Privacy Policy

Last updated: November 9, 2026

This policy explains how Vozyx handles personal data for its single-player AI Roleplay World experience: account access, fictional character conversations, story progress, purchases, and safety review.

Vozyx is operated by ZYXIR PTE. LTD. (company registration number 202544810N), 60 Paya Lebar Road #04-50 Paya Lebar Square, Singapore 409051, which is responsible for the personal data described in this policy. Privacy contact: privacy@vozyx.com.

1. Information We Handle

Account and profile data: the email address you use to sign in; if you use Sign in with Apple on iPhone, your Apple sign-in identifier and any name or email Apple shares with us; your nickname, avatar, date of birth, gender, country, and language preferences. Date of birth is used to check the 18+ requirement.
Email verification and credentials: When you sign in, appeal a decision, or verify an account-deletion request by email, we process your email address, the one-time code you submit, delivery and verification results, and related security records. Legacy account identifiers may remain where applicable. Where password sign-in is enabled, we also handle your username and password credentials. Stored passwords are protected hashes, not plaintext. One-time codes expire and are invalidated after successful verification.
Story data: Messages you send to characters, generated and authored replies shown in your story, relevant memories and summaries, choices, relationships, world state, and story progress.
Safety and support data: Reports, appeals, support requests, relevant conversation context, and records of safety decisions. Encrypted snapshots of the material used for AI generation and its results support investigation of reported content.
Purchase data: Store transaction identifiers, receipts or purchase tokens, the account associated with a purchase, entitlement and allowance records, and refund or revocation status. Payment details you provide to the store are handled by that store.
Service and consent records: Device and app information, device or installation identifiers, IP addresses, request and error logs, access times, and records of the documents and versions you accepted or declined. Product events use a pseudonymous analytics identifier.

2. Why We Use Data

We use data to authenticate you, deliver and check requested one-time verification codes, check eligibility, save your story, generate character replies and story summaries, maintain message allowances, verify purchases and restores, handle reports and appeals, protect the service from abuse, investigate faults, and communicate service information. We use limited product events to understand how the story experience works. Model training is a separate optional purpose described below.

3. AI Processing and Your Choices

Third-party AI processing can include your recent messages, relevant conversation history and memories, character information, story state, and text needed for safety classification or summarisation. These materials may contain personal information if you type it into a conversation. Avoid including information about yourself or someone else that is unnecessary for the story.

Before using AI features, you must separately review the AI disclosure and accept the AI Processing Consent. Our AI provider is OpenAI; read those documents for the processing details. When preparing material for the AI provider, we do not add your email address, legacy phone number, sign-in identifiers, date of birth, payment records, or device identifiers from your account records.

Training consent is separate, optional, and off by default. We do not authorize use of your conversations for model training under processing consent alone. If you opt in, the training-consent document describes the permitted data and purpose. You can withdraw that consent in Settings to stop future use; withdrawal cannot undo training already completed. Declining training does not remove ordinary story access.

You can also withdraw AI processing consent in Settings. This stops access to AI story features while leaving your account and deletion options available.

4. Recipients and Processing Locations

Data is handled by service providers needed for account sign-in, email verification, hosting and storage, AI processing, payments, and service support, and by authorized people reviewing reports or support requests. The data sent depends on the task: Email delivery providers receive your email address and verification message to deliver a requested code, story context is used for AI generation, and store purchase data is used for payment verification. We do not sell your personal information.

Our application data is hosted in Singapore. Some service providers, including our AI provider, may process data in other countries.

Data may need to be disclosed to comply with a legal obligation or address credible threats, fraud, or abuse. Before deciding whether to use AI features, review the separate AI Processing Consent for information about the provider, processing locations, and processing arrangements. For questions about recipients, locations, or applicable international-transfer safeguards, contact privacy@vozyx.com.

5. Storage and Retention

Account and story records: We keep the data needed to provide your account and saved story while they remain active. Archived worlds can still contain saved story data; archiving is not deletion.
Product analytics: Events are subject to a rolling 400-day retention period. These analytics events exclude message content, prompt text, character replies, email addresses, phone numbers, and dates of birth. Account deletion also triggers removal of associated analytics events.
Safety and generation evidence: Sensitive evidence and exact generation snapshots are encrypted and access-controlled. Their deletion depends on the applicable retention decision and any legal hold.
Purchase, consent, and legal records: Some records may need to be retained separately to meet applicable legal obligations, resolve a dispute, or document a consent or deletion request. Records retained for these reasons are limited to that purpose.
Backups: Database backups are kept for no more than 30 days and are then deleted. Data erased from our live systems, including after account deletion, can remain in a backup until that backup expires, at most 30 days later.

Deletion across account, story, purchase, and uploaded-file systems can complete at different times. Account access ending does not mean every record has already been erased. Records retained for a legal reason may have separate retention periods, and backups expire within 30 days as described above. Contact us for the status and scope of a deletion request.

6. Deletion and Other Requests

You can request account deletion through Settings or at https://vozyx.com/account-deletion. The deletion process disables the account and removes or de-identifies associated account, story, and uploaded-file data, subject to justified retention. You can also contact privacy@vozyx.com to request deletion or ask about your data, including if you cannot access the app. We may need to verify that the request concerns your account.

Subject to applicable law, you may request access, correction, a portable copy, restriction, or objection to processing, and complain to the relevant data-protection authority. You can withdraw optional consent without deleting your account. For eligible moderation decisions, use the available appeal process or contact us.

7. Adults Only

Vozyx is for people aged 18 or older. We require a date of birth and restrict access where the age requirement is not met. If you believe an underage person has an account, contact privacy@vozyx.com so we can investigate and take appropriate action concerning the account and its data.

8. Changes and Contact

We will communicate material changes through the app and request renewed consent where required. We record the document version associated with your consent. For privacy questions or requests, contact privacy@vozyx.com. For other questions, contact support@vozyx.com.