Privacy Policy

Spokeninbox turns the email newsletters you send it into audio you can listen to. This policy explains exactly what we collect, why, who processes it, and the choices you have. We kept it plain on purpose: the app is built so there is very little to hand over in the first place.

1. Who we are

Spokeninbox (“Spokeninbox,” “we,” “us”) provides the Spokeninbox iOS app and the service behind it. When you use the app, we act as the controller of the limited personal data described below. You can reach us any time at support@spokeninbox.com.

2. What we collect

We collect only what the service needs to work:

• A device identifier. The first time you open the app, it generates a random secret on your device. We store only a one-way SHA-256 hash of it, which acts as your account key. We never receive or keep the raw secret, and it is not tied to your name, phone number, or Apple ID.
• Your inbound address. We generate a unique address for you, such as you@in.spokeninbox.com, so newsletters have somewhere to arrive.
• Email content you send us. When a newsletter or forwarded message arrives at your Spokeninbox address, we store it so we can read it aloud: the sender, subject, received time, and the message body (HTML and text), plus a cleaned-up transcript and the detected language. The original message is also retained in raw form.
• Basic usage counts. We keep a per-day count of how many audio segments you generate, so we can apply fair-use limits. This is a number, not a log of what you listened to.
• Anonymous usage events. To understand how the app is used and where it breaks, we send a small set of anonymous events (such as opening an email, pressing play, or an error occurring) to a privacy-preserving analytics provider. These are aggregate counts tied only to a random, app-generated identifier — never your email content, sender, subject, or address. See “Analytics” below.

3. How we use it

We use the data above only to operate the app:

• To receive newsletters at your address and show them in your inbox.
• To extract clean, readable text from each message and convert it to speech when you press play.
• To recognize your device on future requests so your inbox and settings load.
• To apply fair-use limits and keep the service running reliably.

We do not sell your data, we do not use it for advertising, and we do not use the content of your newsletters to build any profile of you.

4. Your real inbox stays yours

Spokeninbox never connects to Gmail, Outlook, or any existing mailbox. There is no OAuth step and no access to accounts you already have. The only email we ever see is what you deliberately send to your Spokeninbox address.

5. Service providers

A small number of trusted providers process data on our behalf, under their own security and privacy commitments:

• Cloudflare — hosts the service, routes inbound email to your address, and stores message data. Servers may be located in the United States and other regions.
• Google (Gemini API) — when you press play, the article text is sent to Google’s Gemini API to extract clean text and generate speech audio. Google processes this text to return the transcript and audio and, per its API terms, does not use it to train its models.
• TelemetryDeck — receives the anonymous usage events described above so we can measure and improve the app. TelemetryDeck is a privacy-focused analytics provider: it stores no cookies and no IP addresses, hashes identifiers with a rotating salt, and processes data on servers in the European Union. It never receives your email content or address.

We share content with these providers only to deliver the feature you requested, and only the minimum needed to do so.

6. Analytics, and no advertising

We use one privacy-preserving analytics provider, TelemetryDeck, to collect anonymous, aggregated usage events (see “Service providers” above). This helps us see which features are used and where the app fails. It is tied only to a random identifier generated on your device, not to your name, Apple ID, or email content.

We do not use advertising or cross-app tracking SDKs, we do not track you across other apps or websites, and we do not collect data for advertising purposes as defined by Apple’s App Tracking Transparency framework.

7. Retention & deletion

We keep the newsletters and transcripts associated with your device so your inbox stays available across launches. Audio you generate is cached on your phone (with a size cap) rather than stored on our servers, and it is removed when you delete the app or clear its storage.

Because your account is keyed only to a device secret, deleting the app removes that secret from your device and cuts the link to your stored data. To have the server-side data for your address permanently erased, email us at support@spokeninbox.com from the address associated with your account or include your Spokeninbox address, and we will delete it.

8. Security

Traffic between the app and our service is encrypted in transit (HTTPS). Your device secret is stored in the device’s secure keychain and only ever leaves it as a hash. We restrict access to stored data to what is needed to run the service.

9. Children

Spokeninbox is rated 4+ but is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has used the app, contact us and we will remove the associated data.

10. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. Because we hold so little and it is tied to a device secret rather than your identity, the simplest way to exercise these rights is to email us at support@spokeninbox.com. We will respond within a reasonable time.

11. Changes to this policy

If we change this policy, we will update the date at the top and, for material changes, note it in the app or on this page. Continuing to use Spokeninbox after an update means you accept the revised policy.

12. Contact

Questions about privacy, or a request to delete your data? Email support@spokeninbox.com and we will help.