Privacy Policy

Last updated: 30 October 2026 (you can see and remove the videos you've watched in Settings)

In short: your recordings are private and encrypted, used only to help you practise, and never sold. Anything you choose to share can be seen by anyone with the link until you delete it. You can download or delete your data at any time.

Who we are

VocaBoba (formerly Voice Training) is run by JoaTyyFerLyy, an individual in Singapore, in line with Singapore's Personal Data Protection Act (PDPA). Questions? Use the contact form.

What we collect

Your email, when you sign in (with email through Cloudflare, or with Google). If you sign in with Google, we receive your Google account ID, your name and your email address from Google, and nothing else. A new account starts with your Google name as its profile name; change it any time, and the Google name isn't kept anywhere else. We don't use your Google profile picture.
Your profile: name, pronouns, age range (not your birth date), goals, and an optional profile picture.
Your recordings and the measurements made from them (like pitch), plus the ratings and notes you add.
Daily routine and everyday speech: your answers are recordings like any other, kept and deleted the same way. The spoken prompts are made on our own server with an open voice model; no one's voice or data goes into them.
Streaming overlay (if you use it): while you send, your live pitch (and resonance, if you chose it) goes to our server as numbers only, is kept in memory for a few seconds, and is shown to anyone who opens your private overlay link. Nothing is recorded or stored. The link itself is kept until you change or remove it.
Your target voice (if you design one): the target numbers (a pitch, and resonance and weight changes compared with your starting voice) and, unless you choose "Numbers only", the designed clip, encrypted like your recordings. The phrase you say to design it is only held in the server's memory while you design (up to 30 minutes), never saved. The voice is changed on our own server with open-source software (WORLD). Moderators see only totals across everyone, never whose, and groups under 5 people are hidden.
Reading passages: your readings are recordings like any other. Moderators, who add the passages, see only how many readings and people each passage has had, never who. If a moderator turns AI off for a passage, it isn't transcribed or discussed by AI notes, even if you have those on.
Ear training results: which game, how many you got right, and the smallest difference you told apart. Only you see them, and they're in your download. Live resonance works in your browser and records nothing.
What you share and do in the community: your posts, hearts, comments, blocks and reports, and which signed-in accounts viewed or commented on posts.
Basic technical details needed to run the service safely, such as device type and error logs (never the content of your recordings).

How we use it

To run the app and show your progress, to keep the community safe (including reviewing reports and preventing abuse), and to keep the service secure. We don't sell your data or use it for advertising.

How it's protected

The service is self-hosted. Your recordings, transcripts and session notes (including AI notes) are encrypted with a key that belongs to your account alone, and each account can only see its own private data. Deleting your account deletes that key. Backups are encrypted too. Photos you upload have hidden details (like location) removed.

Curious about the technology? See how VocaBoba is built.

Signing in, Cloudflare, Google and passkeys

You sign in with email (handled by Cloudflare) or with your Google account. Either way, the app then keeps you signed in with its own cookie for up to 30 days after you last used it, and never more than 180 days. The cookie only holds a random sign-in code; we store a scrambled copy of it with the time it was last used and your browser's name, so you can sign out everywhere from Settings. Signing out ends it. You can add Google to an account that uses email sign-in, and see or remove your sign-in methods in Settings. Passkeys: you can create an account with a passkey alone, with no email or Google; it's a regular account (your recordings are kept on our server, and adults can use the community). If you add one, your device (or its password manager, such as iCloud Keychain or Google Password Manager) keeps the secret part; we keep only its public key, a short name for it (such as “iPhone”, which you can change), when it was added and last used, and a random code that links it to your account (never your account ID, email or name). Removing it in Settings deletes all of that. Moderators can see how you sign in (email code, Google, passkey), with the email address of each, to help with support and keep bans effective. They never see your Google account ID.

Cloudflare delivers the website securely. We don't share your data with anyone else unless the law requires it.

Anonymous mode

You can practise without a name, email or Google account. The installed app makes the account and keeps a random secret only on your device; we keep a scrambled copy of it (a one-way hash), never anything that says who you are. An optional recovery code is kept the same way, and passkeys as described above.

