Effective October 10, 2026
VocalFrame Privacy Policy
This policy explains what VocalFrame keeps on your iPhone and what is shared when you choose optional services. VocalFrame is provided by Ayncode LLC.
What stays on your device
VocalFrame does not require a VocalFrame account. Scripts, recordings, thumbnails, settings, delivery results, and generated transcripts are stored locally on your device. VocalFrame does not operate an advertising or cross-app tracking service.
Optional AI Script Studio
AI generation is optional. Before each request, VocalFrame asks you to allow sharing. If you allow it, the topic, audience, goal, tone, and target length you entered are sent to VocalFrame's secure AI service and OpenAI for moderation and script generation. OpenAI says API content is not used to train its models by default, but standard abuse-monitoring logs may retain request content for up to 30 days, or longer where required by law or reasonably necessary to protect its services or others. VocalFrame temporarily caches the generated draft for up to 24 hours to recover an interrupted request. Do not include private or sensitive information. Ordinary saved scripts and recordings are not sent unless you put their contents into an AI request.
Aggregate AI usage
VocalFrame records AI request status and allowance usage against a pseudonymous app-specific identifier to provide the paid feature and prevent duplicate requests. It also records daily model token totals and request counts for service-cost monitoring and sends only those aggregate totals to Ayncode's website dashboard. The website report does not include prompts, generated drafts, recordings, provider response IDs, or customer identifiers. Daily aggregates have no automatic expiry.
AI service diagnostics
Supabase hosts VocalFrame's AI service and retains technical request and service logs for security, availability, and troubleshooting. These may include network information such as IP address and user agent, request paths, response status, timing, and request identifiers. Provider-managed invocation records may also include request or response details. Retention depends on the hosting plan and provider policies. VocalFrame does not deliberately log prompts, generated drafts, credentials, or recordings in its application error messages. Technical logs are not sent to the website's aggregate analytics report or used for advertising.
Subscriptions
Apple processes payment. RevenueCat processes purchase and subscription status, product identifiers, and VocalFrame's pseudonymous app-specific subscriber identifier for entitlement checks, purchase restoration, and subscription analytics. VocalFrame does not receive payment-card details. This identifier is not used for cross-app advertising.
Camera and microphone
Camera access is used to preview and record practice videos. Microphone access is used to record audio and measure delivery intensity. VocalFrame begins recording only after you choose to start a take.
Speech recognition
VocalFrame uses Apple's Speech Recognition service to compare a take with your prepared script. The app requires on-device recognition when the device supports it. On devices where on-device recognition is unavailable, audio for transcription may be sent to and processed by Apple under Apple's privacy terms. VocalFrame does not run its own speech server and does not receive or retain remote copies of that audio.
Photos and sharing
A recording is added to Photos only when you choose Save. Sharing uses the iOS share sheet and sends the selected recording only to the destination you choose. Content saved to Photos or shared outside VocalFrame is controlled by those services afterward.
Retention and deletion
Local content remains on the device until you delete it, clear the app's data, or remove the app. Deleting an item inside VocalFrame does not delete a separate copy previously saved to Photos or shared elsewhere. VocalFrame's AI backend caches a generated draft for up to 24 hours. Allowance counters and request-status records expire up to 30 days after the applicable allowance period ends, including a billing grace extension. A hashed provider response ID used to prevent duplicate usage reporting expires after 30 days; aggregate daily usage totals have no automatic expiry. OpenAI's standard API abuse-monitoring logs may retain prompts and responses for up to 30 days, subject to legal and safety exceptions. The app-specific AI credential is stored in the iPhone Keychain and may persist after reinstalling; it reconnects the same pseudonymous subscription identity.
Your choices
You can decline each AI sharing request; permission is not saved for future generations. Once a request is sent, it cannot be recalled from provider safety logs. You can change Camera, Microphone, Speech Recognition, and Photos permissions in iOS Settings. For privacy questions or a request about backend records, contact VocalFrame support. Local content can be deleted in the app; copies exported or shared elsewhere are controlled by their destination.
Contact
For privacy questions or assistance, contact ayncode@ayncode.com or visit ayncode.com/contact.