Privacy policy

Last updated: 25-09-2026

Twinvoice is a product of Amariyo, a company registered in the Netherlands.

Amariyo

Amsterdam, the Netherlands

KVK: 99359855

Email: privacy@twinvoice.io

This privacy policy explains how we collect, use, store, and protect your personal data when you use our website (twinvoice.io), our web application (app.twinvoice.io), and our AI voice coaching services. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR/AVG) and other applicable Dutch and European privacy laws.

Who we are

Amariyo is the data controller for all personal data processed through twinvoice. This means we determine why and how your personal data is processed. If you have any questions about this policy or your data, you can contact us at privacy@twinvoice.io.

What data we collect

We collect different types of data depending on how you interact with twinvoice.

Website visitors (twinvoice.io)

When you submit a form on our website (such as the contact form), we collect the information you provide: your name, email address, company name, and any message or preferences you share. This data is processed by Lovable, our website host. Requests sent through our contact form are processed by Make.com in the EU and delivered to our Google Workspace mailbox.

Account holders (app.twinvoice.io)

When you create an account on the twinvoice platform, we collect your full name, email address, password (stored as a hashed value, never in plain text), preferred language, and timezone. If you register using an invite code, we also record which code was used and who issued it.

For trainers and organisation administrators, we may additionally store a profile bio, website URL, organisation name, and logo.

Voice coaching sessions

When you use the AI voice coaching feature, the following data is processed:

• Audio of your voice during the session, which is streamed in real time to ElevenLabs for speech recognition and AI response generation. Audio is not permanently stored by twinvoice.
• Session transcripts (text records of what was said by both you and the AI) are stored in our database so you and your trainer can review them.
• Session metadata including duration, date, agent used, and dynamic variables passed to the AI (such as your name, selected scenario, or difficulty level).
• Usage data including minutes used and remaining balance.

Voice cloning (trainers)

If you are a trainer who chooses to clone your voice, we process the audio samples you upload. These samples are sent to ElevenLabs to create a digital voice model. The audio samples are stored in our EU-hosted storage. The resulting voice model is stored by ElevenLabs and linked to your twinvoice account. You retain ownership of your voice data and can request deletion at any time.

Payments

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe may collect your name, email, billing address, and payment method details. We receive from Stripe only a confirmation of payment, the amount, and a reference ID which we use to credit minutes to your account. Stripe's privacy policy is available at stripe.com/privacy.

Support messages

If you contact us through the in-app support feature, we store your message, any responses we provide, and the status of your request.

Why we process your data (legal basis)

We process your personal data for the following purposes:

• To provide and maintain the twinvoice platform and voice coaching services (legal basis: performance of a contract).
• To create and manage your account (legal basis: performance of a contract).
• To process payments and allocate minutes (legal basis: performance of a contract).
• To send transactional emails such as account confirmations, password resets, and event registration confirmations (legal basis: performance of a contract).
• To provide customer support (legal basis: legitimate interest).
• To understand how our website is used, through aggregated visit measurement by our website host (legal basis: legitimate interest).
• To comply with legal obligations such as tax and accounting requirements (legal basis: legal obligation).

We do not use your data for profiling, automated decision-making, or targeted advertising. We do not sell your data to third parties.

Voice data and biometric data

Voice data can be classified as biometric data under the GDPR, which requires additional protections. We take the following measures:

• Voice audio during coaching sessions is streamed to ElevenLabs for real-time processing and is not permanently stored by twinvoice. ElevenLabs processes voice data according to their privacy policy and data processing agreement.
• Voice cloning is always initiated by the trainer themselves, requires explicit action (uploading audio samples), and can be reversed by requesting deletion of the voice model.
• Session transcripts (text, not audio) are stored in our EU-hosted database and are accessible to the user and, where applicable, to the trainer who created the agent.
• Students are informed that they are interacting with an AI voice coach, not a human.

Where your data is stored

All twinvoice data is processed and stored within the European Union.

Note on non-EU processors: Stripe, Resend and Google are US-based companies that process some data in the United States. Our website host, Lovable, may use infrastructure outside the EU. These transfers are protected by the EU-US Data Privacy Framework, Standard Contractual Clauses, and/or the processor's own GDPR compliance measures. ElevenLabs processes voice data using servers that may be located outside the EU. We have configured our ElevenLabs integration with a data retention period of 1 day, after which conversation data is automatically deleted from their systems. Transcripts are saved to our EU-hosted database via webhook before deletion.

Our primary database (Supabase) is hosted in the EU (Paris, France), and all user account data, session records, transcripts, and usage data are stored there.

How long we keep your data

We retain your data for as long as necessary to provide our services and fulfill our legal obligations.

• Account data: retained for the duration of your account. Deleted upon account deletion request.
• Session transcripts: retained for the duration of your account unless you request earlier deletion.
• Voice cloning samples and models: retained until you request deletion or close your account.
• Payment records: retained for 7 years to comply with Dutch tax and accounting obligations.
• Support messages: retained for 2 years after resolution.
• Website visit measurement: aggregated by our website host. The session cookie expires after 30 minutes.
• ElevenLabs conversation data: automatically deleted after 1 day.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of all personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data. We will do so unless we have a legal obligation to retain it.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at privacy@twinvoice.io. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Cookies

The twinvoice marketing website (twinvoice.io) uses a small number of cookies, described in our cookie policy. Visits are measured in aggregate by our website host, Lovable.

The twinvoice web application (app.twinvoice.io) uses strictly necessary cookies for authentication and session management. These cookies are required for the platform to function and do not require consent under the GDPR. No tracking, advertising, or analytics cookies are used in the application.

For more details, see our cookie policy at twinvoice.io/cookie-policy.

Children's privacy

Twinvoice is designed for professional training and coaching purposes. We do not knowingly collect personal data from children under the age of 16 without parental consent. If a training programme involves participants under 16 (such as youth coaching programmes), the organisation responsible for the programme is responsible for obtaining appropriate consent. If you believe a child under 16 has provided us with personal data without consent, please contact us at privacy@twinvoice.io and we will take steps to delete it.

Changes to this policy

We may update this privacy policy from time to time. When we make significant changes, we will notify account holders by email and update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, contact us at:

Amariyo

Email: privacy@twinvoice.io

Amsterdam, The Netherlands