Your recordings: In anonymous mode, your recordings are sent to our server to be analysed, then deleted straight away. Only the numbers (like pitch and resonance) are kept on the server. The recordings themselves stay on your device. While a recording is being analysed it waits in a separate temporary area that's never included in our backups, and it's deleted as soon as it has been analysed (within a day at most if something goes wrong). If the app lends us a recording again (to analyse it again, design a target from it or clean it up), that copy is deleted within 30 minutes. A cleaned recording or a designed target clip is made on our server and kept there only until your app has saved it. We keep each recording's fingerprint (a one-way hash), so the app can only send back the exact recordings you made.

What we keep: the numbers from your recordings, your ratings, sessions, notes (encrypted, as for everyone), settings, badges, help chat messages and the name you use there, a first name if you add one, and the date you last opened the app. Practice transcripts and AI notes are off unless you turn them on. Help chat uses AI first even if practice AI is off; see Chats below.

Switching an existing account: in the installed app, your recordings are copied to your device and checked (each one's fingerprint must match) before they're deleted from our server. Your name, pronouns, photo, Google and email sign-in, posts (with the comments and hearts you gave), public profile and block list are deleted, and you leave any coach (they keep a read-only copy of your chat, as when anyone leaves). Your account gets a new encryption key; what we keep (notes, transcripts, summaries) is re-encrypted with it. Copies of your recordings in our backups can't be read once the backups holding the old key are replaced, within 8 weeks. Switching back: with your passkey (or by adding your Google account), the recordings on your device are uploaded and stored encrypted again; your anonymous code, recovery code and the app's secret stop working.

How long: as long as you open the app at least once a year. If notifications are on, we remind you after 11 months; after 12 months unopened, the account and everything in it is deleted.

What you should know: without a passkey or recovery code, losing your device or deleting the app means nobody, us included, can get you back in. Deleting the app or clearing its browser data deletes recordings on your device. Cloudflare sees connections (including IP addresses) as for any website. Our own server logs do not keep IP addresses. Sharing, community, chat with others and coaches are unavailable in anonymous mode; help chat still works. Moderators see an anonymous account as a short code and its counts, plus any help chat you send and the name you use there.

Notifications

If you turn on notifications for a device, they're delivered through that browser's or phone's push service (Apple, Google or Mozilla). Notifications only say what happened, such as "Your notes are ready", never your recordings, words or numbers. For moderation, we record the type of each notification and whether it was delivered, never its text, and keep that for 30 days. Signing out or deleting your account removes your devices, and a device that isn't opened for 90 days is removed automatically. Your inbox in the app keeps the same short messages for 90 days; only you can see it.

Sharing

Nothing is shared unless you choose to. When you share a post you choose who can find it:

Unlisted (default): only people with the link (moderators only if it's reported, or its caption is flagged by the automatic check).
Anonymous: in the public feed without your name. Moderators can still see who posted it.
Public: in the public feed with your name and picture.

Anyone with the link can view and listen to a shared post, without signing in, so please share thoughtfully. Hearts and comments are only visible to you, though the number of comments is shown.

Who can see what

Your practice is private. Here's exactly what other people, including the people who run VocaBoba, can and can't see.

Nobody else can see or hear:

your recordings: your starting snapshot, check-ins and practice;
your measurements, charts, ratings, transcripts, notes or AI coaching notes;
your practice sessions, favourites, target range or settings.

There are no tools in VocaBoba for anyone, including moderators and the site owner, to look at or listen to these. They're encrypted with a key that belongs to your account.

Only what you choose to share:

Public posts can be seen by anyone.
Anonymous posts can be seen by anyone, without your name. Moderators can see who posted them, to keep the community safe.
Unlisted posts can only be seen by people you give the link to. Moderators only see one if someone reports it, or its caption is flagged by the automatic check.

What moderators can see, to keep the community safe:

your account details: email, name, age range, public profile, when you joined and were last active, and how many practice sessions you've had (the number only, not what's in them);
your public and anonymous posts, and any post, comment or profile that someone reports;
comments you've blocked and reported (comments are otherwise only visible to you as the poster);
text flagged by the automatic safety check, with a little context, and nothing else of what you wrote;
who viewed a post (signed-in viewers only, kept for 90 days), used only when looking into a report;
moderation history: warnings, bans, and reports you made or received;
coach and content creator applications and profiles, if you apply for either role (what you wrote, your sample video link and any credentials);
how each library item is doing, as totals per item: how often it was suggested, how many people watched, did or followed it, their feedback, and how many people's practice moved their way in the 30 days afterwards. Never who.
totals across everyone, like how many recordings were processed, never per person.

