Privacy Policy

1. Who is responsible for your data

Basaltone is operated by an individual publisher, on a non-professional basis during the closed beta. Their full identity has been provided to the hosting providers as required by law, is available on request at privacy@basaltone.app, and will be published on this page before the commercial opening of the service.

Privacy contact and exercise of rights: privacy@basaltone.app

Person in charge of the protection of personal information within the meaning of Quebec law: the operator of the service, reachable at the same address.

2. What this policy covers

It applies to the basaltone.app website, to the web application and to the iOS and Android mobile apps, as well as to the account, voice training, voice journal, progress, AI-assisted analyses, notification and support features. It does not cover third-party services that determine their own purposes on their own.

3. The essentials in six points

• The live analysis of your voice runs entirely on your device. The raw sound from your microphone never leaves the device and is never transmitted to us.
• When you save a session, only derived numerical values are stored: frequencies, duration, time in zone and a sampled pitch curve. Never the audio.
• An audio file is uploaded only if you explicitly choose to save a recording in the voice journal.
• The AI analyses are optional and can be turned off at any time. While they are on, they receive training measurements linked to your account, but neither your name, nor your email address, nor any audio recording.
• PostHog analytics and session replay, Vercel aggregated visit and performance measurement, and Google Ads campaign conversion measurement are enabled only after your consent. PostHog and Google Ads rely on pseudonymous or advertising click identifiers. Vercel Web Analytics uses a request-derived visitor hash that changes daily for aggregate reporting.
• You can exercise your legal rights free of charge by writing to us. No paid feature is required.

4. Data we process

Depending on the features you use:

• Account and profile: email address, display name, and, if you sign in with Google or Apple, the email and name provided by those services. Language, theme and time zone preferences. If you use a password, it is stored in encrypted form by our authentication provider and we cannot read it.
• Technical and security data: IP address, device and browser type, session identifiers, sign-in logs.
• Voice session data: frequencies in hertz, deviations in semitones, time spent in the target zone, stability and quality indices, a timbre measurement, and a pitch curve sampled five times per second.
• Voice journal recordings, if you create any: the audio file, your associated notes and mood, and the linked session.
• Progress: streaks of consecutive days, daily statistics, goals and achievements.
• AI analyses: the measurements sent to the provider, and the text of the generated messages, which we retain.
• Notifications: device token or browser push subscription, platform, and the reminder slots you configure.
• Access rights and subscription: the origin of your access, its status, its start and end dates. Full payment card data is processed by the payment provider and is never transmitted to us.
• Support: the content of your messages and your contact details.
• Analytics, performance, campaign measurement and errors: PostHog processes a pseudonymous identifier, usage events and IP address for analytics. With your consent, Vercel Web Analytics processes a page address stripped of query parameters and identifiers in private history, journal and admin routes, the referring site or page when available, approximate location, browser, operating system, device type and a request-derived visitor hash that changes daily for aggregate statistics. Vercel Speed Insights processes the sanitized page or route, browser and device data, and Core Web Vitals. Also with your consent, Google Ads processes a filtered page address limited to its origin, path and allowed campaign parameters, browser and device data, IP address and any available Google advertising click identifier for campaign attribution. We omit the page referrer from the Google tag configuration. After a successful beta application, Google Ads also processes the conversion event and its date and time. Sentry processes the IP address, device, page and technical trace for error tracking.
• Closed beta application: your email, your answers to the form, the proof of your consent with its date and version, and the provenance of the link you arrived through (the campaign parameters in the address: source, medium, campaign, content). These are campaign labels, never a personal identifier.

We do not create any voiceprint capable of identifying or authenticating you, and we do not infer your gender, your health status, your emotion or your age from your voice.

