Vocal Light Privacy Policy

Effective date: September 5, 2026 Last updated: September 5, 2026 Version: privacy-2026-09-05-v15

This Privacy Policy explains how the Vocal Light mobile application (the “App”), the official website at https://vocallight.com (the “Site”), and the support channel identified below access, process, store, and protect information. Vocal Light is operated by Mark Marez. “Vocal Light,” “we,” “us,” and “our” refer to the operator of the App, Site, and support channel.

1. Privacy summary

The current App is designed to work locally on your device.

No Vocal Light account is required.
The App does not contain advertising, cross-app tracking, an analytics SDK, a crash-reporting SDK, cloud sync, remote artificial intelligence, or an App-operated server.
Live microphone audio is processed on the device and is not saved as a recording by the App.
Practice measurements and visual session data are kept in memory and are not transmitted to us.
A limited set of preferences and legal-acceptance records is stored in the App’s local container.
The current App has no developer-operated network service that receives microphone samples, pitch frames, saved range values, local preferences, or consent records. The App does not intentionally transmit those categories to us or integrate an external service to receive them.
The Site has no account, advertising pixel, or audience-analytics SDK. Its hosting and security providers may process ordinary request data and use essential security technology to deliver and protect the Site.

This summary is qualified by the details below.

2. Scope

This Policy applies to the current United States version of the App, the Site, support messages sent to Vocal Light, and App Store sales information Apple makes available to us. It does not govern Apple’s App Store, iOS, your Apple Account, your device backups, your mobile carrier, or a third-party website you choose to visit. Those services are governed by their own terms and privacy notices.

The current App does not contain an account, support form, message sender, or attachment uploader. If you choose to email support, your message is processed separately from the App as described below.

3. Information the App processes

A. Live microphone audio

When you separately check the optional voice-and-range processing consent row in the initial Legal & Privacy flow or later in Legal & Privacy, deliberately start Sing or range measurement, and grant iOS microphone permission, the App accesses microphone samples to estimate pitch and create practice displays. The dedicated processing consent is distinct from the separate Terms and Liability Waiver assent controls even when presented in the same flow. The normal iOS microphone prompt is deferred until you start a microphone feature; consent or iOS permission alone does not begin capture.

The current App:

Processes microphone samples on the device;
Keeps samples in a bounded in-memory buffer;
Does not create or save a persistent recording of live microphone input;
Does not use microphone audio to identify you;
Does not create a voiceprint or biometric identifier;
Does not use microphone audio for advertising, profiling, or model training; and
Clears the working audio buffer when listening stops.

Microphone processing does not begin merely because the App is installed. iOS displays the operating-system microphone indicator while the microphone is in use.

B. Derived voice and practice information

The App derives practice information from microphone input, which may include:

Estimated frequency and MIDI pitch;
Note name, octave, and cents estimate;
Timing, confidence, stability, and note-shape information;
Estimated comfortable low and high notes;
A selected vocal-range category;
Session pitch frames and note blobs; and
Information used to display or review current practice.

This information is for practice only. It may be inaccurate and is not a medical record or professional assessment.

The separate voice-and-range opt-in covers the vocal category and comfortable low and high notes that you choose or save, live microphone audio when you start a microphone feature, and information derived from that audio. Changing or saving a range requires current consent. Those settings remain on this device and may be cleared through Legal & Privacy.

Current session frames, note blobs, and review information are held in memory. They are cleared by Full Reset and when the App backgrounds or terminates.

C. Device-local preferences

The App stores the following preferences in its local app container so they can be restored:

Selected vocal-range category and comfortable low/high notes;
Bookmarked chord progressions; and
Pitch-color display preferences and related feature settings needed to restore your choices.

If voice-and-range processing consent is current, moving the voice-category slider immediately updates the selected category and its corresponding low/high notes in local preferences. A manually entered or user-approved analyzer range replaces those saved values. The App uses the saved range to choose the register of generated reference notes and chords. If consent is not current, the App uses an unsaved default range and does not load or retain a prior saved range. If you enable custom pitch colors, the App stores the green and yellow cents thresholds locally; those values affect color display only. Saved range and other preferences remain until cleared as described in Section 7.

