PeerVox

1. Who we are

PeerVox is developed and operated by Dimitrios Iliadis, an independent developer based in the United Kingdom. We are the data controller for the personal data collected through this app.

If you have any questions or requests relating to this policy or your personal data, contact us at d.iliadis@virginmedia.com.

2. What data we collect and why

We collect only the data needed to provide the app's core functionality. We collect no data in the background and no data unless you actively create a session.

We do not collect: device identifiers, advertising IDs, location data, contacts, photos, usage analytics, crash reports, or payment information.

3. Microphone access

The app requests microphone access solely to record audio during a session you have started. We do not access the microphone in the background, at any other time, or for any other purpose.

You can revoke microphone permission at any time in your device settings, which will disable the recording feature.

4. AI Processing

PeerVox uses OpenAI's APIs to transcribe and summarise your sessions. By using the app you acknowledge that your audio and transcript data is processed by OpenAI as described below.

• Audio transcription: Your audio recording is sent to OpenAI (openai.com) for transcription using the Whisper API.
• Summarisation: Your transcript is sent to OpenAI's GPT API to generate a summary, key points, and action items.
• No model training: OpenAI does not use data submitted via their API to train their models by default.
• Audio deletion: Audio files are deleted from our server immediately after transcription is complete.
• OpenAI's privacy policy: openai.com/privacy

5. How we process your data

5.1 Transcription — OpenAI Whisper API

When you end a recording, your audio file is sent to OpenAI's Whisper API for automatic transcription. OpenAI processes the audio on their servers and returns a text transcript. The audio file is transmitted securely over HTTPS.

5.2 Summarisation — OpenAI GPT API

The transcript is then sent to OpenAI's GPT API to generate a summary, key points, and action items. The same security and data handling conditions apply as described above.

5.3 Storage

Processed data (transcript, summary, action items, metadata) is stored on a backend server operated by us, used solely to support the app's functionality and not shared with any third party for commercial purposes.

5.4 No sale of data

We do not sell, rent, or trade your personal data to any third party, ever.

6. Data retention

You can delete any individual session at any time from within the app. Deleting a session permanently removes all associated data from our server.

To request deletion of all your data, email d.iliadis@virginmedia.com with the subject "Data deletion request". We will action your request within 30 days.

7. Your rights under UK/EU GDPR

If you are located in the United Kingdom or European Economic Area, you have the following rights:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data. You can also do this yourself within the app.
• Right to restriction of processing — ask us to pause processing while a dispute is resolved.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Rights related to automated decisions — AI summaries are informational aids; no automated decisions with legal or significant effects are made about you.

To exercise any of these rights, contact us at d.iliadis@virginmedia.com. We will respond within one month.

8. Third-party services

The only third-party service that receives your personal data is OpenAI, L.L.C., solely for transcription and summarisation as described in Section 4 and Section 5.

We do not use third-party analytics, advertising networks, social login providers, or crash reporting services that transmit personal data.

9. Data security

We implement appropriate technical measures to protect your data:

• All data in transit is encrypted using HTTPS/TLS.
• Audio files are deleted from our server immediately after transcription is complete.
• Access to the backend server is restricted and not publicly exposed beyond the API endpoints required by the app.

No method of transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

10. Children's privacy

PeerVox is not directed at children under the age of 13 (or 16 in some EU member states). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International data transfers

By using the app, your audio and transcript data may be processed by OpenAI on servers located in the United States. OpenAI relies on Standard Contractual Clauses (SCCs) as the legal mechanism for transferring data from the UK/EEA to the United States, in accordance with applicable data protection law.

12. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of the page. For significant changes, we will notify you through the app or by email. Continued use of the app after a policy update constitutes acceptance of the revised policy.

13. Contact