Privacy Policy

Version 6 · Effective date: 2026-08-18

The Turkish version of this text is the governing text.

This notice is prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the related Communiqué. It explains which of your personal data we process when you use Voxie, for what purpose and on what legal ground, who we share it with, how long we keep it, and what your rights are.

1. Data Controller

Your personal data is processed, in the capacity of data controller under Law No. 6698, by:

Name / Trade name: Selçuk Özdemir
E-mail: support@getvoxie.app

2. Personal Data We Process

Profile information: nickname, date of birth, gender, bio, avatar choice, interests, language preference, app preferences.

Account and device information: anonymous user ID, operating system and app version, a hashed value derived from your device identifier, notification permission status and push token, session and last activity timestamps, the version and time at which you accepted the terms.

Location: a city/country-level location derived from your IP address only. Your profile stores the city and country, not the IP address. We never request or use your device's GPS location — the app holds no location permission.

Your IP address: as with any internet connection, your IP address is visible to our servers and infrastructure providers so that requests can reach us. It may appear in server and error logs and is seen by our error-reporting and analytics providers. We do not keep it as a field on your profile and do not use it to profile you.

Communication content: text messages you send and receive, voice notes, photos, stories and any text on them, message reactions, read receipts.

Voice recordings: your profile voice intro and the voice notes you send in chat.

Usage and interaction data: your contact list, who you follow and who follows you, users you have blocked, your likes, who visited your profile and whose profiles you visited, call durations and counts, room participation, profiles shown to you in the discovery feed.

Safety and moderation data: reports you make and reports made about you and their reasons, measures applied, records of rule breaches.

Subscription and payment data: the product purchased, amount, currency, country code, transaction ID, subscription start/end dates, trial and refund status. We never have access to your card details; payment is taken by Apple or Google.

Technical records: app error and crash reports, server request logs, in-app event (analytics) records.

3. Audio and Images: What We Record and What We Don't

We do not record: your one-to-one voice calls and your conversations in voice rooms are transmitted in real time only. These conversations are not recorded, not stored and cannot be listened to later.

We do store: your profile voice intro and the voice notes you send in chat are kept as files on our servers — being able to play them back later is the feature itself. The same applies to the photos you send and the story images you share.

We do not extract a biometric voiceprint or template from your voice for identification purposes, and we do not run facial recognition on your photos. This data is therefore not processed as special category personal data.

See section 11 for retention periods.

4. Purposes of Processing and Legal Grounds

Creating your account, displaying your profile, matching, messaging, voice calls, rooms and stories, managing your subscription
→ KVKK Art. 5/2-(c): directly related to the conclusion or performance of a contract.

Preventing and detecting rule breaches, reviewing reports, blocking fake and duplicate accounts, applying quotas and enforcement at device level, keeping the service secure
→ KVKK Art. 5/2-(f): our legitimate interest, provided your fundamental rights are not harmed.

Building the discovery feed and ranking profiles
→ KVKK Art. 5/2-(c) and Art. 5/2-(f) (see section 9).

Keeping error and crash records, maintaining the service technically
→ KVKK Art. 5/2-(f): legitimate interest.

Meeting our legal obligations, responding to requests from competent authorities, retaining evidence in legal disputes
→ KVKK Art. 5/2-(ç): compliance with a legal obligation, and Art. 5/2-(e): establishment, exercise or protection of a right.

Processing analytics events to improve the product and understand usage
→ KVKK Art. 5/2-(f): legitimate interest. This processing is not required for core functionality; if you want analytics measurement switched off, write to support@getvoxie.app.

We do not sell your personal data for any purpose and do not share it with advertising networks. The App contains no advertising and no ad-tracking SDK.

5. How We Collect Data

Your personal data is collected through the App by wholly or partly automated means: information you enter yourself (profile, messages, media), records generated automatically while the App runs (sessions, interactions, technical logs), and information from third-party providers (your subscription status).

