INNVOX Lite Privacy Policy

1. Scope

This policy explains how the INNVOX Lite mobile app for iPhone and Android (the "App") handles information. The App is the companion practice app for the mechanical INNVOX voice trainer (a voice training whistle). It listens to your voice only through your phone's microphone. The trainer has no electronics and does not connect to your phone, and you can use the App without it.

In this policy, "we", "us" and "our" mean Spiral Ladder Technology (Shenzhen) Co., Ltd., the company that publishes the App under the INNVOX brand.

The INNVOX app for the INNVOX Pro device has its own privacy policy at https://innvox.ai/app/privacy, and our website innvox.ai and online store are covered by a separate privacy policy at https://innvox.ai/privacy. This policy covers only INNVOX Lite.

2. Summary

• The App has no accounts, no ads, and no advertising ID. It contains no third-party analytics, advertising, crash reporting, or push notification SDKs. It does not use Bluetooth or your location.
• Nothing is sent from the App to us before you accept this policy when you first open the App.
• Your voice is analyzed on your phone. Recordings and practice records are stored on your phone.
• Usage statistics & error reports: on by default, and you can turn them off at any time. They are sent at most once a day and contain no recordings and no text you type.
• Training data upload (measurement tables and recordings): optional and off by default. Nothing is uploaded unless you turn it on.
• Feedback: sent only when you submit feedback in the App.
• In the United Kingdom: the App sends nothing to us automatically. Usage statistics & error reports stay on your phone and training data upload is not offered; data is sent only when you submit feedback, optionally with the usage records from your phone (see section 19).
• All three carry the same random installation ID created by the App. We keep each of them for 12 months after we receive it and then delete it automatically. You can delete all of it at any time in the App.
• We do not sell your personal information and do not share it for cross-context behavioral advertising.

3. Information That Stays on Your Phone

• Microphone: when you practice, the App uses the microphone to analyze your voice on your phone, for example whether you are making a sound, its pitch, and its loudness. This analysis does not need an internet connection.
• Practice records and recordings: your results, progress, goal, settings, the audio recordings of each practice (WAV files), and frame-by-frame measurement tables are stored in the App's storage on your phone. They are sent to us only if you turn on the optional upload described in section 7.
• Diagnostic recordings: versions downloaded from the App Store or Google Play do not keep diagnostic recordings. Test versions distributed through other channels can keep recordings and detection details of your practice on your phone to help troubleshoot voice detection (Settings > Training recordings & data); the oldest are deleted automatically above a size or count limit. You can play, delete, or export them, and they leave your phone only if you choose to export and share them yourself.
• Audio you import for a custom scale: an audio file you choose to import is decoded and analyzed on your phone and is not uploaded.
• Technical log: the App keeps a technical log on your phone to help troubleshoot problems. It is not sent to anyone automatically. Only when you tap export does the App create a log file, and you choose where to share it (for example, by email to us).
• Photos and videos: the App reads only the screenshots or screen recordings you pick through the system picker in the feedback form, and sends them only when you submit feedback (see section 8).

4. Installation ID

The first time you use the App, it creates a random installation ID. It is not an advertising ID, IMEI, phone number, or any hardware identifier, and it is not linked to your name, email, or other contact details. Usage statistics, training data uploads, and feedback all carry this ID. We use it to keep data from the same phone together and to find and delete that data when you ask.

Reinstalling the App or switching to a new phone creates a new installation ID.

5. Usage Statistics and Error Reports

"Usage statistics & error reports" is on by default. You can turn it off at any time in Settings > Privacy & security. When you turn it off, the App stops recording and deletes the records on your phone that have not been sent yet.

When it is on, the App records events on your phone and sends them at most once a day (usually when you first open or return to the App that day), as one batch over HTTPS to our server at innvox.ai. Batches that could not be sent are tried again later. The App records at most 3,000 events a day (errors are not limited).

Each batch contains: the installation ID; the App version; your phone's operating system (iOS or Android) and its version; your phone model (on iPhone, the model code such as "iPhone15,2"; on Android, the manufacturer and model); your phone's language and region setting; and the time it was sent. Each event contains: the time it happened and your phone's time zone; a random session ID created at each launch; the App version; the event name; and the following details:

