Privacy Policy
Last updated: 2026-10-16
This policy covers the Iconic Voices website (iconicvoices.io), the web player at iconicvoices.io/app, and the Iconic Voices app for iPhone (iOS). It describes what we collect today, in the present tense. Where a tool is set up but switched off, we say so.
1. Who we are (data controller)
Data controller: Oleksandr (Alexander) Lastochkin, an individual
entrepreneur (sole proprietor) based in Dnipro, Ukraine, publishing under the name Iconic
Voices. He is the controller for all processing described here.
Privacy contact: privacy@iconicvoices.io.
The full postal address is supplied on request to that address.
Person in charge of the protection of personal information (Québec): the data controller named above. As the owner of Iconic Voices, he is the person in charge of the protection of personal information under Québec's Act respecting the protection of personal information in the private sector (Law 25). Contact: privacy@iconicvoices.io.
2. Data we collect
- Account data — your email address, a user ID and, only if you choose to set a password on the website, a password hash. Accounts created in the iPhone app sign in with a 6-digit code sent by email and have no password. Authentication is handled by Supabase Auth, hosted in the EU (Ireland) region. We never see or store a plaintext password.
- Listening progress — the book, position, chapter, and completion flag for titles you play, so playback resumes across your devices.
- Bookmarks — the positions you save, plus an optional short note (up to 140 characters).
- Subscription and purchase records — what your account has access to. Iconic Voices Membership is sold only in the iPhone app, and Apple is the seller: we receive from Apple a subscription record (product, status, renewal and expiry dates, and an opaque transaction identifier) linked to your Iconic Voices user ID, and we send Apple that user ID as the purchase's account token so the subscription lands on your account. We never receive your Apple Account details or your payment method. If you made a purchase on our website before web sales closed (a legacy purchase), we keep the record of it on your account; your card or PayPal details went to the payment processor directly and never reached us.
- Waitlist and notify-me emails — the email address you submit in a notify-me form, together with which page you submitted it from.
- Feedback and support correspondence — what you send us via the feedback form or by email.
- Password safety check — when you choose a password on the website, your browser checks it against the Have I Been Pwned "Pwned Passwords" list using k-anonymity: only the first 5 characters of the password's SHA-1 hash are sent. Neither the password nor your email leaves your browser.
- Error reports — our error monitor (Sentry) is configured, currently disabled. When it is enabled, a page that breaks sends a technical report with email addresses, IP addresses, tokens, and passwords scrubbed in your browser first.
- Aggregate analytics — cookieless, anonymous page-view counts via Plausible, and cookieless page-load and performance measurements via Cloudflare Web Analytics, provided by our host. Neither sets cookies or identifies you. Optional analytics and marketing tools follow the regional consent rules in the Cookie Policy.
3. The iPhone app
The app collects your email address, user ID, listening progress and bookmarks — and, if you subscribe, the subscription record described in §2. In particular:
- Local listening statistics stay on your device. Figures the app shows you (such as minutes listened) are computed and stored on the device and are never transmitted to us.
- The app contains no advertising, no advertising identifier (IDFA), no App Tracking Transparency prompt and no tracking, and no third-party analytics, advertising or crash-reporting SDKs.
- Apple sells and renews the in-app subscription: the App Store shows you the price, takes the payment, and tells our server the subscription's status. To make that subscription land on the right account, the app passes your Iconic Voices user ID to Apple as the purchase's account token.
- Apart from Apple, the app shares no data with third parties. Supabase and Cloudflare are our own processors (they host our backend); nothing is shared with anyone for their own purposes.
- The app does not access your location, contacts, photos, microphone, or files.
Diagnostics, usage statistics and campaign measurement
To find crashes and to see where people get stuck between installing the app and listening, the app sends us a small amount of data that is not linked to your account:
- Diagnostics — crash, hang and performance reports from Apple's MetricKit, only from iPhones where "Share with App Developers" is turned on in iOS Settings (Privacy & Security → Analytics & Improvements). Error messages that could quote your data are removed on the device before anything is sent.
- Usage statistics — a short list of sign-in and subscription steps (for example "code sent", "paywall shown", "purchase completed", "first playback"), with the time, the app version and the iOS version.
