1. Data Controller

2. General information on data processing

Voice2Symbol is an AAC support app (Augmentative and Alternative Communication) that translates spoken language into Metacom symbols. We take the protection of your personal data very seriously and handle it confidentially in accordance with applicable data protection law (GDPR).

3. Collection and storage of personal data

3.1 Speech recognition

Purpose: Converting spoken language to text for symbol display

The app supports two modes: online speech recognition (via the Android SpeechRecognizer, which decides on-device whether to process online or offline) and offline speech recognition (fully local, no data transfer). In offline mode, no audio data is sent to external servers.

Data processed:

• Audio recordings of your voice input
• Timestamps of speech recognition events

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Data transfer: In online mode, audio is processed by the Android SpeechRecognizer. Whether and to what extent data is transmitted to Google servers is determined by the operating system and subject to Google's privacy policy.

Audio recordings are not stored permanently – automatically deleted after processing

Google privacy information:

• Google Cloud Privacy Policy: cloud.google.com/privacy
• Speech-to-Text data usage: cloud.google.com/speech-to-text/docs/data-usage

3.2 Local data storage

Purpose: App functionality and personalisation

Data stored on your device:

Data type	Purpose	Storage location
Custom word-symbol mappings	Personalisation	Local
Favourites list	Quick access	Local
Settings (colour schemes, etc.)	App configuration	Local
Debug logs (optional)	Error diagnosis	Local
Licence certificate	Licence verification without internet connection	Encrypted, local

Important: This data does NOT leave your device and is automatically deleted when the app is uninstalled.

3.3 Optional feedback system

Purpose: Improving word-symbol mappings

Data processed (only when using the feedback system):

• Reported word
• Currently mapped symbol
• Suggested symbol
• Anonymised device ID
• Timestamp of the report
• IP address (anonymised)
• App version

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in app improvement)

Data transfer: Data is transmitted to voice2symbol.com and stored server-side.

Retention period: Until the feedback is processed, or up to 2 years

Voluntary: Use of the feedback system is entirely optional and can be disabled at any time.

3.4 In-App Notifications

At startup, the app fetches a small configuration file from our servers to check whether product notices or update information are available. If so, a short in-app message is displayed, which can be dismissed by tapping "OK". No personal data is transmitted in this process - the request is a simple one-way download with no user content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in informing users about own product features).

3.5 Contact form (website)

Purpose: Responding to enquiries submitted via the contact form on voice2symbol.com

Data processed:

• Name
• Email address
• Subject and message content

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / handling your request)

Retention period: Until the enquiry is fully resolved, then deleted unless statutory retention obligations apply.

Sharing: Data is not shared with third parties.

3.5 Media Mode (optional)

Purpose: Capturing internal app audio (e.g. from audiobooks or media players) for real-time symbol translation - without using the microphone.

Data processed: Internal audio stream - processed exclusively on the device (KI Offline mode). No audio data is stored or transmitted.

Legal basis: Art. 6(1)(a) GDPR (consent) - requires explicit one-time confirmation at first use.

Note: Some apps actively block this function (audio capture permission). No data leaves the device in any case.

3.6 Translation feature (Google ML Kit)

Purpose: Translating recognised text into target languages for symbol display

The app uses Google ML Kit for the translation feature. All text processing happens entirely on-device – no entered or recognised text is sent to Google servers.

Google ML Kit periodically sends anonymous usage metrics (no personal data, no user content) to Google servers for quality assurance.

Translation models are downloaded once from Google servers on first use and stored locally thereafter.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Further information: developers.google.com/ml-kit/terms

3.7 Account & Licence Data

Purpose: User account management, licence verification and device binding

Data processed:

• E-mail address (login identifier)
• Password (encrypted - original password is never stored)
• Registration date and last login
• Licence model, status and expiry date
• Anonymised device fingerprint for licence binding - no personal device data is stored

Legal basis: Art. 6(1)(b) GDPR (performance of contract)

Retention: Account data is stored for the duration of the contractual relationship. After account deletion, data is erased within 30 days, except where statutory retention obligations apply (see section 3.8).

Access log (security): Login events, device activations and package downloads are logged with an anonymised IP address and timestamp, solely for security and abuse prevention.

3.8 Payment Data & Stripe

Purpose: Processing payments for licences

Payment processing is handled by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland), acting as a data processor pursuant to Art. 28 GDPR. Your payment data (card number, bank details) is transmitted directly to Stripe and is never stored on our servers.