6. What Other Users Can See

Your nickname, avatar, bio, gender, the age calculated from your date of birth, your interests, whether you have a voice intro, your total likes, the level calculated from your microphone time, your activity status and your stories are shown to other users. Your date of birth itself is not shown — only your age.

In privacy settings you can hide your online status, turn off your statistics and leave the discovery feed entirely.

Our authorised personnel may access your account data, including message content, strictly for the purposes of reviewing reports, detecting abuse, resolving technical faults and meeting legal obligations.

7. Who We Share Data With

To deliver the service, your personal data is processed by the following categories of supplier, only on our instructions and for the purposes set out in this notice:

• Cloud infrastructure and data storage providers — hosting your account, messages and media files, and running server-side operations.
• Real-time voice infrastructure provider — transmitting voice calls (no recording is made).
• Subscription and payment infrastructure providers and the app stores — processing purchases and verifying subscription status.
• Notification delivery and app update providers.
• Error reporting and product analytics providers — keeping the app running and measuring usage.

The principal providers in these categories are currently Google (Firebase and Google Cloud services), Agora, RevenueCat, Expo, and the Apple App Store and Google Play. Our providers may change over time; you can obtain the current list of third parties your data is transferred to at any time under KVKK Art. 11/(ç) by writing to support@getvoxie.app.

When a link (such as YouTube, Spotify or TikTok) is shared in chat, your device connects directly to that site to build the preview, and your IP address becomes visible to that site. You can turn link previews off in settings.

Data may also be transferred to public authorities and judicial bodies where their requests comply with the law.

We do not sell your personal data and do not share it with advertising networks.

8. International Transfers

Because the servers and/or headquarters of the providers in the categories above are located abroad, your personal data is transferred outside Türkiye.

These transfers are made under Article 9 of the KVKK, on the basis of the standard contracts published by the Turkish Data Protection Authority and other appropriate safeguards. Standard contracts are notified to the Authority within five business days of signature.

You can request details of the countries involved and the safeguards in place by writing to support@getvoxie.app.

9. Discovery Ranking and Automated Evaluation

The order in which profiles appear in the discovery feed is calculated automatically. This calculation produces a visibility score for you.

The main signals affecting the score:

• how recently you were active (the strongest factor),
• whether you have a Voxie+ subscription,
• whether you have a voice intro,
• how many interests you selected,
• whether you filled in your bio,
• engagement signals such as your total number of conversations and how often your voice intro is played.

The following adjustments are also applied while ranking: dilution so you do not see the same profile repeatedly; reduced visibility as your number of unanswered incoming messages grows; a temporary boost for new accounts in their first 48 hours; a temporary reduction in visibility when a report about you is processed; and a small share of the feed selected at random, independently of score.

This evaluation only affects where your profile appears in the discovery feed. It does not block your access to the service, does not stop you sending messages and produces no legal effect for you.

If you believe this automated evaluation has produced a result to your detriment, you may object under KVKK Art. 11/1-(g). Send your objection to support@getvoxie.app and a person will review your case and inform you of the outcome.

10. Automated Moderation and Enforcement

To keep the service safe, some decisions are applied automatically:

• when you report a user, a mutual block is applied immediately between you,
• where the same story is reported by several users, it may be withdrawn until review is complete,
• nicknames, room titles and story text pass through an automated content filter and are rejected if they breach the rules,
• where reports about you exceed defined thresholds, your account may be suspended automatically.

You can appeal suspension or closure decisions as described in section 9 and ask for the decision to be reviewed by a person.

11. Retention Periods

• Profile information and account record: while your account is open.
• Text messages and chat history: until you or the other party deletes the conversation.
• Voice notes: 30 days from sending.
• Profile voice intro: until you remove it, up to 90 days if not refreshed.
• Photos sent in chat: 7 days.
• Stories and view records: 24 hours.
• Profile visitor records: 30 days from the last visit.
• Unanswered discovery messages: 7 days.
• Daily usage counters: 7 days.
• Report records and measures applied: for the applicable limitation periods.
• Subscription and payment records: for the retention periods required by law.
• Hashed device identifier and account closure record: to prevent abuse, until that purpose ceases.
• Reported content: retained as evidence for the duration of the review and any legal process.

