Privacy Policy
Last updated: October 10, 2026
Vocory ("the App," "we," "us") is a study app developed by Brandon Kwai. It turns lectures and study material into lessons, flashcards and practice tests. This policy explains what data the App handles, why, who processes it, how long we keep it, and the choices and rights you have.
The short version
- No account is required. You can study as a guest. The App identifies your device with a random, anonymous identifier, not your name. Creating an account (email, Sign in with Apple or Sign in with Google) is optional.
- Your lectures live on your device. If you sign in and turn on Back up notes and progress, the text of your notes and your study progress are also stored on our servers so they sync across your devices. Nothing is backed up unless you turn this on.
- We never keep your audio. Recordings are sent to be transcribed and then deleted.
- We use anonymous usage analytics to understand how the App is used. We don't sell your data, we don't show ads, and we don't track you across other companies' apps or websites.
Information the App handles
Anonymous device identifier
The App generates a random identifier stored on your device. We use it to connect your requests, free-plan limits and subscription status to your device. It is not your name, email, Apple ID or advertising identifier.
Optional account information
If you create an account, we store your email address and first name, and for email sign-up your password as a salted cryptographic hash (never in plain text). During email verification we briefly store a hashed one-time code that expires within minutes. If you use Sign in with Apple or Google, we store the identifier that service gives us (and your email and first name if shared). We never see your Apple or Google password.
Recordings
When you record a lecture, the audio is sent to our server and on to our speech-to-text providers (Soniox and/or OpenAI) only to produce a transcript. The audio is held in memory or a temporary file during transcription and then deleted. It is not stored on our servers.
Lecture text, files and links
- Building lessons: to create lessons, flashcards, quizzes, practice tests, answers from Vo and audio recaps, the relevant lecture text is sent to OpenAI to generate the result. The results are returned to your device.
- ЕНТ / ҰБТ classes: for the Kazakhstan exam preset, when lessons and practice tasks are built, labelled names, phone numbers, e-mail addresses and ИИН/ЖСН numbers are removed from your notes on our server before the text is sent to OpenAI. Practice tasks are generated only for you (never shared with other users).
- Files and scanned pages: text is extracted from PDFs, Word files, slides and scanned pages on your device. Only the extracted text is sent for lesson building.
- Links: when you paste a web page link, our server fetches the page to read its text. For video links, we request the captions from our captions provider (Supadata) and the title from the video platform; if you choose to detect speakers, our server downloads the video's audio and sends it to Soniox for transcription. For podcast links, we look the episode up through Apple's podcast directory and Soniox fetches and transcribes the audio.
- Import jobs: for podcast and video imports, the link and resulting transcript text are stored on our servers so the finished lecture can be delivered to your device. They are deleted automatically 30 days after the import.
Voice practice
When you practise out loud with Vo, your spoken answer is converted to text using Apple's speech recognition, and Vo's voice is produced by your device. Apple may process this audio under Apple's own privacy policy.
Cloud backup and sync (optional)
If you are signed in and turn on Back up notes and progress, we store the text of your notes and folders and your study progress (for example lessons finished and card review history) on our servers, so they appear on your other devices. Audio is never backed up. You can turn this off at any time.
Live meetings (Mac only)
If you use Live meeting on the Mac app, a visible, named Vocory bot joins the call through our provider Recall.ai and sends a real-time transcript back to us. The transcript is stored on our servers so it can be delivered to your device, and is deleted automatically 30 days after the meeting.
Subscriptions
Purchases are processed by Apple. We use RevenueCat to manage your subscription status. On our servers we store whether your subscription or free trial is active and when it ends. We never receive your payment details. If you start a free trial and have an account email, we may email you a reminder before the trial ends.
Usage records
To run the free plan and control costs, we keep records such as transcription minutes and counts of AI requests, linked to your anonymous identifier. They contain no lecture content.
Analytics
The App sends usage events to PostHog, for example that the app was opened, a lesson was finished or the paywall was shown. Each event includes a random install identifier (separate from your account), the app version, your local hour and weekday, and the build type. Events do not include your name, email, recordings or lecture content. As with any web request, your IP address is received by PostHog when events are sent. PostHog keeps these events for up to one year on our current plan, and we use them only to understand how the App is used overall.
Feedback and bug reports
If you send feedback or a bug report from the App, we store your message, the category you chose, your app and iOS version, your device identifier and, if you are signed in, your email so we can follow up. It is also emailed to our support inbox.
Invite a friend
If you use an invite code, we store the code and which accounts redeemed it so both of you receive your bonus lectures.
Notifications
Study reminders are scheduled on your device. We do not send push notifications from our servers.
Who processes your data
We use these service providers, each only for the purpose described:
- Soniox — speech-to-text (receives audio, or a podcast or video audio link).
- OpenAI — speech-to-text, lesson and question generation, answers from Vo and audio recaps (receives audio or lecture text).
- Supadata — video captions (receives the video link).
- Recall.ai — the Live meeting bot on Mac (joins the call you choose).
- RevenueCat — subscription management (keyed to your anonymous identifier).
- PostHog — anonymous usage analytics (hosted in the United States).
- Resend — email delivery for sign-in codes, trial reminders and support messages.
- Railway — hosting for our servers and database (United States).
- Apple — payments, Sign in with Apple, podcast lookup and on-device speech features. Google — Sign in with Google, if you use it.
We do not sell or rent your data, and we do not share it with anyone except these providers acting on our behalf, or where required by law.
How long we keep it
- On your device: your lectures, lessons, cards and progress stay until you delete them or remove the App.
- Account and cloud backup: until you delete your account or ask us to delete them.
- Podcast and video import jobs and Live meeting transcripts: deleted automatically 30 days after they are created, or sooner if you delete your account.
- Analytics events: up to one year in PostHog.
- Usage records: up to 365 days, then deleted automatically.
- Feedback and bug reports: as long as needed to handle them.
- Recordings: never stored; deleted as soon as transcription finishes.
Your choices and rights
- Delete any lecture in the App at any time.
- Turn Back up notes and progress off at any time.
- Delete your account, and everything we store with it, in Me → Settings → Delete account. Delete all my data removes your data from the device and our servers.
- For anything else, email [email protected] and include the Device ID shown in Settings so we can find your data.
If you are in the EU, EEA, UK or Switzerland
Brandon Kwai, the developer of Vocory, is the controller of your personal data. You can reach us at [email protected].
We process your data on these legal bases:
- Contract: to provide the App and the features you use, including transcription, lesson building, your account, cloud sync and subscriptions.
- Legitimate interests: to run the free plan, prevent abuse, keep the service secure, and understand usage through anonymous analytics so we can improve the App. You can object to this processing at any time.
- Legal obligation: where we must keep or disclose information by law.
You have the right to access, correct, delete, restrict or object to the processing of your data, to receive it in a portable format, and to complain to your local data protection authority. To use these rights, email [email protected]; we will reply within one month.
International transfers: our servers and most of our providers are in the United States. Where your data is transferred outside your region, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework where a provider participates in it.
Children
Vocory is not directed at children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact [email protected] and we will delete it.
Tracking
We do not track you. The App does not use the advertising identifier, does not link your data with other companies' data for advertising, and does not share it with data brokers. No App Tracking Transparency prompt is needed.
Security
Data sent between the App, our servers and our providers is encrypted in transit (HTTPS/TLS). Passwords and one-time codes are stored only as hashes. No system is completely secure, but we take reasonable measures to protect your information.
Changes to this policy
We may update this policy. The "Last updated" date above shows when it last changed.
Vocory