We do not use your recordings to train our own models.
Microphone access is only used while you are actively recording a log. If you deny microphone permission, Voco falls back to typing — the app still works.
Your profile, logs, and subscription state are stored in a PostgreSQL database hosted on Supabase, in the United States (AWS us-east-2).
Access is enforced at the database level by row-level security: every query runs as you, and the rules make it impossible for one account to read or write another account's rows. The app talks to the database using your own signed-in session token — the privileged "service role" key that could bypass those rules never exists on your device; it lives only in our server functions and is used only for narrowly defined jobs (like deleting your account).
Your login session is stored on your device in the iOS secure keychain (via expo-secure-store), not in general app storage. All traffic between the app, our servers, and our processors is encrypted in transit (HTTPS/TLS).
No system is perfectly secure, but we keep the collected data minimal and the access rules strict specifically to limit what a breach could ever expose.
We rely on a small set of vendors to run the app. Each one only receives the data it needs for its job, and each is bound to handle it on our behalf.
| Processor | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, and server functions (the backend) | Your account, profile, logs, and subscription status |
| ElevenLabs | Speech-to-text (primary transcription) | The voice clip, transiently, for transcription only — not retained by us afterward |
| OpenAI | Speech-to-text fallback + interpreting the transcript into foods and macros | The voice clip (fallback only) and the meal transcript text |
| PostHog | Product usage analytics | A random user ID plus non-personal event data (screens viewed, feature usage, durations) — no food text, no weights, no email |
| Sentry | Crash and error reporting | Crash diagnostics tied only to your user ID — no email, no IP, no personal content |
| RevenueCat | Subscription management | Your user ID and subscription entitlement state |
| Apple | App distribution, Sign in with Apple, and payment processing | Your purchase transaction (handled entirely by Apple) and, if you choose it, your Apple sign-in identity |
Payments: subscriptions are purchased through Apple's In-App Purchase system. Apple processes the payment. We never see or store your card number or payment details — we only receive a signal from RevenueCat/Apple that your subscription is active.
We keep your data for as long as your account exists, so your history and streak are there when you come back.
You can delete everything from inside the app. Go to Settings → Delete Account. This permanently deletes your account and, through database cascade rules, all data tied to it — profile, food logs, weight logs, workout logs, streaks, weekly insights, and usage counters. This is a hard delete, not a hide; it cannot be undone.
Data export: you can request a copy of your data by emailing us (see Contact), and we will send it to you in a portable format.
Analytics and crash records held by PostHog and Sentry are keyed to your random user ID and are retained per those providers' standard retention windows; because they contain no personal content, they cannot identify you on their own.
We measure how the app is used so we can improve it — but we built the analytics to be personal-content-free by design.
Voco is not directed at children under 13, and it is not intended for them. By using Voco you confirm you are at least 13 years old.
We ask for your age during onboarding so we can calculate your metabolism, not to verify eligibility — Voco does not run a formal age-verification gate. If you are a parent or guardian and believe a child under 13 has created an account, email us (see Contact) and we will delete it.
Wherever you live, you can:
Depending on where you live you may have additional rights under laws such as the GDPR (EU/UK) or the CCPA/CPRA (California) — including the right to know what we collect, the right to deletion, and the right not to be discriminated against for exercising these rights. Voco already applies these principles to everyone: we collect little, we never sell your data, and deletion is one tap away. To exercise any right that the app does not already let you do directly, just email us.
If we change this policy, we will update the effective date at the top and post the new version at the same address. For material changes we will make a reasonable effort to notify you in the app. Continuing to use Voco after an update means you accept the revised policy.
Questions, requests, or privacy concerns:
Email: privacy@voco.fit