- Apple Ads attribution — once after installation, the app asks iOS for Apple's attribution token (AdServices) and sends it to our server. Our server exchanges it with Apple and keeps only Apple's answer: the Apple Ads campaign, ad group, keyword and ad that led to the install, if there was one. The token itself is not stored.
- SKAdNetwork and AdAttributionKit — Apple's privacy-preserving install measurement. iOS itself tells an ad network, in aggregated form and with a delay, how far an install got (installed, signed up, subscribed). The app sends no identifiers for this; a copy of such a report, if sent to our website, contains only the network, the campaign and that value.
Diagnostics, usage statistics and the Apple Ads answer are stored with a random install ID that the app creates on first launch and that disappears when you delete the app. It is not your advertising identifier and not linked to your account, your email address or your IP address (our server uses the IP address only in memory, to limit requests, and never stores it). We keep diagnostics for 90 days, usage statistics for 180 days and Apple Ads attribution for 13 months (see §5).
This section is written to say exactly what the Apple "App Privacy" label for the app says. Linked to your identity: Contact Info (your email address), Identifiers (your user ID), User Content (bookmark notes), Usage Data (listening progress) and Purchases (the subscription record above). Not linked to you: Diagnostics (crash and performance reports), Identifiers (the install ID) and Usage Data (the Apple Ads answer). Apple's label asks once per data type whether it is linked, so the sign-in and subscription steps described above are counted under the linked Usage Data and Purchases types, because your listening progress and subscription record are; the steps themselves are stored only with the install ID, never with your account. Nothing is used to track you. If you ever spot a mismatch, tell us at privacy@iconicvoices.io and we will fix it.
4. Legal bases (GDPR and UK GDPR)
| Processing | Legal basis |
|---|---|
| Account, sign-in, playback, progress and bookmark sync | Contract — Art. 6(1)(b) |
| Subscriptions, entitlements, legacy purchases | Contract — Art. 6(1)(b) |
| Waitlist / launch emails, optional analytics and marketing cookies | Consent — Art. 6(1)(a) |
| Security, fraud prevention, password safety check, error monitoring, backups | Legitimate interest — Art. 6(1)(f) |
| Cookieless aggregate analytics (Plausible, Cloudflare Web Analytics) | Legitimate interest — Art. 6(1)(f) |
| iPhone app diagnostics, usage statistics and Apple Ads campaign attribution (not linked to your account) | Legitimate interest — Art. 6(1)(f) |
5. How long we keep it
| Data | Retention |
|---|---|
| Account (email, user ID) | Until you delete the account, plus a 7-day recovery window |
| Listening progress & bookmarks | Deleted together with the account |
| App Store subscription records | Apple keeps its own transaction records as the seller. Our copy of the subscription status is deleted together with your account |
| Legacy website purchase records | Deleted together with your account; payment notifications we received from PayPal are stripped of your name and email at the same time |
| Waitlist / notify-me emails | Until you unsubscribe or ask us to delete them |
| Support and feedback correspondence | Up to 24 months |
| Error reports (Sentry, when enabled) | 90 days |
| iPhone app diagnostics (crash, hang and performance reports) | 90 days |
| iPhone app usage statistics (sign-in and subscription steps) | 180 days |
| Apple Ads campaign attribution for an install | 13 months |
| Database backups | Weekly encrypted copies, each deleted after 30 days. Everything about a deleted account has left our backups within 45 days of the deletion request |
6. Processors we use
| Processor | What for | Where |
|---|---|---|
| Supabase | Database, authentication, application APIs | EU (Ireland) |
| Cloudflare | Website hosting and CDN, audio storage (R2), cookieless Web Analytics; bot protection (Turnstile) is configured, currently disabled | Global network; EU-US Data Privacy Framework certified |
| Apple | App Store In-App Purchase — Apple is the seller of the iPhone subscription: it takes the payment and reports the subscription's status to us, keyed to your user ID. For Apple Ads attribution, Apple turns the app's one-time attribution token into the campaign details described in §3 | US / Ireland; EU-US Data Privacy Framework and Standard Contractual Clauses |
| PayPal | Billing for legacy website subscriptions (no new sales) | US; EU-US DPF |
| Resend | Transactional email (sign-in codes, account email) | US |
| GitHub | Storage of the weekly database backup, encrypted before upload, as a private artifact deleted after 30 days | US; EU-US DPF |
| Sentry | Error monitoring — configured, currently disabled (when enabled, IP addresses and emails are scrubbed in the browser before sending) | US; EU-US DPF |
| Plausible | Cookieless, anonymous aggregate analytics | EU |
| Have I Been Pwned (Pwned Passwords) | Password safety check on the website — receives only a 5-character hash prefix, never your password or email | Global network |
Backups: once a week we take a copy of the database, encrypt it before it leaves the backup job, and store it as a private GitHub Actions artifact that is deleted after 30 days. Our database host Supabase may also keep its own short-lived automated backups in the EU. Deleted accounts disappear from all backups within 45 days of the deletion request.
