Timbr · Elfion Mobile · Effective July 29, 2026
Timbr (iOS/Android package identifier app.timbr.timbr) is a voice measurement and training application published by Elfion Mobile (“we”, “us”, “our”). This Privacy Policy describes how we collect, use, store, share, and protect information when you use Timbr (the “App”) and related services (including our API at domains such as api.timbr.app or our Cloudflare Workers endpoints).
By downloading, accessing, or using Timbr, you agree to this Policy. If you do not agree, do not use the App.
This Policy applies to personal data processed in connection with Timbr on mobile devices and our backend infrastructure. It does not cover third-party websites, stores (Apple App Store / Google Play), or services that we do not control, even if linked from the App.
Controller / publisher contact: Elfion Mobile · elfionmobi@gmail.com
| Category | Examples | Purpose |
|---|---|---|
| Account | Anonymous user ID; optional Apple/Google identity later | Provide the service, sync scores & plans |
| Voice audio | Short WAV/recording you submit (~6–20 seconds) | Generate voice scores and training plan |
| Profile inputs | Voice-range calibration, goals, optional age band | Calibrate scoring & personalize copy |
| Results | Scores, metrics, tips, 7-day plan, progress | Show history / plan inside the App |
| Subscriptions | Entitlement status via store + RevenueCat | Unlock Pro features; restore purchases |
| Device / prefs | Language, theme, onboarding flags | UX preferences on device |
| Diagnostics (optional) | Firebase Analytics / Crashlytics when enabled | Stability & product improvement |
If you subscribe to Timbr Pro, payment is processed by Apple or Google. We receive entitlement/status information (and related subscription metadata) through RevenueCat and/or store APIs so we can unlock Pro features. We do not receive or store your full payment card number.
Audio retention commitment: Voice files are stored temporarily (private object storage such as Cloudflare R2) for analysis, then deleted after processing. Lifecycle rules provide an additional automatic delete window (for example within about 24 hours). We do not operate Timbr as a permanent voice recording library.
We do not sell your personal information. We do not use your voice recordings to train third-party foundation models for unrelated products unless we clearly disclose a change and obtain any consent required by law.
Where GDPR-style rules apply, we process data under one or more of: performance of a contract (providing the App you requested); legitimate interests (security, product improvement, fraud prevention—balanced against your rights); consent where required (e.g., certain analytics or optional permissions such as microphone); and legal obligation when we must retain or disclose information.
Recordings are uploaded to our backend (Cloudflare Workers with temporary object storage and a processing queue). Acoustic features are extracted and scored on our infrastructure using deterministic signal-processing code that we operate. Results and plans are stored in our database (Supabase/Postgres).
No third-party AI analysis. Timbr does not send your voice recordings to third-party generative AI or speech-AI providers (for example OpenAI, ChatGPT, Google Gemini, Anthropic, Deepgram, or similar). Voice scoring is performed on Timbr’s own backend. Optional future features (for example speech-to-text for pace/filler analysis) would be disclosed in this Policy and, where required, in the App before use.
Not medical advice. Timbr is for training and entertainment. It is not a medical device and does not diagnose, treat, or cure any condition.
We share data with vendors who process it on our instructions to operate Timbr:
These providers may process data in the United States or other countries. Where required, we rely on appropriate transfer mechanisms offered by those providers (such as Standard Contractual Clauses).
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).
Uninstalling the App removes local device data but does not automatically erase server-side records tied to your user ID. Use in-app Delete account (when available) or contact us as described below.
Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.
Microphone: You can deny or revoke microphone permission in system settings; scoring will not work without it.
Marketing: We do not currently run third-party ad networks inside Timbr.
Timbr is not directed to children under 13 (or the higher age required in your region for digital consent). We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided data inappropriately, contact us and we will take reasonable steps to delete it. In-app age gates may apply for compliance.
We use HTTPS in transit, access controls for production systems, private object storage for temporary audio, and least-privilege service credentials. No method of transmission or storage is 100% secure; we encourage you to use up-to-date devices and protect your store accounts.
If you use Timbr from outside the country where our servers or providers operate, your information may be transferred across borders. By using the App you understand those transfers may occur as described in this Policy.
We may update this Privacy Policy from time to time. The “Last Updated” date will change when we do. Material changes may be highlighted in the App or store listing. Continued use after an update constitutes acceptance of the revised Policy where permitted by law.
Privacy questions, data-subject requests, or deletion requests:
Last Updated: July 29, 2026
Version: 1.2
Publisher: Elfion Mobile