Privacy
Last updated 4 October 2026
Voxfero is a courier, not a notebook. A save passes through, is delivered to a folder you choose, and our copy is deleted. This policy says exactly what that means: what we handle, why, for how long, who else is involved, and what you can ask of us.
Who is responsible
Layer Cache, S.L. (NIF B22519524), Calle Almirante Cadarso 26, 0, 2, 46005 València, Spain, is the controller of the personal data described here. Write to legal@layercache.com about anything in this policy.
How a save travels
Saves from ChatGPT. When you ask ChatGPT to save something to Voxfero, ChatGPT sends the title and text to our server. The server seals them to your iPhone’s key straight away, in memory, and stores only the sealed copy. We never store your text in a readable form, and we can’t open the sealed copy: only your iPhone has the key. Your iPhone collects it, opens it, writes it into your folder, and tells us it’s done; we then delete the sealed copy.
ChatGPT also sends an anonymous identifier for the conversation the save came from. It’s sealed with the text, so only your iPhone can read it.
Saves with Siri. These are written on your iPhone and never reach our server.
Your notes. Once delivered, a note lives in iCloud Drive or on your iPhone, under Apple’s terms and your control. We don’t have a copy.
What we keep, why, and for how long
| What | Why | How long |
|---|---|---|
| Your account: email address, or the private relay address and name Apple gives us if you sign in with Apple; a password hash if you use a password | To give you an account and deliver to it (contract) | Until you delete your account |
| Sign-in sessions, with the IP address and device type they were made from | To keep you signed in and spot misuse (contract; legitimate interest in security) | 90 days after last use, or until you sign out |
| ChatGPT’s access to your account | So ChatGPT can send saves for you (contract) | Until you disconnect it or delete your account |
| Your iPhone: its public key, app version, a push notification token, and the name of the folder you chose | To know where and how to deliver (contract) | Until you remove the phone or delete your account |
| Sealed saves waiting for your iPhone | To deliver them (contract) | Until delivered, or 7 days, then deleted |
| A record of each delivery: when, its size and state, never its contents | So you and ChatGPT can see what happened to a save (contract) | 30 days |
| A keyed fingerprint of each save | So the same save isn’t delivered twice. It can’t be turned back into the text (contract) | 2 minutes |
| Request records: account, time, which tool or screen, outcome, and app or ChatGPT version | To keep the service running and fix faults (legitimate interest) | 14 days |
| IP addresses for rate limiting | To protect the service from abuse (legitimate interest) | Counters reset every minute |
| Your free saves count and subscription status, with Apple’s transaction identifiers | To apply the free allowance and your subscription (contract; legal obligation for records we must keep) | While you have an account, and longer only where tax law requires it |
Deleted data can stay in our hosting provider’s encrypted backups for up to 30 days before it’s gone for good. A sealed save in a backup is still sealed to your iPhone’s key.
We don’t sell your data, use it for advertising, build profiles, or make automated decisions about you.
Payments
Subscriptions are bought through Apple’s App Store. Apple handles the payment and your card details; we only learn that a subscription exists, its plan, and its status.
This website
voxfero.com doesn’t use cookies, analytics or trackers, and its fonts are served from our own site. Like any website, the server that delivers the pages processes your IP address and browser details to do so, and its provider keeps short-lived logs for security.
Who else is involved
- Cloudflare, Inc. hosts our server, database and website and processes data on our behalf under a data processing agreement.
- Apple provides Sign in with Apple, push notifications, App Store purchases and iCloud Drive. Apple handles that data under its own privacy policy.
- OpenAI runs ChatGPT. Your conversations with ChatGPT, including anything you ask it to save, are covered by OpenAI’s privacy policy. We receive only what ChatGPT sends to Voxfero when you ask it to save.
Anyone who processes data for us must protect it at least as well as this policy does. We share personal data with authorities only when the law requires it.
Where your data is stored
Cloudflare may store and process data in the United States and other countries outside the European Economic Area. Those transfers rely on the EU–US Data Privacy Framework, under which Cloudflare is certified, and on the European Commission’s Standard Contractual Clauses in Cloudflare’s data processing agreement.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to legal@layercache.com and we’ll answer within a month.
You can delete your account yourself in the app, under Settings. Your account, devices and anything still waiting are deleted, and ChatGPT’s access ends. Notes already in your folder are yours and stay where they are.
If you think we’ve handled your data wrongly, you can complain to the Spanish Data Protection Agency, aepd.es, or the data protection authority where you live.
What you have to give us
Saving from ChatGPT needs an account, so we need an email address or Sign in with Apple. Saving with Siri works without one.
Age
Voxfero is for people aged 16 and over.
Security
Saves are sealed with HPKE (RFC 9180) to a key that never leaves your iPhone. Traffic is encrypted in transit, and access to our systems is limited to the people who run them.
Changes
If we change this policy in a way that matters, we’ll say so in the app before the change takes effect. The date at the top shows the latest version.