Privacy Policy

This Privacy Policy explains what information the TTS App collects, how it’s used, and the choices you have.

Last updated: 2026-02-24

1. Information We Collect

Account information: If you register, we store your email address and profile fields you provide (such as display name).

Authentication data: We use authentication to manage identity (including Google sign-in if you choose it). This includes identifiers required to operate authentication securely.

Usage and account data: We store your credit balance, character usage statistics, and operation history (for example, filenames, character/byte counts, timestamps, and status).

Submitted content: To provide the service, our backend receives the text you submit for synthesis and processes it to generate audio.

Custom voice audio: If you create a Custom Voice, we collect audio recordings you upload/record (consent and reference samples) to generate a voice cloning key for your account.

Security and anti-abuse data: We may collect and store security signals such as IP addresses, rate-limiting counters, device fingerprint data (used for anonymous trial enforcement), and normalized/hashed email signals to prevent abuse of trials and promotional credits.

2. How We Use Your Data

Service delivery: To convert text to audio, provide downloads, and manage your credit balance and operation history.

Security: To protect our endpoints from abuse using app check (reCAPTCHA), rate limiting, and anti-fraud/anti-abuse checks.

Custom voices: Your custom voice samples are used to generate a unique voice cloning key associated with your account.

Transactions: Payments are processed by Stripe. We store related records used to credit your account and show transaction history.

Feedback and support: If you choose to send us a message, bug report, or feedback, we may process your submission using a third-party form provider (Tally.so). Your submission is used to respond to you, diagnose issues, and improve the service.

3. Storage, Downloads, and Retention

Generated audio storage: Generated audio files are stored in Google Cloud Storage. The app provides download access via signed URLs.

Signed URL expiry: Based on current implementation, signed download links expire after approximately 24 hours. After expiry, the link will no longer work.

Operation history retention: To manage storage, we automatically keep only a limited number of recent operations. Based on current implementation, we keep up to 50 most recent short audio operations and up to 50 most recent long audio operations. The UI may display fewer entries (for example, showing only the most recent 20 long operations).

Security records retention: Certain security/anti-abuse records (for example, registration history signals) may be retained for longer periods, including after account deletion, to prevent fraud and abuse.

4. Third-Party Service Providers

We use third-party infrastructure to operate the app:

Google Cloud Platform & Firebase: Hosting, database, authentication, and audio synthesis APIs.

Stripe, Lemon Squeezy: Payment processing and billing. We do not store your full credit card details on our servers.

reCAPTCHA Enterprise: Used via Firebase App Check to help prevent automated abuse.

Tally.so: Used to collect and process user-submitted messages and feedback. Depending on what you submit, this may include the content of your message and contact details you provide. We may also include limited technical context (such as your user ID, email address, page URL, and basic device/browser information) to help us investigate issues.

5. Your Rights and Controls

Access: You can view your credit balance, usage, and operation history in the “My Account” page.

Deletion: You can delete your account via “My Account”. This triggers cleanup of your primary user data (profile, credits balance, operations, custom voices, and related Firestore records such as Stripe extension customer data and credit transactions), with the exception of certain anti-abuse/security records.

Anti-abuse exception: To prevent abuse of free trials and promotional credits, we preserve registration history records (for example, email hashes, device fingerprints, and IP records) even after account deletion.

6. Cookies

We do not use cookies for authentication or analytics.