Privacy Policy

Your voice

Calls are sent directly between the two participants where the network allows it. When a direct connection cannot be established, audio is passed through a relay operated by Cloudflare so the call can continue. In both cases the audio is encrypted in transit.

We do not record your calls. Audio is not written to our servers, and no copy is kept after a call ends. Transcription is off by default; if you turn it on in your settings, the resulting transcript is stored against your account and is deleted when you delete your account.

What we collect

Account

• Your email address and username.
• Your password, stored only as a salted PBKDF2-SHA512 hash with 100,000 iterations. We never store or see the password itself.
• Your date of birth is not stored. It is sent once at registration so the server can check you are 18 or over, used for that decision, and discarded. All we keep is a timestamp recording that the check passed.

Sessions and security

• We do not store your IP address. Where we need to tell devices apart — for rate limiting, for spotting duplicate accounts, and in the security log — the address is passed through a keyed HMAC-SHA256 and only that irreversible digest is kept. If the key is not configured, nothing is stored at all rather than something that merely looks anonymous.
• Your browser's user agent string, truncated.
• A device fingerprint, used to detect ban evasion and account farming.
• Security events such as sign-ins, failed sign-ins and bans, with the hashed address above.

Using the service

• Records of matches and calls — who was paired with whom, when, how long the call lasted and how it ended.
• Ratings and reviews you give and receive, and your reputation score.
• Who you have blocked, and reports you have made or that have been made about you.
• Aggregate counts such as total calls, completion rate and average duration.

Verification, if you use it

The optional verification flow produces biometric data: a numerical face embedding derived from a selfie, and a voice print derived from a short recording, along with quality and anti-spoofing scores. These are sensitive. They are stored against your account, are never shown to other users, and are hard-deleted when you delete your account. If you do not use verification, none of this is collected.

Bot screening and analytics

Registration and sign-in run a Cloudflare Turnstile challenge to keep automated signups out. Cloudflare processes the challenge and tells us only whether it passed.

The site loads Cloudflare Web Analytics, which reports page views and basic performance timings. It does not use cookies for tracking and does not build a profile of you across other sites.

Who processes your data

We do not sell your data and we do not share it for advertising. It is handled by the providers that run the service on our behalf:

• Cloudflare — serving the site, bot screening, the call relay, and analytics.
• Fly.io — the application server that handles sign-in, matching and call signalling.
• Neon — the PostgreSQL database holding the records above.
• Upstash — Redis, holding short-lived state such as who is currently online, who is in the queue, and rate-limit counters.

We may also disclose data where the law requires it, or to investigate conduct that breaks the Terms of Service.

What other people can see

Someone you are matched with sees your username, your reputation score and any verification status. They do not see your email address, your date of birth, your location, your network address or your device details. Voice Match has no public profiles and no directory of users.

Deleting your account

You can delete your account from your settings. You confirm by typing your username, and the deletion cannot be undone. It permanently removes:

• your voice prints, face embeddings and verification records;
• your call transcripts, if you had turned transcription on;
• your device fingerprints and your security log;
• your sessions, which signs you out everywhere; and
• the blocks you made and the blocks made against you.

Your email address, username and password hash are then cleared and replaced with an anonymous placeholder. The account row itself is kept in a blanked state so that other people's call and review history does not break — those records refer to a placeholder, not to you. Presence and queue entries in Redis are dropped at the same time.

Getting a copy of your data

You can export your data from your account settings at any time, and you can view the list of people you have blocked. Depending on where you live you may also have rights to correct or restrict what we hold; email contact@speakeaseapp.com and we will act on the request.

How long we keep things

Account records last until you delete your account. Sign-in sessions expire after seven days. Presence and queue state is short-lived and disappears when you go offline. Match, call and review records are kept while the account exists because they support reputation and the handling of reports.

Children

Voice Match is for adults 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete the account and its data. If you believe a child has registered, email contact@speakeaseapp.com.

Changes and contact

We will update this policy as the service changes, and the date at the top shows when it last changed. For anything about your data, or to exercise a right described here, email contact@speakeaseapp.com. See also the Terms of Service.