Moderators can't see your recordings, results, transcripts or practice notes, and they can't unblock anyone for you. You can unblock people yourself in Settings, under Blocked people.

The site owner: VocaBoba runs on my own computer at home. There's no screen or tool for me to see your private practice either. As the person running the server, I technically could get into the stored data, but I don't, and the encryption means your recordings can't be read without deliberately going around the app. If a law ever required me to hand over data, I'd only give what's strictly required.

Coaches and content creators only see anonymous counts: what people need (never fewer than 10 people), and how their own items are doing. Those item numbers are rounded to the nearest 5, anything under 5 isn't shown, and how people's practice went afterwards only appears once at least 10 people are counted, so no one's activity can be picked out. They never see who you are or anything you've recorded, unless you choose to join a coach as their student (below).

How your recordings are processed: analysing recordings, cleaning up background noise, the voice designer, clips, cards, pictures and transcripts all run on our own computer. To get there, recordings and photos may travel through our own AI gateway (another of our computers) over an encrypted connection through Cloudflare, who already deliver this website. The gateway passes them straight through without saving them, and the processing computer keeps them only while it works on them (at most about half an hour). They're never sent to an outside AI company or used to train anything.

AI for practice and our automatic text checks runs on our own computers, never at an outside AI company. No person reads your private practice transcripts or notes through these features. Help chat uses a separate AI service, Fyra, and moderators can read it; see Chats below.

AI features

If you turn on practice transcripts, they are made on our own computer (see how your recordings are processed, above). Coaching notes, your weekly summary and the automatic text check are written by an AI model on our own computer, reached through our own AI gateway over an encrypted connection through Cloudflare, who already deliver this website. For practice notes, only the facts the app worked out from your practice are sent, never your recordings. This gateway does not store what is sent, and deletes the answer within an hour. These practice and text-check requests are not sent to an outside AI service, and your recordings are never used to train models. You can turn practice transcripts and AI notes off in Settings and correct or delete transcripts. Help chat is separate: turning practice AI off does not turn off its AI replies.

If you rate AI notes with 👍 or 👎, moderators see only the totals. After a 👎 you can tell us what was wrong and, only if you tick the box, share a copy of those notes with the moderators to help improve them. They see the notes and your answers, not your name or email. Changing your rating or deleting your account removes that copy.

Coaches, content creators and videos

Coaches' and content creators' business profiles and the items they publish are visible to everyone signed in. They don't see who you are, your recordings, or what you practise; they only see the anonymous, rounded counts described above. When you press play on a library video, the app notes that you did (and how many times), so it can count how many people watched each video; this is kept with your account and deleted with it. You can see this list, and remove videos from it, in Settings → Videos you've watched. Library videos come from YouTube: the player only loads when you press play, using YouTube's privacy-enhanced mode, and YouTube's own privacy policy applies to what you watch there. The same goes for videos a coach adds to a programme's introduction or guide. Recordings coaches add to their public items (samples to imitate, programme introductions) can be played by anyone signed in, and are checked by the automatic checks like other recordings.

Coaching with students (trial)

None of this applies unless you join a coach as their student. Joining is only for adults, with a code, link or QR code from the coach, and only after you've agreed to the list below.

While you're their student, your coach can see:

your practice overview: each area's progress, when you last practised it and how practice has felt (not your recordings);
anything you choose to share with them: the recordings and audio, results, charts, your ratings and notes, and AI notes and transcripts if you've turned them on;
the results of tasks they give you, in the same detail. These are shared automatically;
your target voice, if you design one: where you started, where you are now and your target (you can hide this in Settings), and the designed clip only if you kept it and allow it ("Let my coach hear my target voice", on unless you turn it off);
your name and profile photo.

To find you in their list, your coach can search by your name, your public page address, or your email address. Email only matches when they type all of it, so it's for finding someone whose email they already know. Your email is never shown to them.

They see your own data, live: if you delete a recording or change a note, it's gone or changed for them too. They never get a copy. How long audio is kept is still your choice, and your coach can see when a recording's audio will be deleted.

It stops straight away when you leave, when your coach removes you, or when either of you deletes your account. Your coach then can't see anything you shared.

Your coach's recordings (task samples and recorded feedback) are stored encrypted, and only their current students can play them.

Moderators can see who coaches whom, and all coaches' content, but not what you share with your coach. The one exception is a note, task or feedback written between you that the automatic check flags; then they see only that text.

