1. Core Philosophy: Zero-Server Architecture

VoiceShield operates on a fundamental premise: your vocal identity and personal thoughts belong exclusively to you. We do not operate remote application servers, databases, cloud processing clusters, or telemetry endpoints. The application is completely local-first and functions without an internet connection.

2. What We Collect (Nothing)

No Audio or Voiceprints: Your audio recordings never leave your physical device. We never capture, listen to, sample, or train AI models on your voice.
No Transcripts: All speech-to-text transcription executes entirely on your device’s local neural engine (Apple Neural Engine on iOS; Qualcomm/Tensor NPU on Android). No text or audio is transmitted.
No User Accounts: You do not need to register, provide an email address, phone number, or login credentials.
No Telemetry or Tracking: The application contains zero analytics SDKs, crash report uploaders, tracking pixels, or third-party advertising frameworks. On Android, the android.permission.INTERNET permission is explicitly removed.

3. Local Cryptography & Secure Enclave Protection

Voice memos stored inside VoiceShield are encrypted using AES-256-GCM. Master decryption keys are generated and isolated inside your device’s hardware security module (Apple Secure Enclave on iOS or Android KeyStore on Android).

Access to decryption keys is guarded strictly by your personal biometric authentication (Face ID, Touch ID, or biometric fingerprint). Even if your physical device is connected to a computer, encrypted .vshield files cannot be read without biometric authorization.

4. WhatsApp Integration & Ephemeral File Scrubbing

When you export a shielded voice note to WhatsApp:

The audio is decrypted directly in RAM.
A temporary file is written to your operating system's isolated sandbox cache directory to allow the native OS Share Sheet to hand the file to WhatsApp (com.whatsapp).
As soon as the Share Sheet completes or is dismissed, VoiceShield immediately triggers an unrecoverable deletion pass to wipe the temporary plaintext audio file from disk.

5. Website Privacy (qtzl.cloud)

This website is statically hosted via Cloudflare Pages and served over HTTPS. It sets zero tracking cookies, uses no third-party marketing beacons, and loads no remote fonts or unverified scripts.

6. Inquiries & Verification

Because we hold no user data, we cannot fulfill traditional "data export" or "data deletion" requests—we have nothing to export or delete. For security audits or inquiries regarding our cryptographic verification, contact us at: [email protected].