Privacy Policy | Voice2Evolve®

Last updated: August 7, 2026

This Privacy Policy explains how Voice2Evolve UG (haftungsbeschränkt) ("Voice2Evolve", "we", "us") processes personal data when you visit our website, contact us, or use the Voice2Evolve application.

1. Controller

Voice2Evolve UG (haftungsbeschränkt)
Grabenstraße 26
71254 Ditzingen
Germany

Email (privacy contact): help@voice2evolve.com

2. Website visitors

When you visit our website, we process only limited personal data that is technically necessary to operate and secure the site.

a) Website usage data

We process basic, privacy-friendly usage data, such as:

visited pages,
referrer information,
browser and device type,
country or region (derived from IP address).

This data is collected without cookies, used only in aggregated form, and not used to create user profiles or track you across websites.

b) Technical and security data

To ensure security and compliance, limited technical data may be processed, including IP-derived location, timestamps, and request metadata.

c) Contact data

If you contact us by email, we process your email address, the content of your message, and any information you voluntarily provide.

3. Application users — session data processing

If you use the Voice2Evolve application, we process the following personal data to deliver the service and evaluate its technical quality.

Data processed: voice session transcripts, session analytics and scores, account data (name, email address), and usage metadata.

Purposes and legal bases:

Delivering voice-based AI sessions and post-session analysis — contract performance (Art. 6(1)(b) GDPR)
Service quality, safety, and reliability evaluation — legitimate interests (Art. 6(1)(f) GDPR)

Recipients: Contracted providers supporting AI and voice processing, hosting and database services, authentication, email, payments, analytics and error monitoring, and security. The current provider list is available at https://voice2evolve.com/legal/subprocessors.

Retention: For direct consumer use, session transcripts are normally retained for 30 days and then anonymized or deleted by scheduled retention enforcement. Business-customer administrators may configure transcript retention between 7 and 365 days; processor-facing commitments for those customer accounts are set out in the Master Data Processing Agreement (MDPA): https://voice2evolve.com/legal/dpa

Account deletion and payment data: On a verified account-deletion request, Voice2Evolve deletes or anonymizes eligible application data. We and our payment providers may retain the minimum payment, billing, fraud-prevention, security, and legal-compliance records required or permitted by law.

Where Voice2Evolve provides the service directly to an end user, this Privacy Policy is the controller-facing processing notice for that use of the application. Where a business customer uses Voice2Evolve for its own users or candidates, Voice2Evolve also acts as a processor for that customer under the MDPA. To exercise your rights (access, rectification, deletion, restriction, objection), contact help@voice2evolve.com.

Voice2Evolve Worlds

Voice2Evolve Worlds is a separate story-driven voice practice game and consumer subscription product.

Data processed: account identifier, email address, subscription status, free-tier and paid-entitlement state, mission attempts, mission transcripts or turn records where generated, live voice-session metadata, AI-generated character responses, in-game character memories, relationship state, XP, mastery/progression evidence, unlocks, rewards, device/browser metadata, error diagnostics, and limited analytics events.

Purposes and legal bases:

Providing Worlds gameplay, live voice missions, progression, paid entitlement, and account access — contract performance (Art. 6(1)(b) GDPR)
Payment, fraud prevention, tax, accounting, subscription administration, and refund handling — contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), and legitimate interests (Art. 6(1)(f))
Security, abuse prevention, service reliability, and model-output validation — legitimate interests (Art. 6(1)(f))
Product analytics using event identifiers and aggregate usage metrics — legitimate interests (Art. 6(1)(f)), unless consent is required by local law or optional tracking is introduced

AI and voice processing: Worlds voice and mission data may be disclosed to contracted AI and voice providers listed in our Subprocessors notice. Voice2Evolve does not use Worlds voice data to identify users biometrically or build voice-identification profiles.

Retention: Worlds turn text and evidence are redacted after 30 days; free-form reports and character-memory text are redacted after 90 days. Structured progression and entitlement records are retained while the account remains active and afterward only where needed for account recovery, accounting, fraud prevention, dispute handling, or legal obligations. Voice2Evolve does not retain live audio as a standalone recording.

Deletion and data rights: If you request account deletion, Voice2Evolve will delete or anonymize Worlds personal data unless retention is required for legal, accounting, fraud-prevention, dispute, or security reasons. Deleting progression data may permanently remove access to mission history, rewards, memories, and unlocks.