To stop codes being guessed, we count how many codes you try (kept for a day). Your coaches, what you shared, your tasks and the feedback you received are included when you download your data.

Chats

Chat with your coach (while you're their student): only the two of you can read it. Moderators can't, unless one of you reports a message or the automatic check flags one; then they see that message and up to five before and after it, nothing else. Each conversation is encrypted with its own key. When you leave or are removed, you both keep a read-only copy, and any voice notes are deleted straight away. If either of you deletes your account, the other still sees the conversation, marked "This person has left".

Voice notes are recorded live (up to 2 minutes; no files or pictures can be sent). A voice note is deleted 7 days after the person receiving it first plays it, or after 30 days if it's never played. They're not included when you download your data.

The help chat starts with VocaBoba AI. You can choose Talk to a person at any time; the AI stops while you wait for a moderator. All moderators can read the whole chat, including its AI part, and can step in. Fyra can also make a private summary of the AI part for moderators; it is not shown in your chat or included in your download. Signed-in users can send voice notes only when a moderator has joined; guests have no voice notes. Voice notes are never sent to Fyra. If you choose Back to the AI, nothing from the part with a moderator is sent to Fyra.

Fyra is our separate AI service. We send it your help-chat name, messages you send during the AI part, and a random conversation reference. If you choose Send my current page, we also send a fixed page name and page pattern with private codes removed, without search or other details from the address. This does not send your screen or recordings. VT still notes your current page for moderators when you send a message. We do not supply your email, account ID, voice notes or messages from the part with a moderator to Fyra. Your name and anything you type can still identify you, so avoid information you do not want in the chat. The help-chat name does not change your profile.

Answers are generated on Fyra's own AI models; if those are unavailable, the request may be processed by Google Cloud as a fallback. This fallback can also apply to Fyra's safety processing and the private summary. AI replies can be wrong. You can ask for a person; help chat is not an emergency service.

VocaBoba keeps closed help chats for a year, without voice notes, then deletes them. Signed-in users can read earlier chats in the help panel. Separately, Fyra keeps the AI part for 30 days after its last activity, then may keep an archive copy for up to 30 more days. Deleting your account, or deleting a guest chat, queues a request to delete its Fyra copy too; this is not instant. After Fyra accepts deletion, archive and related stored files are removed within 24 hours. Deleted or expired chats may remain in Fyra backups for up to 35 days. VocaBoba backups have the separate limit described below.

You can also use help chat without signing in. A guest cookie lets this browser return to the guest chat; it is not an account or a tracking cookie. The cookie is named vt_help_guest and holds a random code for access to this guest chat. Successful requests while this guest chat is active renew the cookie for 30 days from that use. Errors and chats ended at sign-in do not renew it; Delete this chat clears it. Guest data is removed after 30 days without use, or after 24 hours if no chat was started. Clearing cookies or losing this browser removes your way back. Use Delete this chat under the chat to remove all chats attached to this guest cookie and request deletion at Fyra. Signing in ends the guest chat without merging it into your account. While the cookie remains valid, open Earlier chats in the signed-in help panel, then Your chat from before you signed in, to read or delete it. Guest chats have no voice notes or download.

Chat notifications only say that there's a message, never what it says. Each chat has one item in your inbox, updated when a new message comes. While you have a chat open, the app notes that for under a minute, so you aren't notified about messages you're already reading. Links to other sites aren't clickable in chats, and short links (like bit.ly) can't be sent.

Automatic safety checks

To help keep people safe, our own AI checks what people send to someone else:

post captions and comments, and the audio of shared clips;
chats between a coach and a student, including voice notes;
coaches' tasks, feedback and library items (including recorded feedback and task samples), and students' notes to their coach.

Our automatic safety checks never check your private practice, practice recordings or help chat. Moderators can read help chats, and the AI help service processes the AI part to answer and decide when to offer or request a person, as described above. The automatic text checks in this section use the same local AI model as coaching notes, through our own gateway (see AI features): it does not store the text and deletes the answer within an hour. Those text-check requests are not sent to an outside AI service.

Recordings (voice notes, recorded feedback, task samples and shared clips) are turned into text on our own computer, and that text is checked. Only what's said is checked: sounds like humming, sighing or breathing are never checked. The transcript is used only for the check, even if you've turned transcripts off, and isn't kept unless it's flagged.

