Privacy Policy

Last Updated: May 13, 2026

Introduction

Welcome to Vocaly ("we," "our," or "us"), operated by Sidane LLC, a company registered in Sharjah Media City (Shams), United Arab Emirates. We are committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how it is protected when you use the Vocaly mobile application (the "App").

By using Vocaly, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

  • Voice recordings: Audio samples that you record in the App or import from your photo library, Voice Memos, or Files in order to clone a voice. These samples contain your voice (or, with consent, that of another speaker) and are transmitted to ElevenLabs for voice cloning (see Section 3).
  • Text input: The text you type or paste to be synthesised into speech.

1.2 Information Collected Automatically

  • Local app state: Cloned voice profiles, generation history, audio files, credit balance, language preference, and other settings. All of this is stored locally on your device.
  • Purchase data: Transaction records related to in-app subscriptions and one-time credit packs. Payment processing is handled entirely by Apple (App Store); we do not collect or store payment card details.

1.3 Sensitive Information

Your voice recordings may be considered biometric-related data (a voice print) under certain privacy laws. We treat this information with heightened care as described in Sections 2 and 5.

2. How We Use Your Voice Recordings

Important: Your voice is the core input of our service. Here is exactly how we handle it:

  • Purpose: Voice samples are used solely to (a) create a voice profile via ElevenLabs Instant Voice Cloning and (b) generate text-to-speech audio in that voice when you request it.
  • Transmission: When you initiate a clone or a generation, the relevant audio or text is sent over HTTPS to ElevenLabs Inc. ("ElevenLabs").
  • No server-side storage by Sidane: Sidane LLC does not store your voice recordings, voice profiles, or generated audio on its own servers. Everything is sent directly from your device to ElevenLabs.
  • ElevenLabs processing: ElevenLabs stores the voice profile created from your sample under your ElevenLabs API account so that future generations can reference it. Their handling of your data is governed by the ElevenLabs Privacy Policy and Terms of Service.
  • Local storage of results: Generated audio files are saved on your device, in the App's private storage, until you delete them or uninstall the App.
  • No advertising use: We never share, sell, or license your voice recordings or generated audio to any third party for advertising or marketing purposes.
  • No model training by Sidane: Sidane LLC does not use your voice or text to train, improve, or fine-tune any machine-learning model. ElevenLabs' use of submitted data for service improvement is governed by their privacy policy.

3. Biometric Data & Voice Cloning

Vocaly processes audio recordings of human voices. Depending on your jurisdiction, voice recordings and the voice models derived from them may be classified as biometric identifiers or biometric data.

How Biometric Data Is Processed

  • Your audio sample is sent to ElevenLabs, which builds a voice model that can synthesise new speech that resembles the original speaker.
  • The cloning and synthesis run on ElevenLabs' servers. Sidane LLC does not operate the AI models.
  • Sidane LLC does not retain a copy of the voice model on its own servers, and does not use voice prints for identification, authentication, or surveillance.

Your Consent

By recording or importing an audio sample and tapping "Clone voice", you provide informed consent to the processing of that audio for voice cloning and speech generation. You must only clone voices that belong to you or for which you have obtained explicit, informed consent from the speaker. See our Terms of Service, Section 5, for the acceptable-use rules.

You may withdraw consent at any time by deleting the voice profile in the App and by contacting us to request deletion of the corresponding voice model held by our AI provider (see Section 8).

4. Third-Party Services

Vocaly relies on the following third-party services. Each service receives only the minimum data necessary for its function.

4.1 AI Voice Cloning & Text-to-Speech

  • ElevenLabs Inc. — Processes audio samples for voice cloning and text input for text-to-speech generation. Voice profiles created from your samples are stored under our ElevenLabs API account so that subsequent generations can reference the same voice. Data is processed on ElevenLabs' servers (primarily in the United States). See the ElevenLabs Privacy Policy.

4.2 Payments

  • Apple App Store — Processes in-app subscriptions and one-time credit pack purchases. We receive only a transaction confirmation; we do not access your payment card details.

5. Data Storage & Retention

5.1 Data Stored on Your Device (Local)

  • Voice recordings you imported or captured
  • Cloned voice metadata (name, voice ID, creation date)
  • Generated audio files and generation history
  • Credit balance, language preferences, app settings

You can delete this data at any time by removing items in the App or by uninstalling the App.

5.2 Data Processed by ElevenLabs

  • Audio samples sent for cloning
  • Voice profiles (voice models) tied to our ElevenLabs API account
  • Text submitted for generation and the synthesised audio output

Retention of this data is governed by ElevenLabs' privacy policy. Voice profiles persist on ElevenLabs until we delete them on your request (see Section 8) or until the underlying API account is closed.

5.3 Data We Do NOT Store

  • Your voice recordings, voice profiles, and generated audio are not stored on Sidane LLC servers.
  • Payment card or banking details.
  • Your name, email address, or phone number (unless you choose to contact us by email).