• App use: opening the App, moving it to the foreground or background (and how long it stayed in the foreground), and launch time; which screens you open, how long you stay on each, and whether the screen stuttered (frame counts and slow frames); switching tabs.
• Taps: the name of the screen; the text shown on the button or item you tapped (up to 40 characters; icon-only buttons have no text); where you tapped, as a fraction of the screen width and height; whether the tap landed where nothing can be tapped; and repeated rapid taps in one place. Text you type into text fields is never recorded, only that a text field was tapped. Names you give to items, such as the names of custom scales, are not recorded.
• Practice and feature use: onboarding steps; the start, end, and outcome of practice rounds, single drills, assessments, scales, the weekly breath test, and custom scales (for example duration, sets completed, notes sung in tune, the vocal range measured, and the file type of an imported audio file); your answer to "How your throat feels" after a round (tighter, about the same, or looser), and whether a suggested level change was prompted by it; changes to level, goal, and detection settings; and actions such as dismissing a card.
• A daily snapshot of settings and progress: App language, light or dark theme, whether training data upload and diagnostic recordings are on, your practice goal, your level, the number of sessions completed, whether you have done an assessment, the number of custom scales, and whether onboarding is finished.
• Microphone: permission denied, failure to start the microphone, audio sources that could not be opened; and for each use of the microphone, its duration, the audio source used, and how long pitch detection took.
• Errors and stability: error messages produced by the App or your phone's system (first line only, up to 300 characters) and where in the App's code they happened; whether the App closed unexpectedly the last time (a crash, being stopped by the system, or freezing), with the screen it was on and how long ago; on Android 11 and later, the reasons the system recorded for the App's previous exits (such as crash, not responding, low memory, or closed by you), whether it was in the foreground, the system's short description, and its memory use; and low-memory warnings from the system.
• Feedback submitted, the result of training data uploads (success or failure and counts only, not the content), and changes to the settings above.

5.1 What Usage Statistics Do Not Contain, and How Long We Keep Them

Usage statistics do not contain recordings, pitch curves, frame-by-frame measurements, any text you type (including your feedback), contacts, photos, or location.

We use them to find and fix errors, crashes, and slowdowns, to understand which features are used and where people have trouble, and to improve the App. Usage statistics are kept for 12 months after we receive them and are then deleted automatically.

6. Crashes and Unexpected Exits

The App has no separate crash reporter and contains no third-party crash reporting SDK. Information about crashes, unexpected exits, and errors is sent only as part of "Usage statistics & error reports" (section 5). When that is off, it is not sent.

If you have chosen in your iPhone settings to share analytics with app developers, or on Android allowed Google to collect usage and diagnostics, Apple or Google may provide us with crash information under their own terms.

7. Optional: Upload Training Data to Help Improve INNVOX

Training data upload is off by default. You can turn it on by ticking the box (unticked by default) on the consent screen when you first open the App, or later in Settings > Privacy & security. You can turn it off at any time; after that, nothing more is uploaded.

When it is on, each time a practice round is saved the App uploads every part of it that has a recording (before, during, and after practice), with:

• a measurement table (CSV file): one row every 50 milliseconds with the time, whether you were making a sound, loudness (dBFS), pitch (Hz), detection confidence, and whether the manual fallback button was used; and a summary of the practice, such as the phase, level, duration, sets completed, longest hold, background noise level, and App version;
• the audio recording of that practice (WAV file), which contains your voice and may contain other sounds around you;
• the installation ID;
• your phone's operating system type (iOS or Android) and a phone label made of that type and the first 8 characters of the installation ID; the App version and App identifier;
• the time of the practice and of the upload.

7.1 How Uploaded Training Data Is Used and Kept

Uploads happen after each practice round is saved; anything not uploaded is tried again the next time you open or return to the App. We use this data to improve our voice detection and measurement algorithms and product quality.

Uploaded training data is kept for 12 months after we receive it and is then deleted automatically. You can delete it sooner at any time as described in section 13.

8. Feedback

The App sends feedback only when you fill in the feedback form in the App and tap submit. Feedback contains:

• the description you write (up to 2,000 characters);
• up to 6 screenshots or screen recordings you choose to attach (photos are resized and re-compressed; videos are sent as the original file, together with any information stored in the file, such as when it was recorded or, if your phone saved it, where), and the file names of these attachments;
• the installation ID, App version, phone operating system and version, phone label, feedback ID, and the time you wrote it.

8.1 How Feedback Is Used and Kept

We use feedback only to understand and fix the problem you report and to improve the App. The feedback form does not collect contact details; if you would like a reply, email yaodong@innvox.cn. Please do not write or show in your feedback anything you do not want to give us, such as other people's personal information.

Feedback, including attachments, is kept for 12 months after we receive it and is then deleted automatically. You can delete it sooner at any time as described in section 13.

9. Other Internet Connections

Apart from the data described in sections 5, 7, and 8 and your deletion requests, the App sends no other data to us. Versions downloaded from the App Store or Google Play are updated by the app store; the App does not download updates itself. As with any internet request, our servers receive your IP address and basic request details (such as the time and the address requested), which are kept in standard server and security logs for a limited period for security and troubleshooting.

Web pages you open from the App (such as this policy) open in your browser and are covered by our website privacy policy.