The checks run every few hours, not as you write, and each thing is checked once (again only if you edit it). The AI decides whether it might be sexual, harassment or hate, a threat, grooming-like, or about self-harm; a chat message is read together with up to 20 messages before it. Anything that isn't flagged is forgotten once it's checked. Chat messages and comments with a word on our blocked list aren't sent at all: you're asked to change the word, and moderators see that you tried and what you wrote.

If something is flagged, moderators see a copy of only that, with a little context; for a chat message, that's up to five messages before and after it. For a flagged recording they see its transcript and can play a copy of it, kept even after the original would have been deleted. A flag never hides anything, and nobody is told about it. You only hear from us if a moderator takes action, just as with reports. Flagged copies are encrypted. They're deleted 30 days after a moderator decides no action is needed, or 180 days after they take action.

How long we keep things

Your starting recording is kept until you delete your account, so you can always compare with where you began.
Practice recordings are kept for the time you choose in Settings, then the audio is deleted (the measurements stay). Recordings you save as favourites (up to 20) are kept until you remove them.
Your target voice is kept until you change or remove it, or delete your account. Clearing practice recordings doesn't remove it.
Your best clips (with a target voice): up to three recordings closest to your target keep their audio automatically, like favourites, until a better one comes along or you remove your target. Then they go back under your “keep practice recordings” choice.
Shared posts stay until you delete them or your account.
Viewing and safety records are kept for a limited time, only as long as needed to keep the community safe.
Error reports: if a page breaks in your browser, we record the error message, the page address, the app version and your browser (not what was on the page), so we can fix it. They're kept for 30 days.
Anything flagged by the automatic check (text, or a recording's transcript and copy): 30 days after a moderator decides no action is needed, or 180 days after they take action. Anything not flagged isn't kept.
After a ban or suspension: if an account that was banned or suspended is deleted, we keep only a one-way fingerprint of its email (not the email itself), so the restriction still applies if the account is created again. It's removed if the restriction is lifted.
Backups: VocaBoba data is backed up to a separate drive in the same place, encrypted. Those backups are kept for up to 8 weeks, so deleted data disappears from VocaBoba backups within 8 weeks. They are used only to restore the service after a failure. Fyra has separate retention and backup limits for the AI part of help chats, described in Chats above.

Ages 13 to 17

You must be 13 or older. If you're under 18, you can only share by private link, your posts can only be seen by people who are signed in, and some community features are limited, to help keep you safe.

Your choices

Your weekly goal and progress checks: your weekly goal, practice days, badges and Check my progress results are worked out from your own recordings and stay private. A badge you share shows only the badge, its name, the date and what you write, never your voice. Your coach sees them only if you turn on “Let my coach see my weekly goal, badges and progress checks”, and only while you're their student. Nothing is ever compared with other people.

Background noise: before you record, the app listens to the room for a moment. We keep only a summary of the background sound (how loud it is and which frequencies it has, a few kilobytes), never a recording of the room. If you choose to clean up a recording, the cleaned copy is stored encrypted like your other recordings, and the original is kept until you go back to it or delete the recording. Your coach sees whether a recording was noisy, but can't change it.

You can download any of your own recordings, your shared clips and your target voice from a small icon next to them. Only you can: your coaches, the moderators and people who see what you've shared can listen to what you allow, but our server refuses to hand anyone else your voice as a download. (Like any website, it can't stop someone recording what they hear.)

You can update your profile, download your data and recordings, delete any post or session, or delete your account from Settings. Account deletion removes your help chats from VocaBoba and queues deletion of their AI parts at Fyra; backups expire within the separate limits above. For a guest chat, Delete this chat under the chat (or Earlier chats → Your chat from before you signed in after signing in) deletes that chat and queues deletion at Fyra. For other requests, including help with a download or deletion, use the contact form. Private AI summaries for moderators are not part of your download.

Cookies

We use a cookie to keep you signed in. If you use help chat without signing in, we also use a guest cookie so this browser can return to that chat. The guest cookie, vt_help_guest, holds a random access code, is sent only to help-chat requests, and is renewed for 30 days on successful requests while the guest chat is active. Errors and chats ended at sign-in do not renew it; Delete this chat clears it. Guest data is removed after 30 days without use; a guest who never started a chat is removed after 24 hours. Clearing the cookie removes your access. No advertising or tracking cookies.

Changes

If this policy changes in an important way, we'll update the date above and let you know in the app.