D. Device-local legal-acceptance history

After you affirmatively accept the Terms of Use and Liability Waiver, the App stores a local acceptance event. If renewed assent is required, the App retains the prior event and adds a new one. This device-local history may include:

Terms, Waiver, safety-notice, privacy-notice, and consumer-health-privacy-notice version identifiers;
Cryptographic hashes of the exact bundled documents;
Acceptance date and time;
Device locale;
App version and build;
Acceptance-screen identifier and version;
Provider identity; and
Affirmative records that the user confirmed adult United States eligibility and legal capacity, accepted the Terms, separately accepted the Waiver, and acknowledged the Voice and Playback Safety Notice after conspicuous links made each document available.

This device-local record allows the App to determine whether renewed assent is required and identifies what was presented on that device. The App compares the exact current identifiers and document hashes with the latest complete event. Vocal Light does not receive or independently retain this record. The “Clear Saved Practice Data” and “Delete Consumer Health Data” controls do not remove it. Deleting the App removes it from the active local App container, although Apple-managed backups may retain copies under Apple’s settings and retention behavior.

The App separately records grants and withdrawals of voice-and-range processing consent on your device. A grant records the welcome-screen or Legal & Privacy presentation used, its checkbox wording and text hash, the linked Consumer Health Data Privacy Policy version and hash, event time, and App version/build. The record also identifies the processing categories, purposes, recipients, and withdrawal controls described by the notice. The welcome presentation records its short checkbox and privacy-link label; the Settings presentation records its fuller disclosure. These records do not claim that you opened or read a linked document. Earlier records are retained, but outdated or inconsistent grants are not treated as current.

Vocal Light does not receive this history. Withdrawing consent stops microphone processing, clears the current timeline, removes saved range information, and returns playback to its unsaved default. Delete Consumer Health Data also removes the processing-consent history. It does not remove the separate Terms/Waiver acceptance history. Deleting the App removes its active local container, subject to Apple-managed backup copies.

E. Site request and security information

When you visit the Site, its hosting, content-delivery, and security providers may automatically process an IP address, date and time, requested page, referring page, browser and device information, protocol and response details, and security or bot-detection signals. The Site uses a strictly necessary security or bot-management cookie or similar technology supplied by those providers. The current Site does not use this information for behavioral advertising or cross-site tracking and does not include a marketing analytics SDK.

The Site is currently delivered using OpenAI Sites and Cloudflare infrastructure. Their independent processing is governed by their applicable notices and service terms.

F. Support communications

If you email support@vocallight.com, we receive the sender and recipient addresses, message headers, message content, delivery information, and any information you choose to include. Email-routing and mailbox providers process that information to deliver, secure, and store the message. Do not email voice recordings, vocal-range results, symptoms, passwords, payment credentials, government identifiers, or other sensitive health information. If you nevertheless include such information, those providers and Vocal Light will process it only to deliver, secure, answer, and document your request. We do not use support-message health information for analytics, advertising, profiling, or model training.

G. App Store purchase and financial information

Apple processes your purchase, payment method, receipt, tax, refund, and Apple Account information under Apple’s terms and privacy policy. The App does not receive payment-card or Apple Account credentials. Apple may provide Vocal Light with sales and financial reports that include product, territory, quantity, transaction or refund status, proceeds, and related accounting information. We use those reports for accounting, tax, fraud prevention, customer support, and legal compliance; they do not contain Vocal Light microphone audio or practice measurements.

4. Purposes of processing

The App processes information only to:

Provide live pitch, note, range, chord, and practice features you request;
Fit generated reference-note and chord registers to the comfortable range you select or approve;
Generate and display the current practice session;
Restore settings and bookmarked progressions;
Operate audio and privacy controls;
Determine whether the current legal agreements were accepted; and
Maintain App security, integrity, and reliability on the device.