10. How We Use Information

We use information only to:

• find and fix errors, crashes, and performance problems (usage statistics and error reports, and logs you send us);
• understand how features are used and improve the App (usage statistics);
• improve our voice detection and measurement algorithms and product quality (training data you choose to upload);
• handle your feedback, questions, and privacy requests;
• comply with the law and keep our services and systems secure.

10.1 What We Do Not Do

We do not use your data for advertising or profiling, and we do not make automated decisions based on it that have legal or similarly significant effects on you. We do not create voiceprints or use recordings to identify anyone. We do not combine this data with data from other sources to identify you.

11. Who Can Access Your Information and Sharing

Data the App sends is stored on servers we control, and only our authorized staff who work on product and algorithm development and user support can access it.

We do not sell personal information, do not share it for cross-context behavioral advertising, and do not give it to third parties for their own purposes. Companies that provide our server hosting and network services store and transmit data on our behalf and may process it only to provide those services to us.

We may disclose information if required by law, or to protect the rights, safety, and security of our users, the public, or us. If our business is reorganized or sold, information may be transferred as part of that transaction and will remain subject to this policy.

12. International Transfers

We are based in China. Data the App sends goes over HTTPS to innvox.ai and is stored on servers we control, which are currently provided by a hosting provider in the United States. Our staff who access the data are located in China. This means your information is processed in the United States and China, whose data protection laws may differ from those where you live. Wherever it is processed, we protect it as described in this policy.

13. How Long We Keep Information, and Deleting It

• Usage statistics and error reports: 12 months after we receive them, then deleted automatically.
• Uploaded training data: 12 months after we receive it, then deleted automatically.
• Feedback (including screenshots and recordings): 12 months after we receive it, then deleted automatically.
• Server logs: a limited period, for security and troubleshooting.
• Data on your phone: until you delete it in the App or uninstall the App.
• Emails and logs you send us: until your request has been handled.
• Delete everything at once: Settings > Privacy & security > "Delete uploaded data" immediately deletes from our servers all training data, usage statistics, and feedback (including attachments) sent from this phone under its current installation ID. Whether anything is sent after that depends on your settings; to stop sending, turn the switches off.
• Data under an old installation ID: after you reinstall the App or switch phones, the App can no longer delete data sent under the old ID. In that case, email yaodong@innvox.cn with the old installation ID if you have it, or with the approximate dates and the phone model you used, and we will delete the data we can identify as yours.

14. Your Choices

• Turn usage statistics and error reports on or off: Settings > Privacy & security.
• Turn training data upload on or off: Settings > Privacy & security.
• Feedback: nothing is sent unless you submit it.
• Data on your phone: delete practice records or diagnostic recordings in the App, or uninstall the App to remove all of the App's data from your phone.
• Permissions: you can turn off microphone access at any time in your phone's settings; practice features that need the microphone will stop working. Photos and videos are picked one at a time through the system picker.

15. Security

Data is sent over encrypted HTTPS connections. Upload requests must carry an app key. Uploaded data is stored outside the public website, and only authorized staff can access it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.

16. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has sent us data through the App, contact us at yaodong@innvox.cn and we will delete it.

17. Your Privacy Rights in the United States (Including California CCPA/CPRA)

If you live in California or another US state with a consumer privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas, or Oregon), you have the rights below, subject to exceptions under the law.

In the past 12 months, we collected the following categories of personal information through the App, from you and your phone, for the purposes in section 10: identifiers (the App's random installation ID, and IP address in server logs); device information (phone model, operating system and version, language and region setting, time zone, and App version); internet or other electronic network activity information (how you use the App, such as screens opened, taps, and features used); diagnostic information (error messages and unexpected exits); audio information, namely voice recordings (only if you turn on training data upload); and content you provide in feedback (text, screenshots, and screen recordings).

We disclose these categories only to our server hosting and network service providers, for the business purposes above. We have not sold or shared (for cross-context behavioral advertising) personal information, including that of consumers under 16, and we do not use or disclose sensitive personal information in ways that would give rise to a right to limit its use.

• Right to know and access: ask what categories of personal information we collect and get a copy of the specific information we hold about you.
• Right to delete: ask us to delete personal information we hold about you.
• Right to correct: ask us to correct inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell or share personal information, so there is nothing you need to opt out of.
• Right to non-discrimination: we will not deny you service or treat you differently for exercising these rights.
• Appeals: if we decline your request, you can appeal by replying to our decision email. If you disagree with the outcome of the appeal, you can contact your state Attorney General.
• How to make a request: use "Delete uploaded data" in the App for immediate deletion, or email yaodong@innvox.cn with the subject "Privacy request". Because the App has no accounts, we verify requests using the installation ID shown in Settings > Privacy & security (and, if needed, the approximate dates you used the App). We respond within 45 days, and may extend this by up to 45 more days where the law allows, after telling you.
• Authorized agents: you may use an authorized agent to make a request. We may ask the agent for your written permission and ask you to confirm the request with us directly.

