Privacy Policy

Last updated: November 26, 2025

Introduction

At Mexar, the publisher of the Voical application, we place great importance on protecting your privacy and personal data. This privacy policy explains what data we collect, why we collect it, and how we use it.

By using our website voical.app and our mobile application Voical, you accept the practices described in this policy.

Data Controller

The data controller responsible for your personal data is:

Mexar

Registered office: Paris, France

Email: privacy@voical.app

Data Collected

Data you provide to us

  • Account information: email address during registration
  • Profile data: age, gender, weight, height, nutritional goals (optional)
  • Food data: meals recorded via voice command or manual entry
  • Progress data: weight history, goals achieved

Data collected automatically

  • Technical data: device type, operating system, app version
  • Usage data: features used, usage frequency (anonymized)
  • Location data: country only (for regional preferences)

Voice data

When you use Voical's voice recognition feature:

  • Your voice commands are processed to extract nutritional information
  • Raw audio recordings are not retained after processing
  • Only text data resulting from transcription is stored

Purposes of Processing

We use your personal data to:

  • Provide and maintain the Voical service
  • Calculate and track your caloric and nutritional intake
  • Personalize your goals and recommendations
  • Improve our service and develop new features
  • Send you notifications related to your account and the service
  • Respond to your support requests
  • Ensure the security of our service

Data Recipients

Your data may be shared with:

  • Service providers: hosting (Supabase, Vercel), payment processing (Apple App Store)
  • Analytics services: Plausible Analytics (anonymized, without personal data)
  • Authorities: in case of legal obligation

We never sell your personal data to third parties.

International Transfers

Some of our data may be processed outside the European Union, particularly in the United States (Vercel) and Singapore (Supabase).

These transfers are carried out in compliance with GDPR, using:

  • European Commission standard contractual clauses
  • European Commission adequacy decisions

Data Retention

We retain your personal data according to the following periods:

  • Account data: as long as your account is active, then 3 years after deletion
  • Food data: as long as your account is active
  • Billing data: 10 years (legal requirement)
  • Security logs: 1 year

You can request deletion of your data at any time through the app settings or by contacting us.

Your Rights

Under the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to restriction: restrict the processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw consent: withdraw your consent at any time

To exercise these rights, contact us at privacy@voical.app.

You also have the right to lodge a complaint with your local data protection authority. For EU residents, you can contact your national data protection authority.

Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Secure authentication
  • Restricted access to personal data
  • Regular security audits

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

In case of substantial changes, we will notify you by email or via a notification in the app.

Contact

For any questions regarding this privacy policy or your personal data:

We are committed to responding to your request within 30 days.