Children and minors: Worlds is not intended for children under 16. If you believe a child under 16 has created an account or used Worlds without the required consent, contact help@voice2evolve.com so we can review and delete or restrict the account where appropriate.

Sign-in methods (email OTP, Google Sign-In, and Microsoft Azure Sign-In)

You can sign in either by email (OTP/magic code), with Google Sign-In, or with Microsoft Azure Sign-In.

When you use a third-party sign-in provider (for example, Google or Microsoft), Voice2Evolve may receive:

email address and email-verification status,
profile name and image,
a provider-specific account identifier, and
the identity of the sign-in provider.

We use this data only to authenticate you, create or maintain your account, secure access to the Service, and operate account-related functionality. The legal basis is contract performance (Art. 6(1)(b) GDPR), and where strictly required for security and abuse prevention, legitimate interests (Art. 6(1)(f) GDPR).

Google and Microsoft act as independent controllers for data processed within their own authentication services under their respective terms and privacy policies.

3a. If you are invited to a session by a recruiter or headhunter

This section applies if you received an invitation to a Voice2Evolve session from a recruitment agency, headhunter, or executive search firm (your "Recruiter") as part of a job application or recruitment process.

Who is the data controller for your session?

When a Recruiter uses Voice2Evolve to organize your session, the Recruiter is the Data Controller for your session data in this context. This means the Recruiter determines the purpose of the session (preparing you for an interview) and bears primary responsibility for ensuring your data rights are respected.

Voice2Evolve acts as a Data Processor on the Recruiter's behalf. Voice2Evolve processes your live voice audio during the session, transcript, and AI-generated coaching analysis on the Recruiter's instructions, in accordance with Voice2Evolve's Master Data Processing Agreement.

What the Recruiter can see

The Recruiter can see your AI-generated coaching analysis (scores, qualitative feedback, improvement areas, and recommended next steps) through their Voice2Evolve dashboard. The purpose is preparation support and debrief — the Recruiter uses this to discuss your progress with you and decide whether additional preparation sessions would be helpful.

The Recruiter has contractually committed to Voice2Evolve that it will not use your analysis as the sole basis for any employment decision (including whether to put you forward for a role, shortlist you, or reject your application), and that it will not share your analysis with the client employer without your explicit written consent.

Your AI analysis is also yours

You receive your coaching analysis as the primary recipient. There is no asymmetry: you and the Recruiter both see the same coaching report, and it is produced for your benefit. The analysis is a coaching output, not a covert score held by the Recruiter.

Your rights as a data subject

Because the Recruiter is the Data Controller for this context, your primary rights (access, rectification, deletion, objection, portability, and the right to request human review of any decision under GDPR Article 22(3)) should be directed to the Recruiter at the contact they provided in their candidate privacy notice.

Voice2Evolve will technically assist the Recruiter in fulfilling any data subject rights requests that require action on the platform.

Voice2Evolve also processes limited data for service quality, safety, and aggregated analytics as described in Section 3 above.

If you cannot reach the Recruiter, or for questions about Voice2Evolve's processing as Processor, contact: help@voice2evolve.com

Right to human review

Your coaching analysis is generated by AI. If you believe that any recruitment decision that has affected you was made solely or primarily on the basis of automated AI outputs, you have the right to request a human review of that decision. Direct this request to your Recruiter.

Supervisory authority

You may lodge a complaint with the data protection supervisory authority in the EU Member State (or UK) where you are located. Contact details for EU data protection authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

4. Purposes and legal bases — website

Purpose	Legal basis (GDPR)
Operating and displaying the website	Legitimate interests (Art. 6(1)(f))
Security and abuse prevention	Legitimate interests (Art. 6(1)(f))
Aggregated website analytics	Legitimate interests (Art. 6(1)(f))
Responding to inquiries	Contract / pre-contractual measures (Art. 6(1)(b))
Optional cookies (if introduced in future)	Consent (Art. 6(1)(a))

5. Processors and service providers (website)

We use providers for hosting, security, content delivery, and cookieless aggregate analytics. Current providers are listed in our Subprocessors notice.

Payment processing

The seller and payment provider identified at checkout may process contact, billing, address, IP/device, and payment data to complete the transaction, prevent fraud, meet legal obligations, and provide receipts or support. Voice2Evolve does not store full payment-card details. The payment provider processes data under its own privacy notice where it acts independently.