18. Your Privacy Rights in Canada (PIPEDA and Quebec Law 25)

If you live in Canada, we handle your information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector as amended by Law 25. You have the right to:

• access your personal information and learn how it has been used and disclosed;
• correct personal information that is inaccurate or incomplete;
• withdraw your consent: turn off usage statistics and error reports or training data upload at any time, or delete uploaded data. Withdrawing consent does not affect processing that took place before;
• where the law provides, receive your personal information in a structured, commonly used technological format;
• make a complaint. Please contact us first. You can also complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) and, in Quebec, to the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

18.1 Privacy Officer

Our Privacy Officer (the person in charge of the protection of personal information under Quebec law) handles access, correction, consent withdrawal, and complaint requests from Canadian users: Privacy Officer, Spiral Ladder Technology (Shenzhen) Co., Ltd., yaodong@innvox.cn. We respond to requests within 30 days.

19. Your Privacy Rights in the United Kingdom (UK GDPR)

If you are in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to how we handle your personal information. The controller is Spiral Ladder Technology (Shenzhen) Co., Ltd., Shenzhen, Guangdong, China (contact: yaodong@innvox.cn, +86 173 8486 0919).

In the United Kingdom, the App sends nothing to us automatically. If any of your phone's region setting, time zone, SIM or mobile network country, or App Store account country is the United Kingdom, the App works as follows, and keeps doing so even if those settings change later: usage statistics & error reports are recorded only on your phone, kept for at most 14 days, and never sent automatically, and you can clear them at any time in Settings > Privacy & security; training data upload is not offered; feedback is sent only when you fill in the feedback form and tap submit, and when you submit you can choose to attach the usage records and error information from the last 14 days on your phone (as described in section 5, with no recordings and nothing you type into text fields) to help us look into the problem you report. The automatic sending described in sections 5 and 7 does not apply to you.

The legal bases we rely on are:

• Feedback (including any usage records and error information you choose to attach): your consent, which you give by choosing to submit feedback. You can withdraw it and have your feedback deleted with "Delete uploaded data" or by emailing us.
• Deletion and other privacy requests: compliance with our legal obligations.
• Server and security logs: our legitimate interests in keeping our services and systems secure.
• Withdrawing consent does not affect processing based on consent before you withdrew it.

19.1 Your Rights in the United Kingdom

Subject to the conditions in the UK GDPR, you have the rights below. You can use "Delete uploaded data" in the App (see section 13), or email yaodong@innvox.cn with the subject "Privacy request". We verify requests using the installation ID and normally respond within one month; for complex or numerous requests we may extend this by two further months, after telling you. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

• Access: get a copy of the personal information we hold about you;
• Rectification: have inaccurate or incomplete personal information corrected;
• Erasure: have your personal information deleted;
• Restriction: ask us to restrict processing in certain circumstances;
• Objection: object to processing based on our legitimate interests, such as keeping server logs;
• Portability: receive personal information you gave us on the basis of consent in a structured, commonly used, machine-readable format;
• Withdraw consent: withdraw any consent you have given, at any time;
• Complaint: complain to the Information Commissioner's Office (ICO), ico.org.uk, phone 0303 123 1113. We would appreciate the chance to deal with your concern first, so please contact us before you do.

19.2 Transfers Outside the United Kingdom

Your phone sends data directly to our servers, which are currently provided by a hosting provider in the United States, and our staff who access the data are in China. These countries may not protect personal information to the same standard as the UK. We protect the data with the measures described in this policy: encryption in transit (HTTPS); storage outside the public website, with access limited to authorized staff; a hosting provider that may process the data only to provide its services to us; and automatic deletion 12 months after we receive it. To learn more about how your data is protected when it is transferred, email yaodong@innvox.cn.

20. Not a Medical Device

The App and the INNVOX voice trainer are voice training tools, not medical devices. They do not diagnose, treat, or prevent any disease or condition. Measurements and results are for voice training reference only. We do not use your data to make health assessments about you.

21. Changes to This Policy

We may update this policy. We will post the new version on this page with a new effective date. If we make a material change, such as collecting a new type of data or using data in a new way, we will tell you in the App and, where required by law, ask for your consent again before the change applies to you.

22. Contact Us

Spiral Ladder Technology (Shenzhen) Co., Ltd. (INNVOX), Shenzhen, Guangdong, China

Email: yaodong@innvox.cn

Phone / WhatsApp: +86 173 8486 0919

Website: https://innvox.ai/