1. Who We Are

Until formal incorporation, Voilà operates as the Data Controller of your personal data under the name Voilà, reachable at:

📧 legal@voila.fun
🌐 www.voila.fun

Once incorporated in the United States, Voilà Technologies LLC will act as the formal data controller, continuing to abide by GDPR for European customers.

2. What Data We Collect

We collect the following categories of personal data:

A. Information You Provide

• Account details: Name, email, password, and language preferences.
• Profile information: Country, target language, learning level, and subscription tier.
• Audio/video data: Recordings, speech samples, and transcriptions used for learning.
• Tutor interactions: Messages, call logs, and feedback in the app.
• Billing data: Managed by third-party providers (Stripe, Google Play, Apple) — Voilà does not store full payment details.

B. Information Collected Automatically

• Device and usage data: XR headset type, operating system, app version, session logs.
• Analytics: Through Google and Firebase Analytics (only with consent).
• Approximate location: For localization and time zone alignment (not continuous tracking).
• Cookies and similar technologies: Explained in Section 10.

C. Information from Third Parties

• Partner institutions (language schools) if you register through them.
• OAuth providers (Google, Apple) if you sign up via Single Sign-On (SSO).

3. How We Use Your Data

We process your personal data based on the following legal grounds:

You can withdraw consent at any time via account settings or by emailing legal@voila.fun.

4. Who We Share Your Data With

We share limited data with trusted third parties acting as data processors:

Each provider operates under GDPR-compliant Data Processing Agreements (DPAs) and, where applicable, Standard Contractual Clauses (SCCs) or the EU—US Data Privacy Framework for international transfers.

5. Data Retention

We retain data only as long as necessary for the purposes collected.

When data is no longer needed, it is securely deleted or anonymized.

6. Data Security and Breach Notification

We implement encryption, access controls, and network isolation across our servers (AWS and Runpod).

In the event of a data breach that may impact your rights and freedoms, we will notify you and the appropriate supervisory authority in accordance with GDPR Article 33.

7. International Data Transfers

Your data may be processed outside the European Economic Area (EEA), specifically in the United States.

We rely on:

• Standard Contractual Clauses (SCCs) for data transfers,
• EU—US Data Privacy Framework (where applicable), and
• Secure encrypted channels between regions (AWS EU ↔ US, Runpod EU ↔ US).

All transfers follow GDPR Articles 44–49 safeguards.

8. Your GDPR Rights

You have the following rights regarding your personal data:

• Access – Obtain a copy of your data.
• Rectification – Correct inaccurate or incomplete data.
• Erasure – Request deletion ("Right to be Forgotten").
• Restriction – Limit processing of your data.
• Data Portability – Receive data in machine-readable format.
• Objection – Object to processing under legitimate interests.
• Withdraw Consent – At any time, without affecting prior lawful processing.

To exercise any right, contact legal@voila.fun.

You may also lodge a complaint with your local Data Protection Authority (e.g., CNPD – Comissão Nacional de Proteção de Dados, Portugal).

9. Automated Decision-Making and AI

Voilà uses AI to:

• Generate translations and grammar corrections,
• Provide feedback on pronunciation and sentence structure,
• Suggest personalized learning content.

All AI processing is assistive, non-deterministic, and human-reviewed where necessary.

Voilà does not make any automated decisions producing legal or significant effects.

You can disable personalization features in your account settings.

10. Cookies and Tracking Technologies

When using the Voilà web platform, we use cookies and similar technologies.

Cookies are small files placed on your device to improve functionality, analytics, and personalization.

Categories of Cookies:

Your Choices:

Upon first visit, you will see a cookie consent banner allowing you to:

• Accept all cookies;
• Reject non-essential cookies; or
• Manage preferences by category.

No analytics or marketing cookies are set until you grant consent.

You can change or withdraw consent anytime via "Cookie Settings" in the app or website footer.

11. Children's Privacy

Voilà is not directed to children under 13.

If we become aware of data collected from minors without parental consent, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically.

If significant changes occur, we will notify you via in-app message or email.

The latest version will always be available at www.voila.fun/privacy.

13. Contact Us

For questions, concerns, or to exercise your rights, contact:

📧 legal@voila.fun
🌐 www.voila.fun