Privacy Policy

1. Who is responsible

The controller of your data is VocalTools, who operates VocalTools. Write to soporte@vocaltools.app with any question about your data.

2. Data we process

Account: your email, your display name and an internal identifier. If you sign in with Google, we receive your name and email from Google, never your password.

Practice: what you save while using the tools (statistics, practice days, academy progress, vocal range, tuner readings, vocalization patterns and harmony projects).

Friends and shared content: if you use this feature, your email and display name can be seen by people who search for your exact email or who are your friends. What you share with a friend (a pattern or a project) is visible to that person.

Plan and payments: your plan, its status, trial and billing-period dates, and the payment processor's customer and subscription identifiers. We never see or store your full card details.

Communications: your email preferences and a record of which notices we sent you, so they are not repeated.

Technical data: the logs our servers generate when answering requests. If usage measurement is enabled, we store in-service navigation events (which page or tool was opened, language and, if you are signed in, your internal identifier). Your IP address is used only momentarily to prevent abuse and is not stored in those events.

3. Microphone and audio

The tuner, the range test and the other voice tools process microphone sound on your device, in real time. That audio is not sent to our servers and we do not store it. Your recordings stay in your browser's storage and only leave it if you export or share them.

If you connect a MIDI keyboard, notes are read on your device and are not sent anywhere.

4. Why we use it and on what basis

To provide the service and your account, sync your progress between the web and the Android app and process your subscription: this is necessary to deliver what you signed up for.

To send you account and subscription notices (for example, the notice before the first charge): these are part of the service. Reminders and the weekly summary are optional and you can turn them off from any email or from your dashboard.

To keep the service secure, prevent abuse and improve it: our legitimate interest, always with as little data as possible.

To meet legal obligations, such as tax obligations on payments.

5. Who we share it with

Google (Firebase and Google Cloud): authentication, database, servers and scheduled notices.

Mercado Pago, for payments in Argentina, and Polar, which acts as merchant of record for international payments. Each receives the data needed to charge you and handles it under its own privacy policy.

Google Play, if you buy the subscription from the Android app.

Resend, to send the service's emails.

We do not sell your data or use it for third-party advertising.

6. Where it is stored

Your data is stored on Google servers located in the United States, and some payment and email providers also process it outside Argentina. We work with providers that contractually commit to protecting it with adequate safeguards, in line with article 12 of Law 25.326. By using the service, you consent to that transfer.

7. Local storage and cookies

We use your browser's storage (localStorage and sessionStorage) to keep your session, remember preferences and save your practice when you are not signed in. It is necessary for the service to work. We do not use third-party advertising or tracking cookies.

8. How long we keep it

For as long as you have an active account. If you ask us to close it, we delete your account, your progress and the related usage events within 30 days. We keep only what the law requires us to retain about payments, for the period it requires.

What you saved without signing in lives only in your browser: you delete it by clearing the site's data.

9. Your rights

You can request access to your data, correct, update or delete it, and withdraw your consent, by writing to soporte@vocaltools.app. Access is free if requested at intervals of six months or more. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days.

Argentina's Agency for Access to Public Information, the authority for Law 25.326, handles complaints from anyone who considers their rights affected.

10. Security

We apply reasonable technical and organizational measures: encrypted connections, access rules that prevent one account from reading another's private data and credentials kept in a secret manager. No system is infallible; if an incident affects your data, we will tell you.

11. Children

The service is not directed to children under 13. Between 13 and 18, consent from a parent or guardian is required. If we detect data from a minor without that consent, we delete it.

12. Changes

We may update this policy. If the change is relevant, we will tell you by email or within the service, and we always show the date of the last update.