Little Vox is an iPhone app, run by a sole proprietor. We collect as little as we can get away with, never sell anything about you, and delete recordings automatically after seven days.
The short version: your Yoto login never leaves your phone, we don't ask for an account, and we don't store your child's name on our servers. Questions? support@littlevox.pro.
Little Vox is an iPhone application that helps families record personal stories and send audiobooks to Yoto players. It is developed and operated as a sole-proprietor product based in the United States.
You can reach us at support@littlevox.pro. A real person reads that inbox.
2.1 There is no account
Little Vox has no sign-up, no login, and no user profile. We do not collect your name, your email address, or your phone number in order to use the app. Most of what the app knows about you never leaves your device.
2.2 On your device only
| Data | Where it lives | Why |
|---|---|---|
| Your Yoto access tokens | iOS Keychain (encrypted by the system) | So the app can send content to your Yoto account |
| Recordings you make yourself | Your device's app storage | So you can review and re-send them |
| Story titles, child names, session history | Your device's app storage | To show your library inside the app |
| Which books you've purchased | Apple's App Store, tied to your Apple Account | So purchases restore on a new phone |
2.3 When you invite someone to record
If you create a recording link and share it, the person who records (a grandparent, a friend) opens a web page and records audio. That recording has to pass through our servers to reach you. We collect:
| Data | Storage | Retention |
|---|---|---|
| Narrator's first name (as you typed it) | Cloudflare R2 (US) | 7 days, then deleted automatically |
| The recorded audio | Cloudflare R2 (US) | 7 days, then deleted automatically |
| Story or book title | Cloudflare R2 (US) | 7 days, then deleted automatically |
| Narrator's email address (only if you send the invitation by email) | Resend (US) | Until you or they ask us to delete it |
We do not collect the narrator's IP address for storage, their device details, their location, or anything about them beyond the name you provided.
2.4 Anonymous install identifier
The app generates a random identifier (for example lv_8f3c…) the first time you open it. It is not linked to you, your email, or any account. It exists so we can count distinct devices rather than raw taps when people request a book, and to stop one device from overloading our servers. It is deleted when you delete the app.
2.5 Purchases
Purchases are handled entirely by Apple through the App Store. We never see your card number, your billing address, or your Apple Account email. When you buy a Premium edition, your iPhone gives us an Apple-signed receipt; we check that it is genuine and that it covers that book, and then we serve you the audio. We do not store the receipt afterwards.
2.6 Abuse prevention
To stop automated abuse, our servers briefly process the IP address of requests to create recording links. IP addresses are stored only as an irreversible hash, are used only for rate limiting, and expire within hours.
2.7 This website
littlevox.pro uses Google Analytics to count visits and understand which pages are useful. This applies to the website only, the iPhone app contains no analytics or advertising SDKs of any kind.
- No advertising trackers, no ad networks, no analytics SDKs inside the app.
- No location data, ever.
- No contacts, photos, or files beyond the specific audio file you choose to import.
- No child names, birthdays, or photos on our servers, anything you type about your child stays on your device.
- We do not sell, rent, or share your data with anyone for marketing. There is no scenario in which we would.
| Data | Location |
|---|---|
| Yoto tokens, your own recordings, app preferences, session history | Your iPhone (Keychain for credentials, app storage for the rest) |
| Invited recordings and their metadata | Cloudflare R2, United States, deleted after 7 days |
| Audiobook audio prepared for delivery | Cloudflare R2, United States |
| Invitation emails | Resend, United States |
| Purchase records | Apple (App Store) |
All data in transit is encrypted with HTTPS/TLS. Stored files are encrypted at rest by our storage provider. Credentials on your device are protected by the iOS Keychain.
