Privacy Policy - VoxMotoChat

1. General Information

VoxMotoChat is a voice communication (VoIP) application that allows for real-time conversations over the internet.

This Privacy Policy governs the processing of application user data in accordance with the General Data Protection Regulation (GDPR) and Google Play requirements.

By using the application, users acknowledge that they have read this Privacy Policy.

2. Data Administrator

The data administrator is Microdev Mateusz Wilczewski for:

  • the official VoxMotoChat application
  • the official VoxMotoChat website,
  • official VoxMotoChat servers maintained by the application administrator

Contact:

  • Website: https://voxmotochat.com
  • email:

3. Application Operation Model (Self-hosted Servers)

VoxMotoChat operates in a decentralized model. The application administrator is not responsible for the processing of personal data by operators of third-party (self-hosted) servers.

In the case of self-hosted servers, regardless of their configuration, the end-to-end encryption (E2EE) mechanism remains active and enforced by the application.

The server operator cannot disable it or interfere with the encryption process.

  • the operator of such a server may be an independent controller of personal data in terms of data processed by the server it runs,
  • the server operator is solely responsible for the processing of user data,
  • the application administrator does not control the processing of data on such servers and is not responsible for the manner in which it is processed by the operators of these servers,
  • privacy policies may vary depending on the configuration of a given server.

4. Scope of Data Collected

The following data may be processed during use of the application:

  • the user's IP address (temporarily in server logs),
  • the nickname (username) chosen by the user,
  • the room (channel) name,
  • The user-entered room password (if applicable), which is encrypted during transmission and stored on the server solely as a one-way cryptographic hash using secure cryptographic algorithms. Passwords are not stored in plain text and cannot be recreated. Passwords are used solely to control access to the room, are not shared with third parties and are not used for any other purposes,
  • technical connection data (events: connection, disconnection, errors)

The application does not require the creation of a user account. The application does not conduct user profiling or engage in automated decision-making.

5. Legal Basis for Data Processing (GDPR)

Data is processed based on:

  • Article 6, paragraph 1, letter b of the GDPR - necessity to provide the VoIP service,
  • Article 6, paragraph 1, letter f of the GDPR - legitimate interest of the controller in ensuring security, stability, and protection against abuse

6. Purpose of Data Processing

Data is processed solely for the following purposes:

  • ensuring the operation of voice communication (VoIP),
  • enabling room connections and communication between users,
  • maintaining and operating the server,
  • ensuring the security of the service,
  • detecting abuse and spamming,
  • diagnosing and analyzing technical errors

7. Data Processing and Encryption

  • The server processes only the technical data necessary for call routing (such as the IP address, room ID, and session information). This data is used solely to ensure the service's operation and is not used for user profiling or behavior analysis.
  • Data transmitted between the client and the server is encrypted to protect the communication channel.
  • Voice data is additionally protected using mandatory end-to-end encryption (E2EE), which is an integral part of the VoxMotoChat protocol and cannot be disabled or modified by the server operator or users.
  • Data sent between the client and server is secured with encryption mechanisms. Official VoxMotoChat servers do not possess the end-to-end encryption (E2EE) keys used to encrypt voice data, and therefore cannot decrypt or access the content of voice communications.
  • Audio is transmitted only in real time and is neither recorded nor stored by the official VoxMotoChat servers.
  • The server acts solely as a relay for end-to-end encrypted voice data.

8. Server Logs

To ensure system security and stability, technical logs are processed, including:

  • IP address,
  • user nickname,
  • room name,
  • system events (connections, disconnections, errors)

Logs:

  • are stored for a maximum of 7 days on official servers,
  • are automatically deleted,
  • are not used for user profiling

In the case of external (self-hosted) servers, log retention policies may vary and are determined by the server operator.

9. Data Storage

Data is stored only for the time necessary to operate the service:

  • session data (nickname, room) - only during the connection,
  • technical logs - up to 7 days,
  • room passwords are stored only as one-way cryptographic hashes and cannot be reconstructed.

10. Data Sharing

Data is not sold or made available for commercial purposes to third parties.

Personal data may be processed by infrastructure providers (e.g. hosting, servers) who act as processors under contracts compliant with the GDPR. Such providers process data solely on behalf of the controller and only to the extent necessary to provide the service.

Users may connect to servers managed by third parties (self-hosted). In this case, the data is processed directly by the operator of the server, who acts as an independent data controller and bears full responsibility for its processing.

Recipients of the data may also include operators of self-hosted servers who process the data as independent controllers.

11. Location of Data Processing

VoxMotoChat's official servers are currently located within the European Economic Area (EEA). Personal data processed by the official servers is therefore subject to the GDPR. The Data Controller does not transfer personal data processed by the official servers outside the EEA.

Users may voluntarily use independent servers hosted by third parties (self-hosted), even outside the EEA. In such cases, the data controller is the operator of the server in question and data processing is conducted in accordance with its terms and privacy policy.

12. Application Permissions

The application may require access to:

  • a microphone - required for voice communication (the microphone is used only for real-time audio transmission and is not used for recording or storing data),
  • an internet connection - required for communication with the server,
  • Bluetooth audio devices - required to support Bluetooth headsets, speakers and similar audio devices (Bluetooth is used only for audio devices and is not used to collect user data),
  • a speaker - for audio playback,
  • notifications - informing about the application status.

13. User Rights (GDPR)

The user has the right to:

  • access their data,
  • rectify it,
  • delete it ("the right to be forgotten"),
  • restrict processing,
  • object to processing,
  • transfer data,
  • file a complaint with the competent data protection supervisory authority.

14. Data Deletion

The user may, at any time:

  • discontinue using the application,
  • request deletion of their personal data processed by the official VoxMotoChat servers.

Requests to delete data can be submitted to:

Data is deleted without undue delay, unless there are legal obligations to retain it. The Administrator responds to user requests within 30 days in accordance with the GDPR.

15. Changes to the Privacy Policy

The Privacy Policy may be updated from time to time. The current version will always be available:

  • in the app
  • on the website
  • in the Google Play Store

16. Analytics and Advertising

The application does not use advertising SDKs. The application does not use analytics services or tracking technologies for profiling users. The application does not sell user data.

17. Children

The Application is not intended for children and is not directed at persons under the age required by applicable law. The administrator does not knowingly collect personal data from children.