This policy explains how handles voice recordings and biometric data. It supplements our Privacy Policy and is provided in particular for residents of jurisdictions with specific biometric data protections (Illinois BIPA, Texas CUBI, Washington HB 1493, EU/UK GDPR Article 9).
Your voice recording stays on your device. We do not upload, store, transmit, or process your voice on any server. All recording, mixing, and audio rendering happens locally in your browser. You can delete the recording at any time by clearing your browser storage or using our deletion tool.
When you use to record affirmations, your microphone captures audio. This audio is processed entirely within your browser using JavaScript and the Web Audio API. The processed audio is stored in your browser's local storage (IndexedDB) as a Blob.
We do not:
The Illinois Biometric Information Privacy Act (740 ILCS 14) defines "biometric identifier" as a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. 's local-only processing means we do not create or store a voiceprint as defined under BIPA.
However, the audio file itself can be considered "biometric information" in some interpretations. To remove any ambiguity:
Written notice (BIPA §15(a)): We provide written notice through this policy that your voice recording is processed locally on your device and is not transmitted to servers.
Written consent (BIPA §15(b)): By clicking "Start recording" on the record page, you provide written consent to local processing of your voice recording solely for the purpose of generating your personal audio session.
Right to delete: You may delete your recording at any time via the deletion tool, by clearing your browser storage, or by emailing [email protected].
voxsoma-bake. Survives browser restarts. Cleared when you (a) use our deletion tool, (b) clear browser storage, or (c) uninstall the browser.vs_affirmations. Cleared with the same methods above.Neither IndexedDB nor localStorage is accessible to servers. Browser security model prevents server-side reads of your local storage.
Your recording is retained as long as you keep it on your device. We do not impose a retention period because we have no copy. When you delete the recording, it is gone — there is no backup on our side.
The audio engine layers (background music, breathing rhythm, ambient layers) are pre-rendered MP3 files served from our CDN (Cloudflare). These do not contain your voice. They are mixed with your recording inside your browser, not on our servers.
The "narrator" voice (intro and outro on demo previews) is AI-generated using ElevenLabs synthetic voice — this is disclosed under our AI Disclosure (EU AI Act Article 50). Your own recording is never processed through any AI system.
If we ever change our voice handling — for example, if we add an optional cloud backup feature — we will publish a new version of this policy, notify you by email (if you have an account), and require fresh consent before any change applies to you.
Privacy and biometric data questions: [email protected]. We respond within 30 days as required by law.