Privacy Policy

Last updated: July 11, 2026

This policy is written and maintained by the VoxScore team. It has not yet been reviewed by a lawyer. Do not rely on it as a final, store-ready policy until that review is complete.

Who we are

VoxScore is operated by Fersa Ltd. Şti. Questions about this policy or your data can be sent to support@voxscore.app.

What we collect and why

Account data: email address and handle, used to sign you in and identify your submissions and votes.

Performances:the YouTube links you submit, plus the public title/channel metadata YouTube provides for them. We never store YouTube media itself — videos are embedded via the official YouTube player and remain on YouTube's servers.

Votes, comments and listen events: your votes, written comments, and watch-progress events (timestamps and playback position) used for the Verified Listen anti-cheat check.

Push-notification tokens:if you enable notifications in the mobile app, we store your device's push token and platform (iOS/Android).

Moderation records: reports and takedown requests, kept to enforce these policies and respond to legal requests.

Your voice recordings (Measured scoring)

VoxScore's optional “Measure my recording” feature lets you record your own performance of a song directly in the app so we can calculate real, objective vocal metrics (pitch accuracy, rhythm, technical skill, recording quality) instead of an AI estimate. This is separate from — and never applied to — embedded YouTube videos, which we never download or analyze (see “How AI and Measured scores work” below).

When you use this feature: the app records audio with your device microphone (after you grant permission), uploads that recording to our server over an encrypted connection, our server analyzes it to produce the metrics above, and the audio file is deleted immediately after analysis. We do not retain the recording, do not use it to train AI models, and do not share it with any third party. Only the resulting numeric scores are stored against your performance. You can decline microphone permission and use VoxScore without ever recording audio — Measured scoring is entirely optional.

Voice recordings can be treated as sensitive data under some privacy laws (for example, biometric-information statutes in certain US states). We are flagging this explicitly so it gets specific legal attention — see the notice at the top of this page.

How AI and Measured scores work

The “Provisional AI Estimate” shown on embedded YouTube performances is produced by sending the performance's public metadata (video title and channel name) to an AI provider (OpenAI or Anthropic, depending on configuration). We never send audio, video, or your personal data for this scoring, and the estimate is an interpretive label — not a real audio measurement. Criteria labeled “Measured” come only from real audio analysis of a recording you submitted yourself, as described above.

Third-party services

VoxScore runs on Supabase (database, authentication — including optional Google sign-in — and file handling), Vercel (web hosting), and Expo (mobile push notification delivery). We use Upstash for rate limiting and Cloudflare Turnstile for bot protection on web submissions. AI estimates are generated via OpenAI or Anthropic. Embedded videos are served by YouTube under YouTube's own terms and privacy policy. None of these providers receive your voice recordings; the DSP analysis described above runs on our own servers only.

Anti-abuse

We use rate limiting and a bot-check (e.g. Cloudflare Turnstile) to protect vote integrity. We do not use invasive device fingerprinting, and we do not sell your data or show third-party ads.

Data retention

We keep account, performance, vote, and comment data for as long as your account is active. Voice recordings uploaded for Measured scoring are deleted immediately after analysis, as described above. Moderation and takedown records may be kept after account deletion where needed to comply with legal obligations or resolve disputes.

Your rights

You can delete your account and all associated data at any time from the app's Profile screen (Delete account); deletion is immediate and permanent. Depending on where you live, you may also have the right to access, correct, export, or object to the processing of your data (for example, under the EU/UK GDPR or the California Consumer Privacy Act). To exercise any of these rights, or for content disputes, contact us via the takedown form or the contact address above.

International users

Our infrastructure providers (Supabase, Vercel) may process and store data outside your home country. If you are in the EU/UK, this may involve a transfer of personal data outside the EEA/UK; we rely on our providers' standard contractual safeguards for these transfers.

Children's privacy

VoxScore is not directed at children, and we do not knowingly collect personal data from anyone under 13 (or the minimum age required in your country). If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date above and, where required, notify you in the app.