The App does not use microphone or practice information to advertise to you, build a marketing profile, identify you, infer an identity, determine eligibility, or train a shared machine-learning model.

We process Site request data to deliver, secure, troubleshoot, and maintain the Site; support communications to answer and document requests; and App Store financial information for accounting, tax, refund, fraud-prevention, and legal-compliance purposes.

5. Transmission, collection, sale, and sharing

The current App contains no developer-operated network service that receives the microphone, derived practice, device-local preference, or acceptance information described in Sections 3.A through 3.D. The App does not intentionally transmit those categories to Vocal Light or integrate an external service to receive them. Site, support, and App Store information described in Sections 3.E through 3.G is processed separately through the providers and channels identified there. iOS and Apple services you separately enable, including device backup or diagnostics, may independently process device or App-container information under Apple’s policies and settings.

Apple’s App Store privacy terminology generally does not treat information processed only on the device as “collected” for the App Privacy label. Some state laws use “collect” more broadly to include accessing, deriving, or processing information even when it remains on device. This Policy describes both the on-device processing and the absence of off-device transmission.

Vocal Light does not:

Sell or rent personal information or consumer health data;
Share personal information or consumer health data for cross-context behavioral advertising;
Disclose microphone audio, voice measurements, or practice information to data brokers, advertisers, analytics providers, or artificial-intelligence providers;
Use tracking technology to follow you across apps or websites; or
Offer a financial incentive in exchange for personal information.

We do not permit third parties to collect personally identifiable information or consumer health data about your activities over time and across unrelated websites or online services when you use the App or Site.

6. Third-party software and Apple services

The App uses Tonic 2.1.0 for local music-theory calculations. Based on the current source audit, that dependency does not add networking, analytics, advertising, tracking, or persistence to the App. Its open-source license is included in the App.

Apple may independently process App Store transaction, device, diagnostics, crash, or usage information under Apple’s terms and privacy policy. Vocal Light does not control Apple’s independent processing. Apple may provide the limited sales and financial reports described in Section 3.G.

The current App does not integrate a third-party processor to receive Vocal Light microphone audio, voice measurements, local practice preferences, or the local acceptance record. Apple may independently process device or App-container information through services you separately enable under Apple’s policies and settings.

Site hosting, content-delivery, and security providers process Site request and security information. Email-delivery and mailbox providers process support communications. We use those providers only for the operational purposes described in this Policy and do not authorize them to use Vocal Light information for our behavioral advertising.

7. Retention and deletion

The current retention design is:

Microphone samples: held only in a bounded memory buffer and cleared when listening stops;
Session frames and note blobs: held in memory and cleared on Full Reset, backgrounding, or termination;
Practice preferences and bookmarks: retained locally until cleared through Legal & Privacy or until the App is removed;
Legal-acceptance history: retained locally until the App is removed or iOS otherwise clears the App container;
Voice-and-range processing consent history: retained locally until you use Delete Consumer Health Data, remove the App, or iOS otherwise clears the App container;
Transient cache or temporary data: restricted to the App’s own cache/temporary namespace and cleared during defined cleanup events;
Site request and security information: retained by the applicable hosting and security providers under their operational and legal retention practices;
Routine support communications: normally retained for no more than 24 months after the last activity, unless a shorter deletion request applies or a longer period is reasonably necessary for security, a dispute, an incident, insurance, or a legal obligation;
Sensitive health information sent despite our warning: removed from the active support mailbox within 30 days after the request or incident is resolved or triaged, unless preservation is reasonably necessary for the user’s request, safety, a dispute, insurance, or law; provider backup copies may persist until overwritten under provider retention practices; and
Sales, refund, tax, and accounting records: retained for the periods reasonably necessary to administer the App and satisfy tax, accounting, fraud-prevention, and legal obligations.

