Legal

Privacy Policy

Last updated September 29, 2026

Speak to Zoé is a private, voice-first journal for your spiritual life. This policy explains what information the Speak to Zoé app and the website speaktozoe.com collect, how we use it, who helps us process it, and the choices you have.

This Privacy Policy applies to the Speak to Zoé mobile app for iOS and Android (“the app”) and to the website speaktozoe.com (together, the “Services”). The Services are provided by Zoe Life LLC (“Speak to Zoé,” “we,” “us,” or “our”), which decides how your personal information is processed. If you have questions, contact us at team@speaktozoe.com.

Summary of key points

  • What we collect: your account details (name, email, password), the recordings and journal entries you create, the AI-generated interpretations and symbols made from them, and your subscription status.
  • Why: only to provide the app to you — to sign you in, transcribe and interpret your entries, keep your journal, and manage your subscription.
  • Sensitive information: your entries may reveal your religious or spiritual beliefs. We process them only with your consent and only to provide the app — never for advertising or profiling.
  • AI: recordings and entries are processed by OpenAI to transcribe and interpret them, only after you agree in the app. OpenAI does not use this content to train its models.
  • No ads, no tracking, no selling: the app contains no advertising and no analytics or tracking tools. We do not sell your information or share it for advertising.
  • Your control: you can export your journal, delete any entry, turn off AI processing, or delete your account and all its data at any time from the app.

1. What information we collect

In short: We collect what you give us to run your account and your journal, and very little else.

Information you provide

  • Account information: your full name, email address and password. Your password is stored only as a secure one-way hash; we can never see it. If you enter an invitation code when signing up, we record that code so it can only be used once.
  • Verification codes: when you sign up or reset your password we email you a 6-digit code. We store only a secure hash of it, and it expires after 15 minutes.
  • Voice recordings: captured through your microphone only while you are actively recording an entry. The app never uses the microphone in the background. See Voice recordings.
  • Journal content: the dreams, prayers, impressions and Scripture reflections you record, their transcripts, any edits you make, whether you have marked a prayer as answered, and the AI-generated interpretations, summaries and pattern analyses created from them.
  • Symbols: the personal dream symbols and meanings that are learned from your dreams or that you add yourself. They are used to interpret your future dreams and are visible only to you.
  • Reports and support: if you report an AI interpretation, we receive the report, its reason and any details you add. If you email us, we receive your message and email address.
  • Website forms: if you join our waiting list or use the contact form on speaktozoe.com, we receive the name, email address and, for the contact form, organization, role and message you enter. These are sent to our team by email.

Information collected automatically

  • Subscription information: if you subscribe, Apple or Google processes the payment and we receive, through RevenueCat, your subscription status, plan and renewal dates. We never receive your card or payment details.
  • Technical logs: our servers record basic request information — IP address, time, the part of the service requested and the app or browser version — for security and troubleshooting.
  • Website statistics: on speaktozoe.com we use Vercel Web Analytics, which counts page views in aggregate without cookies and without identifying you.

Sensitive information

Your journal content may reveal your religious or spiritual beliefs, which some laws treat as sensitive personal information. We process it only with your consent and only to provide the app to you — never for advertising, profiling, or inferring characteristics about you.

What we do not collect

The app does not collect your location, contacts, photos, browsing history, or advertising identifiers. It contains no advertising and no third-party analytics or tracking tools, and it does not track you across other companies’ apps or websites.

2. How we use your information

In short: Only to provide and protect the Services, and to talk with you about your account.

  • To create and secure your account — sign-up, email confirmation, sign-in and password reset.
  • To provide the app — store your journal, transcribe your recordings, generate interpretations and pattern analyses, and keep your personal symbols so future interpretations reflect them.
  • To manage access — subscriptions, free trials and invitation codes.
  • To communicate with you — account emails such as sign-up and password reset codes, and replies to your questions. We do not send marketing email from the app. If you join the website waiting list, we may email you about the launch; you can unsubscribe at any time.
  • To keep the Services safe — prevent abuse and fraud, review AI output you report, and fix problems.
  • To comply with law — and to establish or defend legal claims.

