Spone Labs
SponeLabs

Laatst bijgewerkt: april 2025

Privacybeleid

At Spone Labs, we take your privacy seriously. This policy transparently explains how we collect, process, and protect your personal data across our applications and services. We comply with GDPR, CCPA, and applicable global data protection frameworks.

1. Data Controller

This privacy policy applies to the applications Spone AI, Fortale, Vocesyo, Notedyo, and Voxnela, as well as the sponelabs.com website, operated by Spone Labs ("we", "us", "company"). As the data controller, we are responsible for the processing of your personal data. Contact: hello@sponelabs.com

2. Personal Data Collected

When you use our services, the following data may be processed: • Account Data: Email address, username, password (stored encrypted) • Usage Data: In-app interactions, preferences, feature usage statistics • Device Data: Device model, operating system version, app version, unique device identifiers • Content Data: Content you create, upload, or process (notes, voice recordings, analysis reports, stories, etc.) • Payment Data: Subscription transactions are handled via third-party providers (Apple App Store, Google Play); we never store card numbers • Analytics Data: Anonymous usage metrics via Firebase Analytics • Communications: Support requests or feedback sent to us

3. Legal Basis and Purposes of Processing

Your data is processed under the following legal bases and purposes: • Performance of Contract: Delivering features, managing accounts, technical support • Legitimate Interests: Enhancing service reliability, security measures, fraud prevention • Explicit Consent: Opt-in marketing communications, personalized content recommendations • Legal Obligation: Compliance with applicable laws and regulatory reporting

4. Data Retention and Security

We retain personal data as long as your account remains active and in accordance with statutory retention obligations. If you delete your account, your data will be permanently wiped within 90 days. Security standards: • All data transmissions are protected by SSL/TLS encryption • Stored data is safeguarded with industry-standard AES-256 encryption • Strict access controls and periodic audits are enforced • In case of a breach, relevant authorities and affected users are notified within mandatory timeframes

5. Third-Party Data Sharing

We never sell or share your data with third parties for marketing purposes. Disclosures occur solely in the following cases: • Infrastructure Providers: Firebase (Google) for analytics and backend; Cloudflare for CDN and edge protection; Apple/Google for distribution and payments • Legal Compliance: Court orders or valid lawful government requests • Corporate Transfers: In case of merger or acquisition, users will receive advance notification All processors are bound by strict Data Processing Agreements complying with GDPR.

6. International Data Transfers

Our infrastructure operates on global cloud networks situated in the European Union and the United States. International transfers rely on standard contractual clauses (SCCs) and Data Privacy Framework (DPF) adequacy mechanisms to safeguard your rights.

7. Cookies & Tracking Technologies

Our website utilizes minimal necessary cookies to ensure basic functionality, remember language preferences, and gather aggregated anonymous analytics (Firebase Analytics). You can manage or disable cookie preferences in your browser settings anytime.

8. User Rights

Under GDPR, KVKK, CCPA, and applicable laws, you hold the following rights: • Right to Access: Request a copy of your processed personal data • Right to Rectification: Correct inaccurate or incomplete records • Right to Erasure ("Right to Be Forgotten"): Request deletion under qualifying terms • Right to Restrict Processing: Limit how we handle your data • Right to Data Portability: Receive data in a structured, machine-readable format • Right to Object: Challenge processing rooted in legitimate interests • Right to Withdraw Consent: Revoke previously granted permissions at will To exercise any right, contact us at hello@sponelabs.com. Requests are addressed within 30 days.

9. Children's Privacy

Our services are not intended for children under 13 (or under 16 where local regulations stipulate). We do not knowingly collect personal data from minors. If you believe a child has provided us data, please contact hello@sponelabs.com for prompt deletion.

10. Artificial Intelligence and Content Handling

Our applications incorporate AI features. User content submitted to AI systems (voice recordings, text, documents) is processed transiently to deliver features and is not used to train public foundation models. Transcriptions and AI outputs remain securely tied to your user account.

11. Policy Changes

We may revise this privacy policy from time to time. For substantial updates, notifications will be provided at least 30 days beforehand via email or in-app notices. Continued use after changes indicates acceptance.

12. Contact and Inquiries

For questions, requests, or concerns regarding your privacy: Spone Labs Email: hello@sponelabs.com Support: support@sponelabs.com You also retain the right to lodge a complaint with your jurisdiction's competent data protection authority.

Last updated: April 2025. This privacy policy was formulated to clearly reflect our operations across Spone AI, Fortale, Vocesyo, Notedyo, and Voxnela.