Julumuqi Vox — Privacy Policy

Effective date: October 15, 2026

Operated by: Julumuqi, Inc. ("we", "us")

This policy explains what data we collect when you use Julumuqi Vox, why we collect it, how long we keep it, and how to get it deleted. We've tried to keep it short and readable. If anything is unclear, email us at support@julumuqi.games and we'll explain.

The short version: Vox recognizes who's talking at your game table. To do that, with your consent, we create a voiceprint from a short recording you submit through the app. We keep that recording alongside your voiceprint and delete both on the same schedule. During a game, one player's phone hosts the session, listens to the table, and figures out who's speaking. Session audio is processed on that phone and never recorded or sent to us. We don't sell your data. We may use anonymized transcripts to improve the software, but never your recording or voiceprint. Email us and we'll delete everything.

1. What we collect

Account information

Your name and email address, from the Google or Apple account you sign in with, and (for Android users) the Google account email used to install the app, if different.
Your confirmation that you are 18 or older and in the United States, given when you agree to the consent notice. We don't ask where you live and do not use GPS or track your location.
Child profiles: a parent or legal guardian may add a child under 18 to their account. We hold the child's name and age as the parent entered them, and the child's recording, voiceprint, and transcripts, all under the parent's account.
Records of the sessions you hosted or joined: who hosted, who joined, and when. Your name is visible to the other players in a session.
Your consent record: the version of the consent notice you agreed to, when you agreed, the phone and app version you agreed from, your 18+/US confirmation, and links to any child profiles your consent covers.

Voiceprints (biometric data)

After you consent (Section 3), you record yourself reading a short paragraph and submit the recording through the app, which sends it to our server. (If you can't complete the upload, our staff can submit it for you at your request, but only after you have consented in the app.) We convert the recording into a voiceprint: a numerical signature of your voice. Internally this is a small set of numerical signatures derived from your recording; we treat the whole set as your voiceprint for every purpose in this policy, including deletion.
Your voiceprint is stored encrypted on our server and linked to your account. It is used for one purpose: recognizing you when you speak during game sessions you join (including checking and tuning how well that recognition works).
We keep your enrollment recording (trimmed to the part containing your speech), stored encrypted on our server alongside your voiceprint, for one purpose: re-creating your voiceprint if we improve the software that generates it, so you don't have to record again. It is not used for anything else and is never sent to a host's phone. It is deleted on the same schedule as your voiceprint (Section 3). Modified copies of the recording that we make while generating your voiceprint are deleted as soon as the voiceprint is created.
When you join a game session, your voiceprint is sent to the Vox app on the host's phone, where it is held in the app's memory only while you are in the session. You join a session by entering a code the host shares with you at the table. The host is whichever enrolled user started the session; the app shows you who is hosting before you join. Your voiceprint is removed from the host's phone when you leave the session or the session ends. It is never saved to that phone's storage.

Session speech

While a session is running, the host phone captures audio from the table, transcribes it, and matches each voice against the voiceprints of the players who have joined. All of this happens on the phone. Session audio is processed in memory and discarded; it is never recorded, saved, or sent to us.
Listening stops when the host ends the session.
Matching a voice involves computing a temporary numerical measurement of it on the host phone and comparing it to joined players' voiceprints. These measurements are discarded immediately after the comparison and are never stored or sent anywhere.
If someone who hasn't joined the session speaks near the phone, the app determines that they are not a player and drops their speech on the phone: no transcript of it leaves the phone, no voiceprint is made, and nothing about them is stored.

Transcripts

Transcribed speech from enrolled players who have joined the session is sent to our servers so the game can respond to it, and is kept as part of your game history while your account is active. Email us to have your transcripts deleted at any time. To understand and respond to what was said, our servers may use an AI language-model provider as described in Section 4; it receives transcript text only, never audio or voiceprints.

Basic technical data

Standard app and device diagnostics (device type, OS version, error and session IDs) used to keep the app working. Diagnostics never include audio or voiceprints.

2. What we do NOT do

We do NOT sell, lease, trade, or otherwise profit from your voiceprint, transcripts, or any other voice data.
We do NOT use your enrollment recording, voiceprint, or session audio to train machine-learning models. (Checking how accurately the app recognizes you, such as tuning matching thresholds, and re-creating your voiceprint from your recording with improved software, are part of recognition, not training.)
We MAY use transcripts, anonymized (your name, account identifiers, and other identifying details removed), to improve how the game understands and responds to what players say. That is the only training use we make of your data.
We do NOT record or store session audio, on the phone or on our servers.
We do NOT use your data for advertising.
We do NOT share your voice data with anyone except as described in Section 4.

3. Biometric data retention and destruction policy

This section is our public written policy on biometric data, including for the purposes of applicable state biometric privacy laws.

What we possess

Voiceprints of users who completed our consent and enrollment process, stored on our server, and temporary copies in the memory of a host phone during sessions those users have joined.
Enrollment recordings (the audio each voiceprint was made from) of those same users, stored on our server.