About Apple: for the in-app subscription Apple does not act on our instructions — it sells to you in its own right, as merchant of record, and is an independent controller for the payment. It is listed above because it is a recipient of your user ID and because we receive your subscription record back from it. Apple's own privacy policy governs what Apple does with your Apple Account data: apple.com/legal/privacy.
Configured, currently disabled: Google Analytics 4, Meta Pixel and TikTok Pixel are set up in our consent system, but no IDs are configured, so none of them loads today. If we switch one on, it follows the regional rules in the Cookie Policy: in the UK, the EEA, Switzerland and Québec it loads only after you opt in; in the US, Canada outside Québec and Australia it loads unless you opt out, and a Global Privacy Control (GPC) signal from your browser counts as an opt-out of marketing. You can change your choice at any time with Your Privacy Choices.
We do not sell your personal data.
7. Your rights and how to exercise them
- Access & export: download everything we hold about you as JSON, self-service, at Settings → Privacy on the website (sign-in required) — or email privacy@iconicvoices.io.
- Rectification: correct your email in Settings → Account, or email us.
- Erasure: delete your account in the iPhone app (Settings → Delete account), on the web at Settings → Privacy, or via the public page /delete-account.
- Portability, restriction, objection, withdrawal of consent: email privacy@iconicvoices.io. We respond within 30 days (usually much faster).
- Cookie and marketing choices: use Your Privacy Choices at any time; how the defaults work in each region is explained in the Cookie Policy.
- Complain: you have the right to lodge a complaint with your local data protection authority (for example, under GDPR Art. 77 in the EEA, the ICO in the UK, or the privacy commissioner in Canada or Australia).
United States, including California (CCPA/CPRA): the categories we collect are identifiers (email, user ID), commercial information (subscription and purchase records), and internet activity limited to your use of our own service (listening progress, bookmarks). We do not sell personal information. Today we also do not share it for cross-context behavioral advertising, because the ad pixels are disabled. If we switch them on, you can opt out at any time through Your Privacy Choices, and we honor Global Privacy Control as an opt-out of sale and sharing. You have the rights to know, delete, and correct, and we will not discriminate against you for exercising them — use the same channels listed above.
8. Deleting your account
Cancel an App Store subscription before you delete. Deleting your Iconic Voices account does not cancel a subscription bought in the iPhone app — Apple holds that billing arrangement, not us, and it will keep charging your Apple Account. Cancel it first at apps.apple.com/account/subscriptions.
Four equivalent paths — full details on the deletion page:
- In the iPhone app: Settings → Delete account.
- On the web: Settings → Privacy (sign-in required).
- Public page: iconicvoices.io/delete-account — works without the app installed.
- Email: support@iconicvoices.io, subject "Delete my account", sent from your account email.
9. Children
Iconic Voices is not directed at children under 13, and we do not knowingly collect data from them. Our Terms require users to be at least 13 (16 in the EEA/UK where the law there requires it), and users under 18 need the consent of a parent or guardian. If you believe a child has created an account, email privacy@iconicvoices.io and we will remove it.
10. International transfers
Your account data lives in the EU (Ireland). Where a recipient is US-based (Cloudflare, Apple, PayPal, Resend, GitHub, and Sentry when enabled), transfers rely on the EU-US Data Privacy Framework (and its UK extension) and/or Standard Contractual Clauses. We do not rely on the deprecated Privacy Shield.
11. Changes to this policy
If we make material changes we will email account holders and subscribers at least 14 days before they take effect and update the "Last updated" date above. The current version is always at iconicvoices.io/privacy.
12. Contact
Privacy questions and data requests: privacy@iconicvoices.io. General support: support@iconicvoices.io (or the Support page). Legal, takedowns, disputes: legal@iconicvoices.io.