1. Who we are
Versio (“Versio”, “we”, “us”) is a chat app that automatically translates text and voice messages between languages. The data controller responsible for your personal data is [TODO: full legal name of the owner / company, postal address, and VAT or company number if any].
For any privacy question, write to awalsia25@gmail.com.
2. Data we collect
| Category | What | Why |
|---|---|---|
| Account data | Email address, phone number (verified by SMS code when you sign up), password (stored only in hashed form), display name, and the language you chose. | To create and secure your account, let contacts find you, and translate messages into your language. |
| Text messages | The original text you send and its translation into the recipient's language, with time stamps, reply references and read status. | To deliver, translate and display your conversations. |
| Voice messages | The audio you record, its transcription, the translated text, and the AI‑generated translated audio. | To deliver voice messages and let the recipient hear them in their language. |
| Safety data | Users you have blocked, and any reports you send us. | To enforce blocks and handle abuse. |
| Push notification token | A device token issued by Apple or Google. | To notify you of new messages. |
| Minimal technical data | App version, device type and operating system, IP address and error logs kept by our hosting provider. | To keep the service secure, prevent abuse, and fix bugs. |
We do not collect your location, contacts list, photos or advertising identifiers, and we do not sell your data or use it for advertising.
3. How we use your data
- Delivering messages between you and the people you chat with.
- Translating messages automatically into each recipient's chosen language using AI services (see section 4).
- Generating a synthetic voice for translated voice messages.
- Sending push notifications when you receive a message.
- Keeping Versio safe: verifying accounts, enforcing blocks, reviewing reports and preventing spam or abuse.
- Operating and improving the service: fixing errors and keeping the app reliable.
- Communicating with you about your account, support requests or important changes.
4. AI translation and synthetic voice
To translate, the content of your messages (text, and the transcription of voice messages) is sent to an AI translation provider. For voice messages, the translated text is sent to a speech‑synthesis provider that generates the translated audio. These providers process the content only to return the translation or audio to us, under their data‑processing terms.
Messages are processed on our servers and by our AI providers in readable form so they can be translated. Access is restricted to the participants of each conversation, but Versio is not end‑to‑end encrypted.
Translations and synthetic voices are generated automatically and may contain mistakes. You can always view the original message.
5. Legal bases (EEA / UK users)
- Performance of a contract — to provide the app you signed up for (account, messaging, translation, voice, notifications).
- Legitimate interests — to keep the service secure, prevent abuse and fix bugs.
- Legal obligation — when we must keep or disclose data by law.
- Consent — for push notifications and microphone access, which you can withdraw in your device settings at any time.
6. Service providers
We share data only with providers that help us run Versio, acting on our instructions:
- Supabase — database, authentication, file storage and server functions. [TODO: confirm Supabase project region, e.g. EU (Frankfurt)]
- OpenAI — automatic translation of messages. [TODO: confirm translation provider]
- [TODO: speech‑synthesis provider, e.g. OpenAI TTS / ElevenLabs / Google Cloud TTS] — generating the AI voice for translated voice messages.
- [TODO: SMS provider used by Supabase for phone verification, e.g. Twilio] — sending sign‑up verification codes.
- [TODO: Expo Push Notifications / Firebase Cloud Messaging] and Apple Push Notification service — delivering notifications.
- [TODO: email provider (SMTP) used for verification and password‑reset emails]
We may also disclose data if required by law, to protect the safety of users, or as part of a merger or acquisition (in which case this policy will continue to apply).
7. International transfers
Some providers may process data outside the European Economic Area, for example in the United States. When that happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU‑US Data Privacy Framework.
8. Retention and deletion
- We keep your account data and messages for as long as your account is active.
- When you delete your account, your profile, messages, voice messages and notification tokens are deleted [TODO: e.g. immediately, and from backups within 30 days]. See how to delete your account.
- Messages you sent may remain visible to the other person as part of their conversation history [TODO: confirm — or state that they are removed for both sides].
- We may keep limited data longer where needed to handle an open abuse report, comply with the law, or defend legal claims [TODO: e.g. up to 90 days].
- Our AI providers keep content only as long as described in their terms [TODO: e.g. OpenAI API: up to 30 days for abuse monitoring].
9. Your rights
Depending on where you live (including under the EU/UK GDPR), you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate data;
- Erase your data — you can do this yourself by deleting your account;
- Portability — receive your data in a machine‑readable format;
- Object to or restrict processing based on legitimate interests;
- Withdraw consent at any time, without affecting earlier processing.
To exercise these rights, email awalsia25@gmail.com from the address linked to your account. We reply within 30 days. You also have the right to complain to your local data protection authority (in Italy: the Garante per la protezione dei dati personali).
10. Children
Versio is not intended for children. You must be at least [TODO: 13 or 16] years old to use it. If we learn that we have collected data from a child below this age, we will delete the account.
11. Security
We use encryption in transit (HTTPS/TLS), hashed passwords, and database access rules so that only the participants of a conversation can read it. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where required by law.
12. Cookies and tracking
This website uses no cookies, analytics or trackers. The app does not contain advertising or third‑party tracking SDKs.
13. Changes to this policy
We may update this policy as Versio evolves. We will change the “Last updated” date above and, for significant changes, notify you in the app or by email before they take effect.
14. Contact
Privacy questions or requests
awalsia25@gmail.com