1. Overview
VoiceLedger is developed by Pengyu Chen. This policy covers the VoiceLedger app, its optional cloud-notes service and voice.expdf.cn. Pengyu Chen is responsible for the personal data processed by these services; contact bingoods@163.com.
You do not need to create a VoiceLedger login to record, play or manage local content. We do not sell personal data, use advertising trackers or use your recordings or transcripts to train our own AI models. Microphone and Speech permissions are requested for recording and on-device transcription; you can change them in system settings.
2. Data we process
- On your device
- Audio, transcripts and notes
- Optional cloud notes
- Transcript text and timestamps
- Purchases & allowance
- Verified purchase identifiers and usage records
Local content includes recordings, editable transcript segments, notes, projects, tags and processing status. VoiceLedger requests on-device speech recognition and does not silently fall back to a cloud transcription service. Availability depends on the device, language and system resources. Apple system services and any diagnostics you choose to share with Apple are governed by Apple’s settings and privacy policy.
If you enable iCloud storage, recording files are mirrored to your own iCloud account. Paired Apple Watch recordings transfer to your iPhone. Exporting or sharing content sends your selected files to the destination you choose; copies at those destinations are outside the app’s control.
For cloud notes, the app sends transcript segments, sequence numbers, start/end times, the selected template, a random request identifier, app/protocol and consent versions. The cloud-notes API does not receive the original audio. Titles, projects, tags, contacts and precise location are not separate request fields. Personal information spoken in a recording may still appear in its transcript. Automatic checks for common sensitive patterns are not a guarantee that all personal information is removed.
To establish cloud allowance and verify purchases, the service receives Apple-signed installation and transaction information. It retains hashed account/transaction identifiers, a random account token, product and billing-period information, allowance balances and usage/settlement records. These records can relate to the same cloud account; hashing does not make them anonymous. We do not receive your Apple ID password or payment-card details.
Network connections necessarily expose an IP address to the hosting service. Limited request, timing, failure and security metadata supports delivery, abuse prevention and troubleshooting. This website uses no analytics, advertising cookies, external fonts or embedded trackers, and its web server does not keep routine page-access logs. If you email support, we receive your address, message and attachments through our NetEase 163 mailbox. Please send only the information needed for the request.
3. Cloud processing
Cloud processing is optional. After you read and accept the in-app disclosure, each note-generation request sends transcript text through our service hosted on Tencent Cloud in Tokyo, Japan, to Alibaba Cloud Model Studio (Qwen APIs) in mainland China. Processing may therefore cross the borders of your country, Japan and mainland China. We use this text to generate the notes you requested. Declining cloud processing leaves local recording, playback and content management available.
Our service processes transcript bodies in memory and does not write them or generated note bodies to its database, application logs, training datasets or backups. Results may remain briefly in memory for delivery recovery, as explained below. Alibaba Cloud has its own retention and security obligations: its published privacy notice states that model-call data is retained as required by law and is not used for model training. Our short memory-retention period is not a promise of zero retention by the model provider.
Apple processes App Store purchases and optional iCloud storage under its own terms. Tencent Cloud supplies hosting in Japan. Alibaba Cloud supplies the cloud AI processing described here. NetEase supplies the support mailbox; support messages may be processed in mainland China. We use service providers for these purposes, and may disclose limited data where required by law or necessary to protect legal rights and service security. We do not claim that your data always remains in your home country.
Optional cloud processing relies on your consent. Purchase verification and allowance management support the service you request; proportionate operational processing protects service reliability and prevents misuse, subject to applicable law. Where a particular transfer or processing activity requires additional safeguards, those requirements remain applicable; accepting this policy does not waive your legal rights. Material changes to cloud recipients or purposes will be disclosed before the changed processing is used.
4. Retention & deletion
Local recordings and related content remain until you delete them. Moving a recording to Recently Deleted normally keeps it recoverable for 30 days; you can permanently delete it sooner. Automatic cleanup runs when the app can perform maintenance. Permanent deletion also attempts to remove its iCloud mirror; if iCloud is unavailable, deletion waits for connectivity. Separately exported files, device backups and Watch copies may remain and need to be managed separately.
Our cloud service keeps a generated result in process memory for up to two minutes to recover delivery. It removes the result after the app confirms local saving; expired results cannot be retrieved, and scheduled memory cleanup may take up to 30 additional seconds. Transcript request bodies are not persistently stored by our service. Provider-side retention follows the provider’s applicable terms and legal obligations, rather than this two-minute limit.
Cloud account, purchase and usage records are retained to maintain lifetime trial limits, purchased allowance, subscription restoration, refunds and abuse prevention. They are not automatically erased when you delete a local recording, uninstall the app or stop a subscription. You can request their deletion; we may retain the limited records still needed to honor purchases, resolve disputes, prevent repeated free trials or meet legal obligations, and will explain any applicable limit.
Gateway request and health metadata is normally cleaned after 30 days, daily usage aggregates and alerts after 180 days, and administration audit events after 365 days. Cleanup runs periodically. Database backups rotate, with files older than 14 days removed by scheduled backup cleanup; separately retained maintenance or incident backups may last longer when needed for recovery or an investigation. These records and backups do not contain transcript or note bodies. Other operational error logs and support correspondence are kept while needed for security, troubleshooting, resolving your request or legal obligations; contact us to request deletion.
5. Your choices
In Settings, switch the AI policy to on-device processing to withdraw cloud consent and stop new cloud requests. Withdrawal does not undo processing that has already occurred. You can also disable iCloud mirroring, revoke microphone/Speech permissions, export content and use Recently Deleted to permanently remove local content. Manage and cancel subscriptions through your Apple account; deleting the app does not cancel a subscription.
Depending on applicable law, you may request access, correction, a copy, deletion, restriction or objection to processing, or withdraw consent. Email the contact below and describe the request. We may ask for information reasonably needed to verify ownership without requesting your Apple password or payment-card information. We will respond within the time required by applicable law, explain any lawful limitation and help direct provider-specific requests. You may also raise concerns with the competent data-protection authority.
Record only when you have any consent or other authorization required for the people and content involved. The service is not directed at children below the minimum age required by applicable law. If you believe a child has sent personal information to us without appropriate permission, contact us so we can investigate and address it.
We use HTTPS for public service connections, restricted service access and separation of content from billing records. No storage or transmission method can be guaranteed absolutely secure. Policy updates will appear here with a revised effective date; material changes will be communicated in the app when appropriate. All four language versions describe the same practices.
6. Contact
Pengyu Chen
For privacy requests or help with VoiceLedger, email bingoods@163.com. Describe the issue and, where relevant, the app version and an approximate time. Do not include private recordings, complete transcripts, passwords or payment-card numbers unless a specific, necessary support process has been agreed.
bingoods@163.com