Privacy Policy

1. The short version

• Audio is processed, not kept. Each sentence is streamed live to Google Gemini for interpretation and is not retained by us. The spoken translation is produced by the voice built into your device.
• We store a minimal account. A user ID, the email address your sign-in provider gave us (Apple lets you hide it), and your interpreting-time ledger.
• History stays on your device. Past conversations are saved in the app on your phone and are never uploaded.
• Payments go through Apple. We see a signed receipt, never your card.
• Deletion is one tap. More options → Delete account removes your account and its ledger. See section 8.

2. Who is responsible

LinkVoice is published by MissingLayer B.V., a company registered in the Netherlands (KVK 97964840), Korte Lijnbaanssteeg 1/4570, 1012 SL Amsterdam. For the purposes of the EU and UK General Data Protection Regulation, MissingLayer B.V. is the controller of the personal data described here. Contact details are in section 16.

3. Your voice and the conversation

Interpreting

When a conversation is running, the microphone audio of the sentence being spoken is streamed in real time to Google's Gemini Live API. Gemini identifies the language, transcribes the sentence and returns the translation. To keep translations coherent, the text of the last six turns of the current conversation is sent along as context. The app then reads the translation aloud using the voice built into your device; no cloud voice is used.

The connection is made directly from your device to Google, using a short-lived token that our server issues for one session at a time. Our servers never receive, relay or store your audio, transcripts or translations. Google processes the audio to provide the service under the terms that apply to paid use of the Gemini API, which state that Google does not use such data to train its models. Read Google's own terms at ai.google.dev/gemini-api/terms.

Speech is sent only while a conversation is active. The app prepares to listen when you open the screen, but no audio leaves the device until you tap Start, and none is sent after you stop.

Other people's voices

An interpreter necessarily hears both sides of a conversation. You are responsible for telling the other person that LinkVoice is interpreting, where that is expected or required.

4. Your account

LinkVoice needs an account because interpreting time is measured on our server. You sign in with Apple or Google; we never see a password. Our authentication service, Supabase, stores:

• a random user ID,
• the email address the provider shares (with Apple you may choose "Hide My Email", in which case we receive a private relay address),
• which provider you used and the provider's identifier for you,
• the times you signed up and last signed in.

The session token that keeps you signed in is stored in your device's Keychain and is removed when you sign out.

5. Interpreting time and purchases

Each interpreted turn is charged in seconds against your balance. The ledger holds your remaining credit seconds, your subscription tier and period, and one row per charge (the number of seconds and the time). It does not record what was said, which languages were used, or how long the whole conversation lasted.

Purchases are made through Apple's App Store. When you buy a subscription or credit pack, the app sends Apple's signed transaction to our server, which verifies it with Apple and credits your time. We keep the transaction identifier, product identifier, expiry date and environment so that renewals, restores and refunds are applied exactly once. Apple also notifies our server directly about renewals and refunds. We never receive your name, address or payment details from Apple.

6. What stays on your device

• Conversation history. Saved conversations and captions are stored in the app's private storage on your device. They are never uploaded, and you can delete them from the History screen. They are also removed when you delete the app.
• Settings. Selected languages, mode, engine and voice preferences.
• Diagnostics. The optional diagnostics panel shows timing and recognition details for the current session only, on screen, and is not sent anywhere.
• Local time counter. A fallback minute counter used when you are signed out.

7. Who processes data for us

These providers act on our instructions as processors, except that Apple and Google act as independent controllers when you use their sign-in services. We do not sell personal data and do not share it with anyone else, except where the law requires it.

8. Retention and account deletion

Audio and transcripts are not retained by us at any point. Account and ledger data are kept for as long as your account exists. Transaction records are kept for as long as the account exists so that refunds can be honoured, and may be retained afterwards where tax or accounting law requires it, in a form no longer linked to your sign-in.

Deleting your account in the app

Open More options (the ⋯ button) and choose Delete account. After you confirm, the app asks our server to delete your sign-in identity, your balance, your usage events and your transaction records. Deletion takes effect immediately and cannot be undone. Any unused interpreting time is lost. The app returns to the sign-in screen and removes the session from your Keychain.

Deleting the account does not cancel an App Store subscription, because Apple manages subscriptions. Cancel it in your iPhone's Settings → Apple ID → Subscriptions, before or after deleting the account. If you signed in with Apple, you can also remove LinkVoice from "Sign in with Apple" in the same Settings screen.

Conversation history on your device is not affected by account deletion; delete it from the History screen or by removing the app.

Without the app

If you can no longer open the app, email admin@missinglayer.com from the address you signed in with, and we will delete the account within 30 days.

9. No advertising, analytics or tracking

LinkVoice contains no advertising, no analytics or crash-reporting SDK, and no tracking identifiers. We do not build profiles and we do not track you across other apps or websites. The app's only network connections are those listed in section 7, plus the App Store itself.

10. Permissions on your device

• Microphone — required to hear the conversation. You can revoke it in Settings at any time; the app then cannot interpret.

LinkVoice does not ask for speech recognition, location, contacts, photos or notifications. The spoken translation uses the system voice, which needs no permission.

11. Legal bases and international transfers

We process your data to perform our contract with you (providing interpreting, accounts and purchases), to comply with legal obligations (accounting records), and where necessary for our legitimate interests in keeping the service secure and preventing abuse of the free allowance. The processing of audio by Google happens only while a conversation you started is running.

Google, Supabase, Apple, Formspree and Cloudflare may process data in the United States and other countries outside the European Economic Area. Where they do, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, as provided in each provider's data-processing terms.

12. This website

These pages are plain static files. They set no cookies, store nothing in your browser, run no scripts and load their assets from linkvoice.site itself. Cloudflare hosts the files and processes standard connection metadata (such as IP address, page requested and time) for delivery, security and operation, under its own privacy policy.

13. Children

LinkVoice is not directed at children under 13, and under 16 in the European Union, and we do not knowingly create accounts for them. If you believe a child has created an account, contact us and we will delete it.

14. Your rights

Depending on where you live, you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. Most of these you can exercise yourself: the app shows your balance and tier, and deletion is described in section 8. For anything else, contact us. You may also complain to your data-protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

15. Changes to this policy

We will update this policy when the app or the law changes. The effective date at the top identifies the current version. For a material change in how your data is used, we will tell you in the app or through App Store release notes before it takes effect.

16. Contact