Privacy Policy

Spokeninbox reads the email you forward to it aloud. This policy explains what we collect, why, who processes it on our behalf, and the choices you have. We kept it plain on purpose.

1. Who we are

Spokeninbox (“Spokeninbox,” “we,” “us”) provides the Spokeninbox apps for iOS, Android, macOS and Windows, the web app, and the service behind it. We act as the controller of the personal data described below. You can reach us any time at support@spokeninbox.com.

2. What we collect

• Your account. You sign in with Apple, Google, or an email address and password. Our sign-in provider, Clerk, stores your email address and, if you sign in with Apple or Google, the basic profile details those services share (such as your name). If you use Apple’s “Hide My Email,” we only receive the relay address. Our own database stores a Clerk account ID, not your email address or password.
• Your Spokeninbox address. We create a unique address for you, such as you@in.spokeninbox.com, so forwarded email has somewhere to arrive.
• Email you send to that address. We store each message so we can read it aloud: the full original message as received (including its headers), plus the sender’s name and address, the subject, the time it arrived, and a short preview. When you press play, we also store a cleaned-up transcript of the message and its detected language.
• Generated audio. When you press play, we store the audio made from the message, so replaying it, retrying, or listening on another device does not make it again.
• Your plan. If you subscribe, we store which plan you have and when it ends. We never see or store your card details.
• Usage counts. We keep a count of how many characters were turned into audio for you each month, to apply your plan’s monthly listening allowance. It is a number, not a log of what you listened to.
• Anonymous usage events. The iPhone and Android apps send a small set of events (such as opening an email, pressing play, or an error occurring) to TelemetryDeck. They are tied to a random ID created when you install the app, not to your account, and never include email content, senders, subjects, or addresses. See “Analytics” below.
• Web performance and visits. The web and desktop apps use Cloudflare Web Analytics to measure page visits, load times, and responsiveness. Reports include page paths, referring pages, browser and operating system, device type, and country. This data is kept separate from your account.
• Error reports. When the app or our service hits an error, a crash report is sent to our error-monitoring provider. It contains technical details such as the error, the app version, and your device model and operating system version. We configure it not to collect personal information such as IP addresses.

Some data stays only on your device: your listening position in each email, and a copy of the audio so it plays offline. In the web app, your browser keeps your listening position, and the audio only until you close the page. We do not receive your listening position. The web app also uses cookies from Clerk, only to keep you signed in. The desktop apps for macOS and Windows show the web app in their own window and store the same things on your computer. To sign in, they open your web browser. Direct-download desktop apps also check downloads.spokeninbox.com for updates, which tells Cloudflare the app version and your IP address. App Store and Microsoft Store builds receive updates from their store.

3. How we use it

• To sign you in and keep your inbox available on any phone where you sign in.
• To receive email at your address and show it in your inbox.
• To extract clean, readable text from a message and convert it to speech when you press play.
• To apply your monthly listening allowance, fix bugs, and keep the service running reliably.

We do not sell your data, we do not use it for advertising, and we do not use the content of your email to build a profile of you.

4. Your real inbox stays yours

Spokeninbox never connects to Gmail, Outlook, or any other email account, and never asks for your email password. The only email we see is what you choose to send to your Spokeninbox address, whether you forward one message, set up a filter, or forward everything. You can stop forwarding at any time in your email provider’s settings.

5. Service providers

These providers process data on our behalf, only to deliver the service:

• Cloudflare: hosts the service, receives email sent to your Spokeninbox address, stores your messages and transcripts, and processes web performance and visit analytics.
• Clerk: handles sign-in and stores your account details.
• Google (Gemini API): when you press play, the message is sent to Google to extract clean text and detect its language. Google may also convert the text to speech.
• xAI and Lemonfox: depending on the language of the message, the cleaned text may be sent to one of these providers instead of Google to convert it to speech.
• Apple: handles purchases and payment details for subscriptions bought in the iPhone and Mac App Store apps. We send App Store transaction or receipt information to RevenueCat to validate purchases and restores.
• Stripe, through Link: if you subscribe on the web, Link sells you the subscription as the seller of record. It collects and handles your payment and billing details, such as your card and billing address, charges you, and sends your receipts. Because it is the seller, it also handles this data under its own privacy policy.
• RevenueCat: keeps track of your subscription status, such as which plan you have and when it renews or ends, linked to your Spokeninbox account ID. Its iPhone purchase SDK also receives transaction information and technical details needed to validate and restore purchases. For web checkout, it receives the email address you enter at checkout.
• Sentry: receives the error reports described above.
• TelemetryDeck: receives the anonymous usage events described above. It stores no cookies or IP addresses, hashes identifiers with a rotating salt, and processes data in the European Union.

Each provider processes data under its own terms and security commitments. We send them only what the feature needs: the text-to-speech providers receive the text to be read, not your account details.

Most of these providers operate in the United States, so your data may be processed outside the country where you live.

6. Analytics, and no advertising

The iPhone and Android apps use TelemetryDeck to count which features are used and where the app fails. Its events are tied to a random ID created when you install the app, kept separate from your account. These apps send usage events and crash reports only while “Share usage data” is on in Settings. It is on by default, and you can turn it off at any time.

The web and desktop apps use Cloudflare Web Analytics, which runs separately from the mobile Settings switch. It does not use analytics cookies or persistent visitor identifiers. Cloudflare receives an IP address when a browser sends a performance report, discards it at its nearest data center, and does not store it in the analytics databases or logs. Reports retain country-level information and the technical and page-visit details described above.

We do not use advertising or cross-app tracking tools, we do not track you across other apps or websites, and we do not collect data for tracking as defined by Apple’s App Tracking Transparency framework.

7. Retention & deletion

We keep your account, your messages, their transcripts, and the audio made from them until you delete your account, so your inbox stays available. The copy of the audio on your phone is kept up to a size limit and removed when you delete the app.

To delete your account, open Settings in the iPhone or Android app and tap Delete account, or in the web or desktop app open the account menu and choose Delete account. This immediately and permanently deletes your account, your Spokeninbox address, all stored messages, transcripts and audio, and your subscription record at RevenueCat. If you have a subscription that renews, cancel it first; deleting your account does not stop a renewal on its own, so we ask you to cancel before we delete. Link (Stripe) keeps its own records of past payments, as the law requires. You can also email support@spokeninbox.com from the email address you sign in with, or include your Spokeninbox address, and we will do the same for you. Deleting the app alone does not delete your account.

8. Security

Traffic between the app and our service is encrypted in transit (HTTPS). Your sign-in session is stored in your phone’s secure storage (the Keychain on iPhone, the Keystore on Android). We limit access to stored data to what is needed to run the service.

9. Children

Spokeninbox is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has used the app, contact us and we will delete the account.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. To use any of these rights, email support@spokeninbox.com. We will respond within the time the law requires.

11. Changes to this policy

If we change this policy, we will update the date at the top and, for material changes, tell you in the app or on this page. Continuing to use Spokeninbox after an update means you accept the revised policy.

12. Contact

Questions about privacy, or a request to delete your data? Email support@spokeninbox.com and we will help.