To delete the current pitch session, saved voice-range information, and device-local voice-and-range consent history, open Legal & Privacy and select Delete Consumer Health Data. This does not remove the separate Terms and Liability Waiver acceptance record. Clear Saved Practice Data additionally clears supported display preferences and bookmarks but does not remove the acceptance record or voice-and-range consent history. To remove the active local App container, including the legal-acceptance history, delete the App. Apple-managed device or cloud backups may retain copies under Apple’s settings, policies, and backup-retention behavior.

Vocal Light has no server copy of the microphone, practice, preference, or local acceptance information described in Sections 3.A through 3.D.

To request deletion of a support communication or other information Vocal Light actually possesses, use the contact in Section 15. We may retain information when law permits or requires it, including records needed for tax, accounting, security, dispute, or compliance purposes.

8. Your controls and choices

You can:

Leave the optional voice-and-range processing row unchecked during initial Legal & Privacy review and use the unsaved default range;
Later allow voice-and-range processing from Legal & Privacy, where a fuller disclosure is shown;
Withdraw voice-and-range processing consent in Legal & Privacy;
Use Delete Consumer Health Data to clear the current session, saved voice-range information, and voice-and-range consent history;
Decline microphone permission;
Stop live listening or range measurement;
Revoke microphone permission at any time in iOS Settings;
Use Full Reset to clear the current in-memory session;
Use Clear Saved Practice Data to clear supported local preferences and bookmarks;
Delete the App to remove its active local container, subject to any Apple-managed backup copies;
Avoid sending optional information in a support email; and
Request access, correction, or deletion of information that Vocal Light actually possesses, subject to applicable law.

Leaving processing consent unchecked or withdrawing it prevents changing or saving a range, live pitch, and measured-range features from working. Reference notes and chords remain available using an unsaved default range. Declining or revoking iOS microphone access prevents microphone features but does not by itself revoke consent for a manually selected range. Choosing a protected feature while processing consent is off directs you to Legal & Privacy instead of presenting a second custom consent screen.

9. Consumer health data

Some laws may classify voice measurements, range information, or related inferences as consumer health data. Vocal Light provides a separate Consumer Health Data Privacy Policy in the App’s Legal & Privacy screen. That policy explains the categories processed, sources, purposes, disclosures, rights, deletion controls, and request process for this information.

10. Security

The App uses device-local processing, App-container isolation, bounded memory, and data minimization to reduce privacy risk. The Site uses managed hosting, encrypted HTTPS transport, and provider security controls. Support communications rely on the security of the participating email systems. No method of storage, transmission, or software operation is perfectly secure. Device compromise, operating-system behavior, backups, network interception, provider compromise, or a person with access to your device or mailbox may affect information.

If we discover a security incident affecting information we possess, we will investigate it and provide notices required by applicable law.

You are responsible for securing your device, Apple Account, passcode, backups, and accessories.

11. Site cookies and browser signals

The current Site uses a strictly necessary security or bot-management cookie supplied by its infrastructure providers. It does not use advertising cookies or cross-context behavioral advertising. Because the Site does not track visitors across unaffiliated sites for advertising, it does not change its behavior in response to a browser “Do Not Track” signal. We will honor a legally required browser-based opt-out signal if a future Site practice makes that signal applicable.

12. Adults only

The App is offered only to adults age 18 or older. It is not directed to children, and the App does not knowingly transmit information about a child to Vocal Light. If you are under 18, do not use the App.

13. United States-only availability

The App is offered only in the United States. This Policy is written for that offering. If Vocal Light becomes available in another country, this Policy may be supplemented or replaced as required for that location.

14. Changes to this Policy

We will post material changes at this URL and update the effective date and version identifier. Before collecting additional consumer-health-data categories, using them for additional purposes, or disclosing them to additional recipients, we will provide any required notice and obtain any required affirmative consent. No revision applies retroactively where applicable law prohibits it.

15. Contact

For a privacy request, appeal, or question, email support@vocallight.com with the subject Privacy Request, or visit https://vocallight.com/support. Describe the request and the information or interaction involved. We may take reasonable steps to authenticate a request before acting.