Voxelle is built privacy-first. There are no ads, no trackers, and no accounts, and almost everything you do stays on your device.
This page explains the few things that do leave your device, why, and what your choices are.
Voxelle is an iOS app that turns free, volunteer-read public domain audiobooks into a polished listening experience. It is a product of Thummin LLC (United States). You can reach us at support@voxelle.app.
The great majority of your data never leaves your iPhone or iPad. We have no server-side copy of any of it:
This is stored locally using Apple's on-device frameworks (SwiftData and app preferences). If you delete the app, this data is gone with it. Because it lives only on one device today, it does not automatically move to a new device: you can export a copy from Settings to carry it over.
When you buy a book, payment is handled entirely by Apple. We never see or store your card number, billing address, or Apple ID. To confirm that you own a book, the app sends Apple's cryptographically signed purchase receipt to our server, which verifies it with Apple. That receipt is tied to the purchase, not to your name or email.
To decide which titles to enhance next and to improve the app, we collect a small amount of anonymous signal on our server:
These are keyed to a random install identifier that the app generates on your device and stores in the iOS Keychain. It is not your name, email, Apple ID, phone number, or advertising identifier, and it cannot be traced back to you. Its only purpose is to avoid counting the same install twice.
Free public domain recordings stream directly from the Internet Archive (archive.org) to your device. As with visiting any website, the Internet Archive receives your device's IP address and which files you play, governed by their own privacy policy. Enhanced (purchased) audio streams from our own storage on Cloudflare.
Book cover images are fetched from Open Library and from our cover delivery network. These are ordinary image requests and carry no information about you beyond a standard web request.
When the app crashes or freezes, iOS prepares a diagnostic report using Apple's own MetricKit framework. The app forwards a compact version of that report to our server, which passes it to our error monitoring service so we can find the fault and fix it. The report contains the kind of failure, the app and iOS version, the class of device, and the technical trace of what the code was doing when it failed.
It contains no book titles, no file paths, and nothing you have written or saved. Like the signal above, it is keyed to the random install identifier and never to your name or account. There is no crash reporting library inside the app itself: the report comes from iOS, and we relay it.
| Data | Location |
|---|---|
| Library, positions, bookmarks, quotes, stats, preferences | Your device only |
| Purchase verification receipt | Verified with Apple; not retained as personal data |
| Anonymous demand, requests, ratings, and feedback | Cloudflare R2 (US), keyed to a random install id |
| Crash and performance diagnostics | Our server, relayed to our error monitoring service; keyed to a random install id |
| Enhanced audio you have purchased | Cloudflare R2 (US) |
All data in transit uses HTTPS/TLS encryption.
| Data | Retention |
|---|---|
| On-device data | Until you delete it or uninstall the app |
| Anonymous demand, requests, ratings, feedback | Retained to inform which titles we enhance; deletable on request (see §7) |
| Service | Purpose | Privacy policy |
|---|---|---|
| Apple | App distribution and in-app purchases | apple.com/legal/privacy |
| Cloudflare | Enhanced audio storage and delivery; anonymous signal storage | cloudflare.com/privacypolicy |
| Vercel | Serverless API hosting | vercel.com/legal/privacy-policy |
| Internet Archive | Hosts and streams the free public domain recordings | archive.org/about/terms.php |
| Open Library | Book cover images | openlibrary.org (Internet Archive policy) |
Because we hold almost no information about you, exercising your rights is simple:
US residents (including under the California CCPA) have the right to know what we collect, to request deletion, and to opt out of any sale of personal information. We do not sell personal information. Users in the EEA and UK additionally have the rights to access, correct, restrict, object, and to lodge a complaint with a supervisory authority. To exercise any right, email us with the subject line "Data Request" and we will respond within 30 days.
Voxelle is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information in error, contact us and we will delete it promptly.
We will post any material changes to this page and update the effective date above. Continued use of Voxelle after changes are posted constitutes acceptance.
Voxelle, a product of Thummin LLC
Email: support@voxelle.app
Web: voxelle.app