5. Why we use this data

In the European Economic Area, each purpose rests on a legal basis:

• Creating and securing your account, measuring your voice, recording your sessions and your progress, saving your recordings: performance of the contract between us.
• Sending you reminders and notifications, enabling PostHog analytics and session replay, measuring aggregated visits and performance with Vercel, and measuring whether Google Ads campaigns lead to successful beta applications: your consent, which you can withdraw at any time.
• Managing your access rights and, where applicable, your subscription and its billing: performance of the contract and legal obligations.
• Diagnosing errors, preventing fraud and abuse, keeping the service secure: our legitimate interest in providing a reliable and safe service.
• Answering your support requests: performance of the contract or our legitimate interest, depending on the nature of the request.
• Processing a closed beta application: your consent, and our legitimate interest in keeping proof of it.

6. Microphone, local analysis and recordings

When you start a measurement or an exercise, the app requests access to your microphone. Pitch and the other parameters are computed entirely on your device. The audio stream is neither transmitted nor stored. When you save a session, only the numerical values described above are sent to our servers.

The voice journal is the only feature that uploads sound. When you explicitly choose to save a recording, the audio file is placed in a private storage area reserved for you. Playback links are signed and expire after one hour. No transcript is produced.

Your recordings are accessible from your account, protected by an isolation mechanism that restricts each user to their own files. Our trusted server processes, account deletion for example, can access them using a technical key. Our hosting provider processes them as part of its contractual obligations, including its backups. There is no end-to-end encryption: protection is provided at rest and in transit.

7. Artificial intelligence analyses

The progress analysis and the session analysis rely on an artificial intelligence system provided by OpenAI. The responses displayed are generated automatically.

These analyses are optional. We ask you once inside the app, and you can change your mind at any time in the settings. While they are off, no data about you is sent to this provider.

What is sent to the provider: your training measurements linked to your account, that is average and reference frequencies, deviations in semitones, time in zone, control, quality and timbre indications, number of sessions, day streaks, local dates and the shape of your pitch curve, as well as the text of your previous analysis messages.

What is never sent: your name, your email address, and any recording or audio excerpt.

Processing takes place at OpenAI, in the United States, and is governed by that provider's terms. We do not train any model with your data.

The progress analysis builds a profile of your progress, computing a state such as progress, plateau or regression, in order to choose a message and exercise suggestions. This processing produces no automated decision with a legal or similarly significant effect: it determines neither your access, nor your price, nor your rights.

These analyses can be wrong. They are not a healthcare professional and provide no diagnosis, no medical decision and no guarantee of results.

8. Who can receive your data

We limit disclosures to what is necessary for the purposes described. Our providers are:

• Supabase, for database hosting, authentication and the storage of your recordings.
• Vercel, for application hosting and, with your consent, aggregated visit measurement through Web Analytics and real-world performance measurement through Speed Insights.
• OpenAI, for generating analysis messages and session analyses.
• PostHog, hosted in the European Union, for analytics subject to your consent.
• Sentry, for technical error tracking.
• Resend, for sending service emails.
• Cloudflare Turnstile, for the anti-bot verification of the beta application form.
• Firebase Cloud Messaging, for delivering push notifications on mobile.
• For paid plans, Paddle, RevenueCat and the Apple and Google stores. Paddle and the stores act as independent controllers for billing, fraud and tax.
• Google Ads, for measuring beta application conversions associated with advertising campaigns, subject to your consent. We do not use enhanced conversions or this tag to build advertising audiences, and we do not send Google Ads your name, email address, form answers or voice data.

We may also disclose data to our advisers or to the authorities where the law requires it, as well as in the context of a sale or a restructuring, subject to the applicable legal safeguards.

9. Processing outside your country

Some of our providers process data outside the European Economic Area and outside Quebec, in particular in the United States. Google may process Google Ads conversion measurement data outside these territories, while PostHog is hosted in the European Union. For transfers subject to European data protection law, we rely on the contractual safeguards offered by these providers. The laws of the destination country may allow authorities to access data under their legal powers. You can ask us for details at privacy@basaltone.app.

