Privacy Policy

Effective date: 8 September 2026

1. Introduction

This Privacy Policy applies to The Listening Fox mobile application (“Application”), operated by Shreyas Krishnamurthy (“Service Provider”). It describes the information the Application collects, the purposes for which it is processed, the parties with whom it is shared, and the rights available to you in respect of it.

By using the Application you agree to the processing described in this policy. The Application is provided on an “AS IS” basis.

2. Voice Recordings and Conversation Data

The Application records conversations at your instruction, transcribes them, distinguishes between speakers, and generates an analysis of communication patterns. This constitutes the most sensitive category of information processed by the Application and is subject to the following specific terms.

Permitted Use

Recordings, transcripts and derived analysis are processed solely to generate and display your own transcripts, measurements and lesson progress.

Prohibited Use

This data is not used for advertising, marketing, profiling or data mining, is not sold or licensed to third parties, and is not used to train any machine learning model operated by the Service Provider or by any third party.

Retention

Audio is retained within your account to permit playback alongside the corresponding transcript. It is not deleted automatically. Retention and deletion are addressed in clause 8.

Voice Characteristics

To distinguish speakers and identify recurring participants, the Application computes a numerical representation of a voice known as an embedding. Where this constitutes biometric data under applicable law, it is processed on the basis of your consent, is used only to attribute speech within your own account, cannot be reconstructed into audio, and is deleted when voice data or the account is deleted.

Consent of Other Participants

You are responsible for ensuring that you are entitled to record any conversation you record. The Application requires confirmation of this before a recording begins. Applicable obligations are set out in clause 1 of the Terms and Conditions.

3. Information Collection and Use

The Application collects the following categories of information for the purposes of providing and improving the service:

  • Name and email address, obtained through Apple or Google authentication
  • Conversation audio, transcripts and derived analysis
  • Voice embeddings and speaker names assigned by you
  • Device and operating system information
  • Approximate location derived from IP address, and precise location where permission has been granted for the purpose of naming a recording by place
  • Subscription and purchase status
  • Application usage diagnostics and crash reports

4. Artificial Intelligence

The Application uses third-party services, including ElevenLabs for speech recognition and voice synthesis and Google Gemini for analysis, to generate the outputs you request.

These services process recordings, transcripts and application context solely to return a result. Requests are made through paid commercial interfaces under contractual terms that prohibit the use of submitted content for model training. Google User Data obtained via OAuth is not transmitted to any artificial intelligence provider.

Analysis is generated automatically and may be inaccurate. It is provided for informational purposes and does not constitute a factual determination regarding you or any other participant.

5. Third-Party Services

The Application relies on the following third-party service providers:

  • Google Firebase: authentication, database, file storage, server processing, crash reporting and analytics
  • ElevenLabs: speech recognition and live practice conversations
  • Google Gemini: analysis of transcripts
  • RevenueCat: subscription management
  • Apple: authentication, payment processing and push notifications
  • Meta: advertising measurement, where App Tracking Transparency permission has been granted. Conversation data is not shared with Meta.

Certain providers operate outside the European Economic Area and the United Kingdom. Where personal data is transferred internationally, such transfers are made under standard contractual clauses or an equivalent approved safeguard.

6. Google User Data Policy

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing and Disclosure

Google User Data is shared only with Google Firebase for authentication and account management. It is not shared with advertisers or data brokers, is not used for marketing, profiling or personalisation, and is not transmitted to any artificial intelligence provider.

7. Data Protection Mechanisms

The following safeguards apply to personal data processed by the Application, including conversation recordings and Google User Data obtained via OAuth authentication:

  • Encryption in transit: HTTPS and TLS
  • Encryption at rest: AES-256
  • Access control: account data is isolated per user by server-side security rules, and storage containing conversation audio is not directly accessible by any client
  • Data minimisation: only information required for authentication and core functionality is accessed or stored

8. Retention and Deletion

Recordings, transcripts and analysis are retained until deleted by you or until the account is closed. The following controls are available within the Application:

  • Deletion of an individual conversation, including its audio, transcript and analysis
  • Deletion of cached audio held on the device
  • Deletion of all voice data, including stored voice embeddings
  • Deletion of the account, which removes all recordings, transcripts, analysis, voice data and account records

Deletion takes effect immediately and is not reversible. Residual copies contained in routine backups are removed within 30 days. A complete export of your data may be obtained at any time from the Application settings.

9. Your Rights

Subject to applicable law, you have the right to access, rectify, erase, export and restrict the processing of your personal data, to withdraw consent where processing is based on consent, and to object to certain processing. Location permission and advertising measurement may be withdrawn at any time within the Application or in the iOS system settings.

Where you are located in the United Kingdom or the European Economic Area, you may lodge a complaint with your national supervisory authority.

10. Children

The Application is not intended for use by persons under the age of 16. The Service Provider does not knowingly collect personal data from children. Where such data is identified, it will be deleted.

11. Changes to This Policy

This policy may be updated from time to time. Where a change materially affects the processing of your information, notice will be provided within the Application before the change takes effect.

12. Contact

Enquiries and requests relating to this policy, including requests to exercise the rights described in clause 9, may be directed to support@brainsugar.studio.