When the periods expire, data is deleted, destroyed or anonymised.

12. What Happens When You Close Your Account

You can close your account under Settings → Delete Account. This cannot be undone.

When you close your account:

• your profile becomes completely inaccessible to other users; you no longer appear in the discovery feed, in search or in any list,
• your nickname is released and can be taken by someone else,
• your push tokens are deleted and your presence records and active sessions are removed,
• your anonymous sign-in record is deleted; if you open the App again you start with a brand-new account.

Data kept for a period after closure:

• messages you sent remain in the recipient's chat history,
• reports about you and measures applied are kept to prevent abuse and to meet legal obligations,
• subscription and payment records are kept as required by law,
• the hashed value of your device identifier and the account closure record are kept. This record does not identify you; it is used only to stop an enforced account returning under a new identity and to limit how often accounts can be deleted,
• your profile information (nickname, date of birth, gender, bio, interests) remains in the system with the account marked as closed. This record is shown to no user and used in no feature; it is kept so that enforcement decisions and legal claims can be assessed retrospectively. You may request erasure of this data as well.

Your right to request full erasure is reserved; see sections 15 and 16.

13. Children's Data and Age Limit

Voxie is for users aged 18 and over. We do not knowingly process the data of anyone under 18.

If we identify an account belonging to someone under 18, we close it immediately, withdraw their content and delete their personal data as soon as the law permits. Only the minimum record needed to stop the same person opening another account is retained.

If you believe your child has an account on Voxie, write to support@getvoxie.app to request closure of the account and deletion of the data; such requests are handled as a priority.

We may apply age verification where the law requires it.

14. Data Security

We take technical and administrative measures to provide an appropriate level of security, to prevent unlawful processing of and access to your personal data, and to safeguard it: encryption in transit (TLS), authorisation and access controls, server-side validated write rules, irreversible hashing of device identifiers, access to media files only through time-limited signed links, and access logging.

Your messages are not end-to-end encrypted; they are stored in readable form on our servers for service delivery, moderation and legal obligations. We therefore recommend that you do not share sensitive information through the App.

In the event of a data breach we notify the Turkish Data Protection Board and affected users within the periods prescribed by law.

15. Your Rights Under the KVKK

Under Article 11 of the KVKK you have the right to apply to the data controller and:
a) learn whether your personal data is processed,
b) request information if it has been processed,
c) learn the purpose of processing and whether the data is used in line with that purpose,
ç) know the third parties to whom it is transferred in Türkiye or abroad,
d) request correction if it is incomplete or inaccurate,
e) request erasure or destruction under the conditions of Article 7,
f) request that operations under (d) and (e) be notified to third parties to whom the data was transferred,
g) object to a result to your detriment arising from analysis of the data exclusively by automated systems,
ğ) claim compensation for loss arising from unlawful processing of your personal data.

16. How to Apply

Under the Turkish Communiqué on Application to the Data Controller, you may submit requests:

• From an e-mail address you previously notified to us and which is registered in our system: support@getvoxie.app

Your application should include your name, your signature (for written applications), any information identifying your account, an address for notification, and the subject of your request.

Your request will be concluded free of charge as soon as possible and within thirty days at the latest. Where the process incurs an additional cost, the fee set in the Board's tariff may be charged.

If your application is rejected, you find the response inadequate, or no response is given within the period, you may complain to the Turkish Data Protection Board within thirty days of learning the response and in any event within sixty days of the application.

17. Changes to This Notice

We may update this notice because of changes in the law or in the service. Material changes are announced in the App. Each version has a number and an effective date, shown at the top of this page.