6. AI-Generated Content Disclosure

In compliance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) and similar transparency requirements:

  • All audio produced by Vocaly is AI-generated content. It is synthetic speech created by an artificial intelligence model and does not correspond to a real-time recording of any person.
  • The AI models used are the ElevenLabs Instant Voice Cloning and Multilingual text-to-speech models, accessed via the ElevenLabs API.
  • Cloned voices may sound very similar to the original speaker but are synthetic. They should not be used to deceive, defraud, defame, or otherwise mislead others.
  • When you share AI-generated speech publicly, you must clearly disclose its AI-generated nature whenever required by applicable law.

7. Security

We implement reasonable technical and organizational measures to protect your information:

  • All data transmitted between the App and external services is encrypted using TLS/HTTPS.
  • API keys used to communicate with ElevenLabs are managed securely and are not exposed to end users.
  • We do not store voice recordings on our servers, minimizing the risk of a data breach involving your biometric data.
  • Local voice recordings, voice profiles, and generated files are stored in the App's sandboxed storage, protected by your device's own security features (passcode, biometrics, encryption).

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Privacy Rights

8.1 Rights Under GDPR (European Economic Area, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten"), including the deletion of voice models held by our AI provider on your behalf.
  • Right to Restriction: Request that we limit the processing of your data.
  • Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing of your data based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Legal Basis for Processing: We process your data based on (a) your consent (when you upload a sample and request a clone or generation), (b) performance of a contract (providing the cloning and TTS service), and (c) our legitimate interests (maintaining security and improving the service).

International Transfers: Your data may be transferred to and processed in the United States (where ElevenLabs operates) and other countries. These transfers are protected by Standard Contractual Clauses or equivalent safeguards.

To exercise any of these rights, contact us at contact@sidane.org. We will respond within 30 days.

8.2 Rights Under CCPA/CPRA (California, USA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collection, and the categories of third parties with whom it is shared.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Limit Use of Sensitive Personal Information: Your voice recordings and derived voice prints qualify as sensitive personal information under CPRA. You have the right to limit the use of this data to what is necessary to provide the service. We already limit use in this manner.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.

Categories of Personal Information Collected: Audio recordings (biometric information used for voice cloning), text inputs, commercial information (purchase records), internet or electronic network activity (in-app actions, anonymous usage data).

We Do Not Sell Personal Information. We have not sold personal information in the preceding 12 months and do not intend to do so.

To exercise your rights, contact us at contact@sidane.org. We will verify your identity and respond within 45 days.

8.3 Illinois Biometric Information Privacy Act (BIPA) Notice

If you are an Illinois resident, the following disclosures are provided pursuant to the Illinois Biometric Information Privacy Act (740 ILCS 14):

  • Collection: Vocaly collects and transmits voice recordings to ElevenLabs Inc. for the purpose of creating voice models and generating synthesised speech.
  • Purpose: Your voice recording is used solely to generate a voice model and to synthesise speech you explicitly request. It is not used for identification, authentication, or surveillance.
  • Storage: Sidane LLC does not store voice biometric data on its own servers. ElevenLabs stores voice models tied to our API account so that subsequent generations can reference the same voice.
  • Retention Schedule: Voice models held by ElevenLabs are retained until you (or we, on your request) delete them, or until our API account is closed. Sidane LLC will permanently destroy any biometric data within 3 years of the individual's last interaction with the App, or when the initial purpose for collection has been satisfied, whichever comes first.
  • Destruction: Upon deletion of a voice in the App, Sidane LLC will request deletion of the corresponding voice model from ElevenLabs.
  • Disclosure: Your voice recording and voice model are disclosed to ElevenLabs Inc. solely for the purpose of voice cloning and speech generation. Biometric data is not sold, leased, traded, or otherwise disclosed to any other third party.
  • Consent: By uploading a voice sample and initiating a clone, you consent to the collection, use, and storage of your biometric data as described in this notice. You may withdraw consent by deleting the voice in the App and contacting us to confirm deletion.

To exercise your rights under BIPA or request more information, contact us at contact@sidane.org.

8.4 Other Jurisdictions

Regardless of where you are located, you may contact us at any time to request access to, correction of, or deletion of your personal data. We will respond to all legitimate requests in accordance with applicable laws.

9. Children

Vocaly is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at contact@sidane.org.

10. International Data Transfers

Vocaly is operated by Sidane LLC from the United Arab Emirates. Your data may be transferred to and processed in countries other than your own, including the United States (where ElevenLabs operates). These countries may have different data protection laws than your jurisdiction.

Where required by law, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission and reliance on adequacy decisions where available.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy regularly. Your continued use of Vocaly after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: contact@sidane.org
  • Company: Sidane LLC
  • Address: Sharjah Media City (Shams), Sharjah, United Arab Emirates

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.