VoxLift Privacy Policy

Last updated: April 2026

Metamorphology SIA ("we", "us") operates the VoxLift iOS application. This policy explains what data we collect, why, and what your rights are under the General Data Protection Regulation (GDPR) and applicable law.

1. Who we are

Data controller: Metamorphology SIA Riga, Latvia, support@metamorphology.com

2. What data we collect, and why

2.1 Workout data (stored locally on your device)

Your workout sessions, voice transcripts, audio recordings, exercises, sets, and AI-generated summaries are stored exclusively on your device using Apple's SwiftData framework and local device storage. This data never leaves your device except as described in sections 2.2 and 2.3 below. Audio recordings are retained locally until you delete the associated workout session.

Legal basis: Performance of contract (providing the app's core functionality).

2.2 Voice transcripts sent to our cloud for parsing

When you record a voice note, the transcript text (not the audio recording itself) is sent to our cloud backend hosted on Amazon Web Services (AWS) in Frankfurt, Germany (eu-central-1 region). The transcript is processed by an AI language model (Anthropic Claude via AWS Bedrock, EU inference region) to extract structured workout data, then immediately discarded. We do not store transcripts on our servers.

Transcripts do not contain your name, email address, or any other directly identifying information. They contain only the workout-related content you chose to speak aloud.

Legal basis: Performance of contract.
Third parties involved: Amazon Web Services (data processor), Anthropic (model provider via AWS Bedrock EU).

2.3 Crash reports and diagnostic data (Sentry)

We use Sentry (Functional Software, Inc.) to collect crash reports and, when you explicitly submit a "bad parse" report via the in-app feedback feature, diagnostic data including the relevant transcript text and parsed workout data. Our Sentry account is hosted in the EU region.

Sentry is configured with sendDefaultPii=false, meaning no personally identifiable information such as your name, email, or IP address is included in crash reports. Diagnostic data submitted via the bad parse report feature includes only workout-related content from the affected transcript.

Legal basis: Legitimate interest (improving app stability and quality).
Third parties involved: Sentry (Functional Software, Inc., EU region).

2.4 Subscription and payments

Subscriptions are managed entirely by Apple through the App Store. We do not receive or process your payment information. Apple's privacy policy governs how your payment and account data is handled.

2.5 Data we do not collect

We do not collect:

• Your name, email address, or any account information

• Your location

• Your contacts or any other data from your device

• Advertising identifiers or tracking data

• Audio recordings (stored locally on your device only — never transmitted to our servers or any third party)

3. Data transfers outside the EU/EEA

All data processing takes place within the European Union. Our cloud backend runs on AWS Frankfurt (eu-central-1), AI parsing uses AWS Bedrock's EU inference region, and crash reporting is handled by Sentry's EU-hosted infrastructure. No personal data is transferred to the United States or any other country outside the EU/EEA.

4. Data retention

• Workout data and audio recordings: Stored on your device until you delete the associated workout session or uninstall the app.

• Transcripts sent for parsing: Not retained on our servers. Processing is stateless.

• Crash and diagnostic reports: Retained by Sentry for 90 days.

5. Your rights under GDPR

As a user in the EU/EEA, you have the right to:

• Access — request a copy of any personal data we hold about you

• Erasure — request deletion of your data

• Rectification — request correction of inaccurate data

• Restriction — request that we limit processing of your data

• Objection — object to processing based on legitimate interest

• Portability — receive your data in a portable format

Since the vast majority of your data is stored locally on your device, most of these rights can be exercised directly within the app (by deleting sessions or uninstalling the app). For any data held by third-party processors (Sentry crash reports), contact us at the address in section 1 and we will action your request.

You also have the right to lodge a complaint with your local data protection authority. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

6. Children

VoxLift is not directed at children under the age of 16. We do not knowingly collect data from children.

7. Changes to this policy

We may update this policy as the app evolves. Material changes will be noted with an updated date at the top of this document. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Contact

For any privacy-related questions or to exercise your rights, contact us at: support@metamorphology.com