Privacy Policy

Last updated: 28 August 2026

Voice Kata has no accounts, keeps your practice history only in your own browser, and never stores a recording of your voice.

This policy explains what happens to your data — above all, to your voice — when you use Voice Kata at voicekata.com. It is written to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Romanian data protection law.

1. Who is responsible

The data controller for your personal data is:

2. Your voice

This is the part that matters most, so it comes first.

Analysis happens in your browser. When you start a session your browser asks for microphone permission. The pitch and tone analysis behind the teacher’s feedback runs entirely inside your browser, using a model your browser downloads once. That audio never leaves your device.

Reading recognition happens on our server. To follow which words you have reached in a line, your browser streams audio over an encrypted connection to our own speech recognition service. That service:

• runs on our own server in the European Union — no third-party speech provider is involved, and your audio is never sent to one;
• uses Vosk, an open-source recognizer, running offline on that server;
• is told only the words of the line you are currently reading, so that it can follow along;
• holds the audio in memory for the moment it takes to transcribe it, and never writes it to disk;
• returns the recognised words to your browser and discards everything else when the connection closes.

We do not record you. No recording of your voice is stored, kept, shared, sold, or used to train any model. If that ever changes, this policy will change first, and the feature will be something you choose to turn on.

This is not biometric data. Your voice is personal data, but Voice Kata does not use it to work out who you are — only to transcribe the words you read and measure how you read them. It is therefore ordinary personal data under Article 6 of the GDPR, not special-category biometric data under Article 9.

3. What your browser stores

Voice Kata has no accounts and keeps no profile on our servers. Your progress lives in your own browser’s local storage:

• voice-harness.progress — your streak, belt rank, session count, and the result of your last session for each practice purpose.
• vt-pitch-model — which pitch model the app should load.

This never leaves your device and we cannot read it. Clearing site data for voicekata.com in your browser erases it, and the app starts fresh.

Voice Kata sets no cookies.

4. What our server sees

Like any website, our web server keeps standard access logs: IP address, timestamp, requested path, referrer and browser user-agent. We use them to keep the service running and secure, on the basis of our legitimate interest in operating and protecting it (Art. 6(1)(f) GDPR). They are kept for up to 30 days.

5. Third parties

Voice Kata carries no advertising trackers, shares nothing with advertisers, and does not sell personal data. The Google Fonts request is made by your browser directly to Google; a content blocker will stop it, and the site falls back to your system fonts.

6. Legal bases

• Running the practice session you asked for, including streaming audio for recognition — necessary to provide the service you requested (Art. 6(1)(b)) and our legitimate interest in providing a working feature (Art. 6(1)(f)).
• Keeping the service secure and available, including server logs — legitimate interest (Art. 6(1)(f)).
• Aggregate, cookieless analytics — legitimate interest in understanding whether the site works (Art. 6(1)(f)).

7. How long things are kept

• Your voice — not kept. Discarded as it is transcribed.
• The transcribed words — held in memory during the line you are reading, never stored.
• Your progress — in your browser, until you clear it.
• Server access logs — up to 30 days.
• Analytics — kept by Simple Analytics in aggregate form, with no personal identifiers.

8. Where your data goes

Our server is in the European Union, and Simple Analytics processes data in the European Union. Cloudflare and Google are United States companies, and requests your browser makes to them may be processed outside the EU under the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest.

In practice there is very little for us to hand over or delete: Voice Kata has no account to look you up by, keeps no recordings, and leaves your practice history on your own device under your control. For anything we do hold, write to [email protected].

You also have the right to complain to the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), Bd. Gen. Gheorghe Magheru 28–30, Bucharest, dataprotection.ro.

10. Children

Voice Kata is not intended for children under 16.

11. Changes to this policy

If this policy changes, the “Last updated” date above changes with it. A change to what happens to your voice will be announced in the app before it takes effect.

12. Contact

Questions about this policy or your data: [email protected].

Terms of Service · Back to Voice Kata