| Data | Retention |
|---|---|
| Invited recordings and session metadata | 7 days from creation, then automatically deleted |
| Audio prepared for Yoto delivery | Deleted once delivery completes, and in any case within 30 days |
| Rate-limiting records (hashed IP) | Hours |
| Resend contact records | Until deletion is requested |
| Everything on your device | Until you delete it or remove the app |
The seven-day window is deliberate. A recording link is meant to be used within a few days; keeping the audio longer than that would mean holding a family's voice recordings for no reason.
| Service | Purpose | Privacy policy |
|---|---|---|
| Apple | App distribution and in-app purchases | apple.com/legal/privacy |
| Cloudflare (R2) | Audio and session storage | cloudflare.com/privacypolicy |
| Vercel | Serverless API hosting | vercel.com/legal/privacy-policy |
| Fly.io | Audio processing | fly.io/legal/privacy-policy |
| Resend | Sending invitation emails | resend.com/legal/privacy-policy |
| Yoto | Delivering content to your Yoto player | yotoplay.com/privacy-policy |
| Internet Archive | Free public-domain audiobook catalogue | archive.org/about/terms |
| Google Analytics | Website traffic only, not in the app | policies.google.com/privacy |
Little Vox is designed to be used by parents and adult family members, not by children. The child is the listener, on the Yoto player, not a user of this app.
We do not knowingly collect personal information from anyone under 13. Specifically:
- Child names typed into the app stay on the parent's device and are never sent to our servers.
- We do not ask for a child's age, birthday, photo, or school.
- We do not build profiles, serve advertising, or track behaviour, in the app there is nothing to track with.
If a child's voice appears in a recording, that recording was made and reviewed by the adult who created it, is deleted from our servers on the same seven-day schedule as everything else, and is never used for any purpose beyond delivering it to that family's own Yoto.
Reviewing what reaches your child
Every recording made through a shared link is previewed by you before it can be sent to a Yoto card. Nothing an invited narrator records reaches your child until you have listened to it and chosen to send it.
If you ever receive content through Little Vox that concerns you, email support@littlevox.pro with the recording link and we will investigate and remove it.
If you believe we have collected information from a child in error, contact us and we will delete it promptly.
You may request at any time:
- Access: a copy of any personal data we hold about you.
- Correction: update anything inaccurate.
- Deletion: remove your data from our systems.
- Portability: receive your data in a machine-readable format.
Email support@littlevox.pro with the subject line "Data Request." We respond within 30 days.
Because there is no account, most of what we could hold about you expires by itself within seven days. Often the honest answer to an access request is "we no longer have anything."
California residents (CCPA/CPRA)
You have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information, and never have.
EEA and UK residents (GDPR / UK GDPR)
In addition to the rights above, you may restrict or object to processing, and lodge a complaint with your local supervisory authority. Our legal basis for handling recordings is legitimate interests: delivering the service the parent asked for. Our legal basis for handling purchase verification is contract performance.
On our servers: recordings and session data delete themselves after seven days. To remove something sooner, delete the story in the app, or email us the recording link and we will remove it within 30 days.
On your device: your recordings, Yoto tokens, and library are on your iPhone and under your control. Deleting the app removes all of it. We have no access to any of it.
If you were the narrator: if you recorded something through a link someone sent you and want it removed, ask the person who sent the link to delete it in the app, or email support@littlevox.pro with the link you were given.
Your Yoto account: disconnecting Yoto in the app removes our access tokens from your device. Content already delivered to your Yoto library is managed by you inside Yoto's own app.
Everything the app sends travels over encrypted HTTPS connections. Credentials on your phone are stored in the iOS Keychain, the same protected storage iOS uses for saved passwords. Files on our servers are encrypted at rest and are reachable only through short-lived, single-purpose links.
No system is perfect. If you discover a security issue, please email support@littlevox.pro. We would much rather hear from you than not.
We will post material changes at littlevox.pro/privacy.html and update the effective date above. Continued use of Little Vox after changes are posted constitutes acceptance.
Little Vox
Email: support@littlevox.pro
Web: littlevox.pro