Privacy policy

Scope and operator

This policy covers the Starling app and this website, provided by quite awesome. Contact admin@voalice.com for privacy, support or complaints. The app requires no cloud account and has no advertising, behavioral analytics or cloud chat server.

Data used by the app

Nicknames, room names, public keys, membership grants and local network addresses establish and authenticate rooms. Nickname updates are signed by the member; room names are changed by the creator. Names are not identity credentials.

Text travels directly between members. New rooms encrypt for recipients and sign messages; synchronization nodes may retain ciphertext they cannot decrypt. Private messaging requires safety-code verification. Group recipients can read group messages and may save or capture received content.

Location, accuracy and capture time are sent only after you enable sharing in a particular room. Each room requires its own consent. Changing the visible room does not stop sharing. Turning sharing off sends a withdrawal that offline members receive after reconnecting; it cannot erase copies others saved independently.

The microphone captures only while you join a voice channel and hold the talk button. No recordings are saved. The camera reads room QR codes without saving frames. Bluetooth signal measurement is separately enabled and cannot replace GPS coordinates.

Local storage and deletion

Text history is encrypted locally by default, up to 20 rooms and 10000 messages in total. You can disable and delete it. Encryption keys are kept in system secure storage.

Room recovery is on by default and stores encrypted per-room identity keys, membership, verification results, connection credentials and recent ciphertext. Each replica retains up to 500 messages, including partition merging. Leaving a room or disabling its recovery clears its checkpoint but does not automatically delete saved text history. Checkpoints exclude coordinates and recordings.

Blocked public keys, filter words and up to 30 reports are encrypted locally. Backup hotspot passwords use system secure storage. Manage these records or clear all local data in Settings > Privacy & data. Local deletion does not erase content held by other members.

Permissions and device services

Location, camera, microphone and Bluetooth permissions are requested for the relevant features. Declining an optional permission does not disable unrelated features. Revoke permissions through system settings.

Background location needs separate consent. Android shows a foreground-service notification and iOS uses its location indicator. The system may delay or interrupt background work; forced termination cannot guarantee continued communication. Recovery never automatically starts location or the microphone.

Location, local networking, Bluetooth and secure storage use operating-system services. The app does not intentionally integrate advertising identifiers, contact-list access or behavioral tracking.

This website and contacting us

Offline app chat does not pass through this website. Visiting the website uses the internet. Cloudflare processes network data such as IP addresses, request times and browser information to deliver and protect pages, according to its privacy policy and service configuration. This website has no advertising or analytics scripts.

The operator receives your email address, message and selected attachments only when you actively email us. Do not send private keys, invitations, hotspot passwords, unrelated chats or precise location. Exporting a report to the clipboard does not submit it.

Support emails are used to handle the request, resolve issues and investigate relevant safety concerns, not for advertising. Request access, correction or deletion at the same address. Records needed for legal obligations, disputes or security may be retained; applicable reasons will be explained.

Basis, retention and regions

Optional location and audio functions depend on your active choices and device permissions. The operator processes information you voluntarily submit to respond to requests, meet applicable obligations, and protect service security or address disputes. Additional consent will be obtained where required.

Support and complaint records are retained until the request and necessary follow-up are resolved. Where an unresolved dispute or legal obligation requires retention, only necessary records are retained until that purpose ends. On a deletion request, we explain categories that must remain and why.

Website and email providers may process data outside your region. Where applicable law requires transfer safeguards or additional disclosures, the operator must meet those requirements before providing affected services.

Where applicable, you may request access, correction, deletion, restriction, a copy or portable data, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You may complain to a local supervisory authority. We do not sell personal information or share it for cross-context behavioral advertising.

Your choices and updates

Turn off sharing in each room, leave voice channels, block members, leave rooms, disable recovery or delete local records. There is no server-side account to close.

Contact admin@voalice.com to exercise applicable privacy rights or make a complaint. Provide only information needed to verify and handle your request. Mandatory protections under applicable law continue to apply.

The app is not specifically designed for children; consult the actual store age rating when published. Material processing changes will update this policy and request fresh consent in the affected feature where required.