Data stored by Voice2Symbol (for invoicing):

• Name and e-mail address (from Stripe Checkout, for invoice)
• Billing address and country (for VAT calculation)
• Invoice amount, VAT rate, VAT amount
• Stripe transaction reference (for refund processing)
• Invoice number and date

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (legal obligation - Austrian invoice retention requirement § 132 BAO)

For Stripe's privacy policy, see: stripe.com/privacy

3.9 Cookies & Website Data

This website uses only strictly necessary cookies. No tracking, analytics, or advertising cookies are set. No third-party JavaScript or external resources are loaded on the public pages.

Cookie	Purpose	Duration	Legal basis
PHPSESSID	PHP session management: stores your login status and language preference during your visit.	Browser session (deleted when browser is closed)	Art. 6(1)(f) GDPR - legitimate interest (technically required for site functionality)
v2s_cookie_notice	Stores your acknowledgement of this cookie notice so the banner is not shown again.	1 year	Art. 6(1)(f) GDPR - legitimate interest (technically required for user-preference storage)

4.1 External Resources

All scripts, fonts, and assets on the public pages of this website are self-hosted. No external CDN, no Google Fonts, no tracking pixels or analytics tools are loaded. When you proceed to Stripe's payment page, Stripe's own privacy policy applies (stripe.com/privacy).

4. Permissions

The app requires the following Android permissions:

Permission	Purpose	Required
Microphone	Speech recognition	Yes
Internet	Speech recognition, account & licence verification, optional feedback	Yes
Storage (read/write)	Local data storage, custom symbols	Yes
Camera	Create photo symbols (optional)	Yes
Gallery access	Choose symbols from gallery (optional)	Yes
Audio settings	Suppress notification beep during speech recognition; restore audio if Do Not Disturb is active	Yes
Foreground service / MediaProjection	Required for Media Mode (internal audio capture, Android 14+)	Only when using Media Mode

5. Sharing data with third parties

Your data is only shared with third parties to the following extent:

5.1 Google (Speech Recognition & Translation)

• Purpose: Speech recognition (Android SpeechRecognizer) and on-device translation (Google ML Kit)
• Legal basis: Art. 6(1)(b) GDPR
• Privacy level: Google services are GDPR-compliant
• Note: ML Kit transmits only anonymous performance metrics - no user content. Speech recognition data handling depends on the Android OS and Google's privacy policy.

5.2 Stripe (Payment Processing)

• Purpose: Processing licence purchases
• Legal basis: Art. 6(1)(b) GDPR (performance of contract), Art. 28 GDPR (data processing agreement)
• Provider: Stripe Payments Europe, Ltd., Dublin, Ireland
• Privacy policy: stripe.com/privacy

No sharing with any other third parties! Your data is not sold, rented or shared with advertisers.

6. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Information about stored data
• Right to rectification (Art. 16 GDPR): Correction of incorrect data
• Right to erasure (Art. 17 GDPR): "Right to be forgotten"
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR): Object to processing of your data

To exercise your rights, please contact: support@voice2symbol.com

7. Data security

We implement technical and organisational security measures to protect your data:

• Encryption: Data transfer is encrypted (HTTPS/TLS)
• Access control: Restricted access to all server-side data
• IP anonymisation: Automatic anonymisation of IP addresses
• Local storage: User data stays on your device
• No tracking tools: No Google Analytics, Facebook Pixel or similar

8. Data deletion

8.1 Automatic deletion

• Local data: On app uninstallation
• Audio recordings: Immediately after speech recognition
• Unsent feedback (offline queue): After 10 days - if the device had no internet connection when a feedback was submitted, the report is stored locally and retried. After 10 days without a successful send, the local entry is deleted automatically.
• Account data: Within 30 days of account deletion request (contact: support@voice2symbol.com)
• Invoice data: Retained for 7 years (§ 132 BAO) - cannot be deleted upon request

8.2 Manual deletion

You may request deletion of your data from the feedback system at any time. Please contact us at: support@voice2symbol.com

You can also submit your deletion request directly via our online form: Request data deletion

9. Children and minors

The app is suitable for children and minors as it serves as an AAC support tool. When children under 16 use the app, this should be done with the consent of a parent or guardian.

No tracking of minors: The app does not collect personal data from children.

10. Changes to this privacy policy

We reserve the right to update this privacy policy to reflect changes in legislation or app functionality. The current version is always available at:

voice2symbol.com/datenschutzerklaerung.php

11. Contact