10. How long we keep your data

We keep data for as long as necessary for the stated purposes:

• Your account, your sessions, your progress, your recordings and your analysis messages are kept for as long as your account exists. No automatic expiry applies: you stay in control and can delete a recording, or your entire account, at any time.
• Usage analytics data, Google Ads conversion measurement data and error reports are kept for a limited period, set with the providers concerned.
• Proofs of consent and requests to exercise rights are kept for as long as necessary to demonstrate them.
• When a paid plan is active, billing data is kept in accordance with the applicable accounting and tax obligations.

After your account is deleted, we keep a minimal set of technical records, without your name or your email address: a technical identifier and the date of the operation, in order to prove that the deletion was indeed carried out and to restart it if a step fails. Where a customer account has existed with our payment provider, its identifier is kept so that it can never be reassigned to another person. Residual copies may remain in our hosting providers' backups until those backups rotate.

11. Security

We apply measures appropriate to the risk: encryption of communications, per-account data isolation, private storage areas with short-lived signed links, restricted administrative access and deletion of data when the account is closed. No system offers zero risk. In the event of an incident, we apply our response procedure and inform the individuals and the authorities where the law requires it.

12. Your choices in the app

From the settings, you can:

• correct your display name and your preferences;
• delete a voice journal recording;
• manage your reminders and your notifications;
• manage your choice regarding trackers;
• delete your account.

Account deletion is final and has no grace period. It is refused while a subscription is active or paused: cancel it first. It runs in several steps: immediate deletion of your data, then of your audio files and your profile with our providers, with an additional check a few minutes later. We then send you a confirmation email; for that send only, your address is kept in encrypted form, then erased.

You can request access to your data or its portability free of charge by writing to privacy@basaltone.app. This right is free of charge and does not depend on any paid plan.

13. Your rights in the European Economic Area

Where the General Data Protection Regulation applies, you can:

• request access to your data;
• have inaccurate data corrected;
• request its erasure;
• request the restriction of a processing operation;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting processing already carried out;
• receive your data in a structured, commonly used and machine-readable format;
• not be subject to a decision based solely on automated processing producing legal or similarly significant effects;
• lodge a complaint with the data protection authority of your place of residence or work.

Send your request to privacy@basaltone.app. We reply in principle within one month, extendable by two months if the request is complex, in which case we inform you within the first month.

14. Your rights in Quebec

Where Quebec's private-sector privacy law applies, you can in particular:

• obtain confirmation of the existence of the information we hold about you and access it;
• request its correction;
• withdraw your consent where the processing relies on it;
• request that dissemination cease or that content be de-indexed in the cases provided for by law;
• obtain, unless this raises serious practical difficulties, the computerized information collected from you, in a structured and commonly used technological format. This right does not automatically cover the information we have created or inferred;
• be informed when a decision is based exclusively on automated processing.

Send a written request to privacy@basaltone.app. We reply within thirty days at the latest. Access is free of charge; if reasonable transcription, reproduction or transmission fees were to apply, we would tell you their approximate amount beforehand. If our reply does not resolve your concern, you can contact the Commission d'accès à l'information du Québec.

15. Canada, outside Quebec

Where the Personal Information Protection and Electronic Documents Act or another applicable Canadian law grants you access or correction rights, you can exercise them at privacy@basaltone.app. A complaint can also be sent to the Office of the Privacy Commissioner of Canada after you have tried to resolve the matter with us.

16. Profiling and automated decisions

The AI analysis builds a profile of your vocal progress in order to adapt its messages and its exercise suggestions. This profiling gives rise to no automated decision producing a legal or similarly significant effect: it affects neither your access to the service, nor its price, nor your rights. For any question or objection, write to privacy@basaltone.app.

17. Minors

The service is intended for people aged at least sixteen. We do not knowingly collect data about younger people. If we learn that an account was created in breach of this rule, we will take reasonable steps to close it and delete the associated data, subject to our legal obligations.

19. Changes to this policy

We update this policy when our practices, our providers or our obligations change. In the event of a significant change, we inform you in the app or by email before it takes effect where the law requires it.

20. Contacting us

For any question, request to exercise rights or complaint: privacy@basaltone.app. You can also write to us at the postal address given in section 1.