Authorized members of our team can access account information and journal content only when necessary — for example to answer your support request, review a report you submitted, investigate abuse, or meet a legal obligation.

3. AI processing

In short: OpenAI transcribes and interprets your entries on our behalf, only after you agree, and does not train on them.

  • Your consent first. Before the app sends anything to AI for the first time, it explains what will be shared and asks for your permission. You can turn AI processing off at any time in Settings → Your data; recording and journaling keep working without it.
  • What is sent. Your recording (to create a transcript); the transcript of an entry you choose to interpret, together with the meanings of the known symbols it mentions; and, when you open Patterns, a summary of your entries in the period you select.
  • How OpenAI handles it. Under OpenAI’s API terms, content we send is not used to train their models. OpenAI may keep it for up to 30 days to detect abuse, then deletes it.
  • What you get. Interpretations are generated automatically and are visible only to you. They are prompts for your own reflection and prayer — not prophecy, professional, medical, or pastoral advice. You can report any interpretation from the entry screen.

4. Voice recordings

In short: Your original recording stays on your device. Our copy exists only until it is transcribed.

When you record an entry, the audio file is saved on your device. To create the transcript, the app sends the recording to our server, which passes it to OpenAI. Shorter recordings are streamed directly and are not stored on our servers. Longer recordings are uploaded to private cloud storage first and are deleted as soon as the transcript is complete. We never use recordings to identify you by your voice.

6. When and with whom we share information

In short: We share information only with the providers that run the Services for us, and when the law requires.

We do not sell your personal information, and we do not share it for targeted advertising. We share it only as follows:

Service providers

These providers process information only on our instructions, under contract, to run the Services:

  • Amazon Web Services — hosts our servers and database in the United States (privacy policy)
  • OpenAI — transcribes recordings and generates interpretations and pattern analyses (privacy policy)
  • Supabase — temporarily stores longer recordings until they are transcribed (privacy policy)
  • Google (Gmail / Google Workspace) — sends account emails such as sign-up and password reset codes, and receives support email (privacy policy)
  • RevenueCat — manages subscription status; receives your account ID and purchase records (privacy policy)
  • Apple App Store and Google Play — distribute the app and process all payments
  • Expo — delivers app updates; receives basic device and app version information when the app checks for updates (privacy policy)
  • Wistia — streams the in-app tutorial videos (privacy policy)
  • Vercel — hosts this website and provides privacy-friendly, cookie-free page statistics (privacy policy)

Scripture passages shown in the app are fetched by our server from bible-api.com; only the passage reference is sent, never anything about you.

Other situations

  • Legal requirements: when required by law, court order, or to protect the rights, property or safety of our users or others.
  • Business transfers: if the Services are merged, sold or reorganized, your information may transfer to the new owner under this policy.
  • With your consent: for any other purpose you agree to.

Your journal is private to your account. It is never shown to other users and is never published, sold or licensed.

7. How long we keep your information

In short: For as long as your account exists — and no longer.

  • Account and journal: kept until you delete them. Deleting an entry removes it; deleting your account removes everything connected to it.
  • Recordings on our servers: deleted as soon as transcription is complete.
  • Verification codes: expire after 15 minutes.
  • Technical logs: kept for a limited time and rotated automatically.
  • Backups: any remaining copies in backups are removed within 30 days of deletion.
  • Website messages: kept as long as needed to respond; waiting-list details until launch or until you unsubscribe.

We may keep limited information longer where the law requires it, or to resolve disputes and enforce our terms.

8. How we keep your information safe

In short: We protect your information with technical and organizational safeguards.

All data is encrypted in transit (HTTPS). Passwords and verification codes are stored only as secure hashes. Each account’s journal and recordings are accessible only to that account, and team access is limited to what is necessary. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you of a breach where the law requires.

9. International transfers

In short: Your information is stored and processed in the United States.

