Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how Abika ("we") collects, uses and protects personal data when you use Abika. We are the data controller for this processing.

1. Data we collect

Account data: your name and email address (provided directly or via Google Sign-In).

Voice data: the voice recordings you record or upload. Voice recordings can be used to identify a person and may constitute biometric data; we process them only with your explicit consent (see section 4).

Content data: story text and audio narrations you create.

Usage data: how you interact with the Service, device and log information.

Payment data: we do not store your card details. Payments are handled by Creem (Merchant of Record), which processes your billing information under its own privacy policy.

2. How we use data

To provide and operate the Service (create voices and narrations, manage your account); to process payments; to maintain security and prevent abuse; to communicate with you about the Service; and to comply with legal obligations.

3. Legal bases

Where the GDPR applies, we rely on: performance of our contract with you (providing the Service); your consent (for processing voice/biometric data); our legitimate interests (security, improving the Service); and compliance with legal obligations.

4. Voice data and consent

We process your voice recordings to generate spoken narrations. Because voice can identify a person, we ask for your explicit consent before you upload or record a voice, and you must confirm you have the right to use that voice. You can withdraw consent at any time by deleting the voice or your account; withdrawal does not affect processing already carried out.

5. Service providers and sharing

We share data with providers who help us run the Service, under appropriate data-processing terms: Supabase (authentication, database and file storage), Vercel (hosting and privacy-friendly, cookieless web analytics), Google (OAuth sign-in), OpenAI (AI generation of story text), RunPod (voice synthesis and speech-to-text used to process recorded voices and generate narrations), and Creem (payment processing, as Merchant of Record). Some of these providers operate outside your country — see “International transfers” below. We do not sell your personal data.

6. Retention

We keep your data for as long as your account is active or as needed to provide the Service. You can delete individual voices and content at any time. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to meet legal obligations. After deletion we retain a one-way (hashed) form of your email address for up to 12 months, solely to prevent repeated claiming of the free allowance. We do not use it to contact or identify you, and it holds no other personal data.

7. International transfers

Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

8. Your rights

Subject to applicable law, you may have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. You may also complain to your local data-protection authority.

9. Children

The Service is for adults. We do not knowingly create accounts for children. Parents and guardians are responsible for any content created for children to listen to.

10. Cookies

We use only strictly necessary cookies: Supabase authentication cookies (prefixed “sb-”) to keep you signed in, and preference cookies that remember your language (“locale”) and display theme (“theme”). To understand and improve usage we use Vercel Web Analytics, which is cookieless and does not set tracking identifiers. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required.

11. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes and contact

We may update this Policy and will revise the "Last updated" date. Contact: Abika, Georgia, support@abika.org.