Retention schedule

Voiceprints and enrollment recordings on our server: permanently destroyed 90 days after your last game session (or 90 days after creation, if you never play), OR when you ask us to delete them, OR when your account is closed, OR when they are no longer needed for speaker recognition, whichever comes first. In all cases, destruction occurs no later than 1 year after your last interaction with the app. Your recording and your voiceprint are always deleted together.
Modified copies of your recording that we make while generating your voiceprint: deleted as soon as the voiceprint is created. If we can't create a voiceprint from your recording, the recording is deleted within 7 days and we ask you to record again.
Session audio: not retained. Audio is processed on the host phone and discarded.
Voiceprints on a host phone: held in memory only while you are in the session; removed when you leave or the session ends, or if the app loses its connection to our servers. Enrollment recordings are never sent to a host phone.

Destruction guidelines

Deletion is permanent. Voiceprints and recordings are removed from our production systems upon deletion, and from any backups on the same schedule.
We keep a record of your consent, without any voice data, as evidence for as long as legally required.
Deletion requests: email support@julumuqi.games from the address you enrolled with. We will confirm when destruction is complete.

Consent

We collect a voiceprint only after informing you in writing of what is collected, the specific purpose, and the retention term, and only after you agree. The first screen after sign-in is a notice covering: creating your voiceprint and keeping it and your enrollment recording, sending your voiceprint to the host's phone during every session you join, transcribing your speech during sessions, the AI language-model provider, our use of anonymized transcripts, how long we keep everything, and the terms for adding a child. You agree once, by tapping "I agree" while signed in to your account. That tap is your electronic consent and your confirmation that you are 18 or older and in the United States. It covers every session you join afterwards; we do not ask again when you join. We record which account agreed, the version of the notice, when, from which phone and app version, and which child profiles the consent covers.
Each adult consents for themselves. No one else, including the person hosting a session, can consent on your behalf, and installing the app or reading this policy is not consent. The one exception is a child under 18: a parent or legal guardian who adds a child to their account consents for that child, and confirms they are the child's parent or legal guardian when they do.

Storage and security

Voiceprints, enrollment recordings, and any other voice data in our possession are encrypted in transit and at rest, and access is restricted to personnel who need it to operate the service. On a host phone, voiceprints are held only in the app's memory for the duration of a session, and the app provides no way to view or export them. We protect biometric data using at least the same standard of care we apply to our most sensitive data.

4. Sharing and service providers

Session hosts. When you join a game session, your voiceprint is sent to the Vox app on the host's phone as described in Section 1. The host is the enrolled user who started the session and shared its join code with you; the app shows you who that is. The host can see who has joined and what they said, as anyone at the table would. Hosts are not permitted to copy, extract, or reuse other players' voiceprints, and the app gives them no means to do so. Your enrollment recording is never sent to a host.

Service providers. We use third-party services for email, app hosting, beta distribution (Apple TestFlight and Google Play), generating the app's spoken voice, and, possibly, an AI language-model provider that helps the game understand and respond to transcribed speech. These providers may process data only to provide their service to us and may not retain your data or use it to train their models. An AI language-model provider receives transcript text only; no provider ever receives audio or voiceprints. Your enrollment recording travels from the app to our own server; speech recognition and speaker matching run on the host phone; no session audio is sent to us or to any provider. You sign in with your Google or Apple account, so Google or Apple know you signed in to Vox; Apple and Google also receive your email address so we can invite you to the beta.

We do not otherwise disclose your personal data to third parties unless required by law (for example, a valid warrant or subpoena).

5. Your choices and rights

Access: email us to ask what data we hold about you or to correct your account details.
Deletion: email us to have your account, transcripts, voiceprint, and enrollment recording permanently deleted. We will confirm when it's done.
Remove a child: email us to remove a child profile from your account. Everything we hold for that child (recording, voiceprint, transcripts, name and age) is deleted at once.
Withdraw consent: you may withdraw your voiceprint consent at any time by email; we will destroy the voiceprint and your enrollment recording. Voice recognition is core to the app, so withdrawing consent means the app will no longer be usable on your account.
Leave a session: tap Leave Session in the app. Your voiceprint is removed from the host phone, and your voice is no longer transcribed.
Requests go to support@julumuqi.games from the email address associated with your account. We verify requests using that address and never ask for a new voice recording to confirm your identity.

6. Age requirement

Accounts are for adults 18 and older; you confirm this when you agree to the consent notice. A person under 18 can use Vox only as a child profile that a parent or legal guardian adds from their own signed-in account, after agreeing to the notice on the child's behalf. We do not knowingly collect personal information from anyone under 18 outside that path. Speech from people who have not enrolled, including children in the room, is dropped on the host phone and never stored or sent to us. If you believe someone under 18 has an account of their own, or has been added by someone who is not their parent or guardian, email us and we will delete it.

7. Where we operate

Julumuqi Vox is currently an invite-only beta offered in the United States. You confirm you are in the United States when you agree to the consent notice.

8. Changes to this policy

If we change this policy, we will update the effective date above and notify active users by email before material changes take effect. We will not use previously collected voiceprints or enrollment recordings for new purposes without asking for your consent again.

9. Contact

Julumuqi, Inc.

support@julumuqi.games