Our servers are in the United States, and some providers may process information in other countries. Where we transfer personal information from the EEA, the UK or Switzerland, we rely on appropriate safeguards, including written contracts with our providers that require them to protect it and process it only on our instructions.

10. Children

In short: The Services are for adults aged 18 and over.

We do not knowingly collect information from anyone under 18. If we learn that we have, we will close the account and delete the information. If you believe a child has given us information, please contact us at team@speaktozoe.com.

11. Your rights and choices

In short: You can see, correct, export and delete your information — most of it directly in the app.

In the app

  • Edit: open an entry to correct its transcript; change your symbols from a dream.
  • Export: Settings → Your data → export your journal (CSV, Markdown or plain text).
  • Delete an entry: open the entry and delete it.
  • Turn off AI processing: Settings → Your data.
  • Reminders: daily reminders are scheduled on your device; turn them off in Settings or in your device settings.
  • Delete your account: Settings → Account → Delete account. See how account deletion works.

By request

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to its processing, to withdraw consent, and not to be subject to decisions based solely on automated processing that significantly affect you. To make a request, email team@speaktozoe.com from the address on your account. We will verify your identity, respond within the time the law requires, and never discriminate against you for exercising your rights. You may use an authorized agent where the law allows; we may ask for proof of their authority.

If we decline a request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general or your local data protection authority.

12. Additional information for US residents

In short: Residents of California and other US states with privacy laws have the rights described above; here are the details those laws require.

Categories of personal information we have collected in the past 12 months:

CategoryExamplesCollected
A. IdentifiersName, email address, account ID, IP addressYes
B. Personal information (Cal. Civ. Code § 1798.80)Name and contact informationYes
C. Protected classification characteristicsAge, gender, race, national originNo
D. Commercial informationSubscription status and purchase history (from Apple, Google and RevenueCat)Yes
E. Biometric informationFingerprints, voiceprintsNo — recordings are transcribed, never used to identify you
F. Internet or network activityServer logs of requests to our serviceYes, limited
G. Geolocation dataDevice locationNo
H. Audio, electronic or similar informationVoice recordings you choose to makeYes
I. Professional or employment informationJob title, employerNo (website contact form only, if you choose to share it)
J. Education informationStudent recordsNo
K. InferencesAI interpretations and pattern analyses generated for you from your own entriesYes — shown only to you; never used for profiling or advertising
L. Sensitive personal informationAccount login; content that may reveal religious or spiritual beliefsYes
  • Sources: directly from you, from your use of the Services, and from Apple, Google and RevenueCat for subscriptions.
  • Purposes: as described in How we use your information.
  • Disclosure: only to the service providers listed above, for business purposes. We have not sold personal information or shared it for cross-context behavioral advertising in the past 12 months, and we will not.
  • Sensitive information: used only to provide the Services you request, not to infer characteristics about you.
  • Retention: as long as you have an account, as described in section 7.

California “Shine the Light”: we do not disclose personal information to third parties for their direct marketing purposes.

13. Additional information for other regions

  • United Kingdom: you may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
  • EEA and Switzerland: you may complain to your local data protection authority or the Swiss Federal Data Protection and Information Commissioner.
  • Canada: you may contact the Office of the Privacy Commissioner of Canada.
  • Australia and New Zealand: you may contact the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner.
  • South Africa: you may contact the Information Regulator at enquiries@inforegulator.org.za.

We would welcome the chance to resolve any concern first — please contact us at team@speaktozoe.com.

14. Do-Not-Track

Because we do not track you across websites or apps, there is nothing for a Do-Not-Track signal to turn off. We do not currently respond to Do-Not-Track browser signals, as no uniform standard for them has been adopted.

15. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, if the changes are significant, tell you in the app or by email before they take effect.

16. How to contact us

Questions, requests or concerns about your privacy:

Speak to Zoé

Zoe Life LLC

42 Broadway

New York, NY 10004

United States

Email: team@speaktozoe.com