Privacy Policy

Last updated: March 29, 2026

Hees Labs ("we", "our", or "us") operates the Vora mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

Information We Collect

When you use Vora, we collect the following information:

• Account Information: When you sign in with Apple or Google, we receive your name and email address (or an Apple relay email if you choose "Hide My Email").
• Diary Entries: The text content of your diary entries (titles, cleaned text, and summaries) is stored in our cloud database to enable cross-device sync.
• Voice Recordings: Audio recordings are temporarily processed for transcription and immediately deleted after processing. We do not store audio recordings.
• Usage Data: We track your monthly entry count to enforce plan limits. We do not use analytics or tracking SDKs.

How We Use Your Information

• To provide and maintain the Vora service
• To sync your diary entries across your devices
• To transcribe your voice recordings into text using OpenAI
• To generate diary summaries using OpenAI GPT
• To enforce usage limits based on your plan

What We Do NOT Do

• We do not sell your data to third parties
• We do not use your diary content for advertising
• We do not train AI models on your data
• We do not use analytics or tracking tools
• We do not store your voice recordings

Third-Party Services

Vora uses the following third-party services to function:

• Supabase: Cloud database and authentication. Privacy Policy
• OpenAI: Voice transcription and text summarization (GPT). Your voice data and transcribed text are sent to OpenAI for processing. OpenAI's API data usage policy states that API inputs are not used for training. Privacy Policy
• RevenueCat: Subscription management. Processes your purchase status only (no diary content). Privacy Policy
• Apple / Google: Authentication and payment processing. We do not have access to your payment information. Apple Privacy · Google Privacy

Data Storage and Security

Your diary entries are stored securely in Supabase (hosted on AWS). Data is encrypted in transit using TLS. Each user can only access their own data through row-level security policies. A local copy is also stored on your device for offline access.

Data Retention and Deletion

Your data is retained as long as your account is active. You can delete your account and all associated data at any time from the app's Settings screen. Upon deletion:

• Your account is permanently removed
• All diary entries are deleted from our servers
• Local data on your device is cleared
• This action cannot be undone

If you cannot access the app, you can request deletion by emailing heeslabs@gmail.com from the email associated with your account. We will process deletion requests within 7 business days.

Children's Privacy

Vora is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your Rights

You have the right to:

• Access your data (all entries are visible in the app)
• Delete your data (via Settings → Delete Account)

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at heeslabs@gmail.com.