6. International data transfers

Some service providers may be located outside the EU/EEA.
Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection. Application user transfers are governed in detail by the MDPA.

7. Retention

Website-related personal data is retained only as long as necessary:

aggregated analytics data is retained without direct identifiers,
security and access logs are typically retained for up to 90 days,
contact messages are retained only as long as necessary to handle your inquiry or as required by law.

Application user retention is summarized in Section 3 above. Processor-facing retention commitments for customer accounts are set out in the MDPA (§ 15).

8. Your rights

Depending on your location and applicable law, you may have rights including:

access to your personal data,
rectification of inaccurate data,
deletion of your data,
restriction or objection to processing.

To exercise your rights, please contact us at:
help@voice2evolve.com

8a. Privacy Officer (Quebec Law 25)

In accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25), Voice2Evolve has designated a Privacy Officer responsible for overseeing compliance with applicable privacy laws:

Matthias Osmaston
Managing Director — Voice2Evolve UG (haftungsbeschränkt)
Email: help@voice2evolve.com

Quebec residents may contact the Privacy Officer directly with any questions, access requests, or complaints relating to the processing of their personal information.

8b. United States Residents

This section applies to residents of US states with applicable privacy laws, including California (CCPA/CPRA), Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comparable legislation.

Live voice audio and AI processing. Voice sessions involve live audio transmission and AI processing for the purpose of delivering the service, including speech recognition, AI-generated responses, transcription, and post-session analysis. Voice2Evolve does not use voice data to identify users biometrically or build voice identification profiles. Voice2Evolve does not retain live audio as a standalone recording; transcript and session records are handled as described above.

Categories of personal information collected. In the course of providing the Services, Voice2Evolve collects:

Identifiers (name, email address, IP address)
Usage and device data (pages visited, session metadata, browser type)
Audio and transcript data from voice sessions
Payment data (processed by the payment provider identified at checkout; Voice2Evolve does not store full card details)
Account data (account preferences, session history)

We do not sell or share your personal information for cross-context behavioral advertising or monetary consideration. We do not sell personal information as defined under the CCPA/CPRA.

Your rights. Depending on your state of residence and applicable thresholds under applicable law, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your personal information
Portability — receive a copy of your data in a structured, machine-readable format
Opt out of sale or sharing of personal information (not applicable; we do not sell or share)
Limit use of sensitive personal information beyond what is necessary to provide the Services

To exercise any of these rights, contact us at help@voice2evolve.com. We will respond within the timeframe required by applicable law. We do not discriminate against users who exercise their privacy rights.

Voice processing notice. Before a voice session begins, the Service explains that live audio will be transmitted and processed to provide the session. You must not capture or submit another person's voice unless you are legally permitted to do so.

8c. Canadian Residents

This section applies to residents of Canada. Voice2Evolve processes personal information of Canadian residents in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Quebec's Act respecting the protection of personal information in the private sector (Law 25).

PIPEDA rights. Canadian residents have the right to:

Access personal information Voice2Evolve holds about them and receive an account of its use and disclosure
Correct or annotate personal information that is inaccurate or incomplete
Withdraw consent to the collection, use, or disclosure of their personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect the ability to use the Services.
Challenge compliance — file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca if you believe Voice2Evolve has not complied with PIPEDA

To exercise PIPEDA rights, contact: help@voice2evolve.com

Breach notification. If Voice2Evolve becomes aware of a breach of security safeguards involving personal information of Canadian residents that creates a real risk of significant harm, Voice2Evolve will notify affected individuals and report to the OPC as soon as feasible in accordance with PIPEDA.

Quebec residents — additional rights under Law 25. Quebec residents have additional rights under Law 25, including:

The right to request de-indexing of personal information that is disseminated online without authorization
The right to data portability — to receive personal information held about you in a structured, commonly used technological format

Quebec residents may also file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.quebec.ca.

Language. This Privacy Policy is currently published in English, German, French, Italian, and Spanish. Voice2Evolve will not rely on an unpublished language version for consumer contracting.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The current version is always available on our website.

10. Contact

For questions about this Privacy Policy or our data practices, contact:

Voice2Evolve UG (haftungsbeschränkt)
Email: help@voice2evolve.com