VoluMe

Privacy Policy

Last updated: 21 June 2026 · Data controller: [Company Name], [registered address] (“we”, “us”, “our”). Contact for data protection queries: [email address].

Draft for legal review. This page reflects the current free, no-account version of VoluMe. It has not yet been reviewed by a solicitor and should not be relied upon as final until that review is complete and the bracketed placeholders above are filled in.

This Privacy Policy explains what personal data we collect when you use VoluMe (the “Service”), why we collect it, and your rights in relation to it. We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. What We Collect

1.1 No account, no email

VoluMe does not require you to create an account, and we do not collect your name, email address, or any contact details. Instead, an anonymous identifier (a randomly generated code) is created and stored in your browser’s local storage the first time you use the Service. This identifier allows your personalisation profile to persist between visits on the same device and browser. It is not linked to any other identifying information, and we have no way to connect it to you personally.

When you choose an audio file to play, a copy of that file is saved to your browser’s Origin Private File System (OPFS) — a sandboxed storage area that is part of your browser, not our servers. This means the file is available automatically on your next visit without you having to pick it again. The file never leaves your device. You can remove it at any time by tapping the back button in the player and choosing to change the file, or by clearing your browser’s site data for this page.

1.2 Service usage data

Volume adjustment events: timestamps and magnitude of volume changes you make during playback.
Audio signal measurements: frequency-band energy levels derived from the audio you are playing at the moment of each adjustment, used solely to provide the adaptive personalisation feature.
Derived personalisation profile: a numerical profile generated from the above, used to apply sound correction to your future listening sessions.
Optional feedback: if you respond to the in-app prompt asking whether the Service is helping, we store your rating and any comment you choose to provide, linked to your anonymous identifier only.
Device and technical information: IP address, browser type, and similar diagnostic data collected automatically by our hosting infrastructure.

We do not collect, upload, or have access to the content of the audio files you play. Audio files you choose are processed for playback entirely on your own device. Only the frequency-band measurements described above — numbers describing how much energy is present in seven broad frequency ranges at a given moment — are sent to our servers. These measurements do not allow reconstruction of the original audio and reveal nothing about its content, only its coarse spectral shape at each moment.

2. Why We Process This Data

We process personal data for the following purposes and on the following legal bases under UK GDPR:

To provide the Service (performance of a contract / legitimate interests) — including generating and applying your personalisation profile.
To understand whether the Service is useful (legitimate interests) — using aggregate session counts, return usage, and optional feedback ratings to evaluate and improve the Service. We do not use this data for advertising.
To maintain and secure the Service (legitimate interests) — including diagnosing technical problems.
To comply with legal obligations (legal obligation) — where required by law.

3. How Long We Keep Your Data

We retain your personalisation profile and session history for as long as you continue to use the Service from the same device, and for up to 12 months of inactivity, after which it is deleted. You can request earlier deletion at any time (see Section 6) by providing your anonymous identifier, which you can find by [TO BE SPECIFIED — e.g. an in-app “view my data” link, not yet built].

4. Who We Share Data With

We do not sell your personal data. We share data only with the following categories of recipient:

Cloud hosting provider — to run the Service and store the data described above.
Legal and regulatory authorities — where required by law, or to protect our legal rights.

We do not share the technical details of how the personalisation algorithm operates with any third party, including our hosting provider, except where strictly necessary to operate the infrastructure and under confidentiality obligations.

The Service is currently free and does not involve any payment processor. If paid features are introduced in the future, this policy will be updated before that happens to describe any payment data involved.

5. International Transfers

Where our hosting infrastructure is located outside the UK, we ensure data is protected through adequacy regulations, Standard Contractual Clauses, or other lawful transfer mechanisms recognised under UK GDPR.

6. Your Rights

Under UK GDPR, you have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request deletion of your data (“right to be forgotten”);
request a portable copy of your data;
object to or restrict certain processing; and
withdraw consent at any time where processing is based on consent.

Because we hold no name or email address, exercising these rights requires you to provide your anonymous identifier so we can locate your data. To exercise any of these rights, contact us at [email address]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) if you believe we have not handled your data appropriately.

7. Children’s Privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls on our systems, and confidentiality obligations on anyone with access to the underlying technology of the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time, including when the Service changes (for example, if account creation or payment features are introduced). Material changes will be notified by an in-app notice before they take effect.

10. Contact

For any questions about this Privacy Policy or to exercise your data protection rights, contact [email address]. Our data controller registration with the Information Commissioner’s Office (if applicable) is [REGISTRATION NUMBER].