Privacy.
We wrote this ourselves, in the same words we use everywhere else, because a privacy policy nobody reads protects nobody.
The short version: the recordings are yours and the people who left them. We keep them in private storage and hand your phone a link that works for a few minutes and then stops. We do not sell anything about you. We do not advertise to you. We do not listen to your recordings, we do not transcribe them, and we do not run anything over them to work out what they say or who is speaking. We never will. The longer version is below, and it says the same thing with the details filled in.
Who we are
Vocette is made by Stillnus, a part of House of Troy Enterprises LLC, in California. You can reach a person at hello@stillnus.com.
What we collect, and why
If you leave a voice
The recording itself, and a photograph if you choose to add one. The name you type, so the person keeping the heart knows who spoke. A short note, if you write one. Your email address, only if you give it, and only so that you hear it if they answer you. Nothing else. You do not need an account, and we do not ask you to make one.
If you keep a heart
Your email address, so you can sign in and so a copy of every voice can reach you. Your first name, if you give it. Your phone number and your time zone, only if you ask us to text you when a new voice arrives. Whether you asked for occasional notes from Stillnus. A record of which phones you have signed in on, shown by kind (“iPhone”, “Browser”) and when each was last used, so you can cut one off if you lose it.
When you tick a box to let us text you, we store the exact sentence you agreed to, word for word, alongside the time you agreed. That is how we can show you later what you actually said yes to.
If you find a heart and write to us
The note you write and the way you ask to be reached. We pass it to the person who keeps the heart. We never show them your details unless you write them yourself, and we never show you theirs. We keep that note for ninety days so they can reach you, and then we delete it.
What the software records by itself
A short log of things that happened to a heart: it was tapped, a voice was played, a voice was recorded, it was claimed. We use it to answer “did my message go through” and to spot abuse. It is kept for ninety days. Our hosting and email providers keep their own delivery and server logs, described below.
We do not use advertising trackers, analytics pixels, or third-party cookies. The only thing we store in your browser is what makes the product work: a sign-in token for a phone you told us to remember, and a small note of which voices you have already heard, which stays on your phone and never reaches us.
What we never do
- We do not sell or rent personal information, and we never have.
- We do not listen to, transcribe, analyse, or train anything on your recordings.
- We do not use voice to identify or recognise anyone, ever. No voiceprints, no face recognition.
- We do not show you advertising, and we do not let anyone else advertise to you through us.
- We do not ask what a recording is about, or why you bought the heart.
Who else touches it
Four companies, each doing one job, each under a contract that says they work for us and not for themselves:
- Supabase keeps the database and the audio files, on servers in the United States.
- Vercel runs the website itself and keeps short server logs.
- Resend sends our email, which means it handles the message and the address it goes to.
- Twilio sends text messages, if you asked for them, and handles your STOP reply.
That is the whole list. If it ever changes, this page changes first. We may also hand over information if a law or a valid court order requires it, and if someone ever buys this business, the promise on our promise page goes with it, in writing, unchanged.
How long we keep things
| Recordings and photographs | For as long as the heart is kept with us, and at least ten years from the day each was recorded. After ten years we write and ask whether to carry on; if nobody answers twice, months apart, we delete them. Gone within thirty days of a deletion request. |
|---|---|
| Your account details | As long as you keep the account, plus thirty days. |
| Sign-in codes | One hour. |
| Remembered phones | Four hundred days from last use, or immediately when you cut one off. |
| Text message consent records | Five years after the last message we send you, because the law that governs texting gives people four years to bring a claim. |
| A request to stop texting | Kept indefinitely. It is the only way we can be certain never to text that number again. |
| Lost-and-found notes | Ninety days after we pass them on. |
| An email left for a reply | Deleted with the voice it belongs to, or after two years with no reply, whichever comes first. |
| The event log | Ninety days. |
| Server and delivery logs | Thirty days at our hosting provider. Our email and text providers keep their own, and we set those to the shortest their service allows. |
| Backups | Thirty days. |
| Order and tax records | Seven years, because tax law requires it. This one survives a deletion request. |
Two honest notes about deletion. When we delete something it leaves the live system straight away, but it sits in our backups until they roll off, up to thirty days. And the order record stays, because we are not allowed to throw it away.
What you can ask for
You do not need to cite a law, and we do not charge for any of this.
- Your recordings. Every voice that arrives comes with a link to save your own copy, and there is a save link on every voice on your heart. Ask us and we will send you the lot.
- To know what we hold. Write to us and we will tell you, in plain words.
- To correct something. Your name, your email, your phone number: write to us, or change it when you next sign in.
- To delete everything. There is a “Close your account and delete your voices” control at the bottom of your heart when you are signed in. It deletes the recordings, the photographs, and your details, for good.
- To remove one voice. Whoever keeps the heart can take any recording out of it, and the file goes with it.
- To stop hearing from us. Every email we send has an unsubscribe link. Reply STOP to any text. Sign-in codes and the notices this service depends on are not marketing, so those keep coming while you have an account.
Write to hello@stillnus.com. We answer within thirty days, usually the same week. If the request is about an account, we will send a code to the email on it first, because we are not going to hand someone’s recordings to a stranger who asks nicely.
Children
Vocette is made for adults and sold to adults. You have to be eighteen to buy a heart or to keep an account. Anyone can leave a voice in one, and children often do, because that is a large part of what this is for.
A recording of a child’s voice is that child’s personal information under the federal children’s privacy rule. So here is exactly how we treat one.
Who hears it. The person who keeps that heart, and anyone they have signed in on their own phones. That is the only person we give it to, and playing it to them is the entire reason the recording exists. We give it to nobody else: not advertisers, not data brokers, not anyone who asks. The companies that store it and send our email are listed above, and they act only on our instructions.
What we take. The recording. A photograph, if they choose to add one. The name they type. A short note, if they write one. An email address, only if they give it, and only so they hear it if someone answers. Nothing else. We do not ask for a birthday, because asking would mean keeping one. We do not track anyone, of any age, across anything. We do not make a voiceprint and we never will.
Why we keep it, and for how long. We keep a child’s recording for one reason: so that the person who keeps that heart can listen to it. That is the whole business need and there is no other. We keep it for as long as that heart is kept with us and for at least ten years. After ten years we write to the person who keeps it and ask whether to carry on, and if nobody answers twice, months apart, we delete it. We do not keep any recording with no end in sight.
If you are a parent or guardian. Write to hello@stillnus.com and tell us which heart, and which recording, as best you can. You can ask what we hold about your child, ask us to delete it, and tell us never to take anything from them again. We will do all three, we will not charge you, and we will not ask the person who keeps the heart for permission. We will write back to the same address to confirm it is you, and that is the only hoop.
If a child under thirteen has given us something on their own, tell us and we will delete it.
Where this applies
We sell and ship within the United States only, and everything is stored in the United States. We are not set up to sell to the United Kingdom or the European Union yet.
Do Not Track
Some browsers send a “Do Not Track” signal. There is no agreed standard for what a website should do with it. We do not track you across other websites in the first place, so there is nothing for the signal to switch off. We do not let anyone else track you here either.
If something goes wrong
If recordings or personal details are ever exposed, we will tell the people affected directly, by email, and we will say what happened and what we did about it. We will not wait to be asked, and we will not bury it in a notice nobody sees.
Changes to this page
If we change something small, we update this page and change the date below. If we change something that matters, we will email everyone who keeps a heart before it takes effect. The promises on our promise page are not something we can quietly edit away: they are part of what you bought.
In effect since September 17, 2026.