App Privacy Policy

Privacy Policy

Version 0.6 (draft) · Last updated: October 27, 2026

Zegbot Inc
9702 Pettus Creek Dr, Cypress, TX 77433, United States
support@zegbot.com

Nolia is a screen-free interactive audio player for children. This policy explains what we collect, why, and what we do not do. It is written for parents, in plain language.

Nolia is set up and managed by a parent. The app is for parents and guardians aged 18 or older; the Nolia interactive audio player (the "Player") is for the child. Your child does not have an account and cannot sign in.

1. The short version

Nolia can tell family members apart by voice — only if you set that up. You decide, per family member, whether to create a voice profile. Nothing is collected until you give permission for that person, and you can delete it at any time. Details in section 3.
We do not keep recordings of your child's conversations. Speech is turned into text to answer your child. We keep the text, not the audio. The one exception is the short sample you deliberately record when setting up a voice profile — see section 3.
Nolia remembers a little about your child - their name, age, and favorites - so conversations feel familiar. Never their school, address, or full name. Section 2 explains; you can have it deleted at any time.
We do not sell your data, and we run no advertising. We share nothing for anyone else's purposes. The only things other families can see are stories or recordings you yourself choose to publish (section 3).
We do not use your child's data to train AI models.
There are no third-party analytics or tracking tools in the app.
Your data is stored in the United States. It is kept on our servers in Virginia and shared only with the U.S. companies listed in section 3. Section 5.
You can read, delete, and stop everything from the app.

2. What we collect

From you (the parent)

Your email address, and your name if your Apple or Google sign-in provides one. Apple provides a name only the first time you sign in with Apple. If you use Apple's "Hide My Email", we receive an Apple relay address, not your own address
The name you want the app to call you, if you set or change it in Settings. It is shown only in your app and is never sent to the Player. If you have not set one, the app may call you "[child's nickname]'s parent", using the nickname from your family profile — again, only on your phone
Your app language, and the settings you choose (volume, night light, bedtime, content level, alarms)
Audio you record yourself, if you use the "record a story" feature
If you use the optional story features: what you ask for when creating a story, and the stories you save (section 3)
Only if you give a separate consent: a short recording of your own voice, used to create a voice that reads your stories (section 3)
Stories or recordings you choose to share with other Nolia parents, and the display name you choose for sharing (section 3)
Records of the agreements you accept, including which version and when

From your child's use of the Player

The text of what your child says to Nolia and what Nolia answers
Basic counts derived from that text (how many conversations, when)
A small memory profile that helps Nolia remember your child between conversations: their first name, age, grade, things they like and dislike, and things they and Nolia have done together - such as which story they heard yesterday

We do not keep audio of your child's conversations. Speech is converted to text in order to produce a reply; the audio is not retained after that.

The one exception is a voice-profile sample you deliberately record (section 3), and it is held only until you confirm or discard it.

The memory profile exists so Nolia can feel like a friend who remembers - greeting your child by name, picking up yesterday's story where it left off. It is built from your child's conversations with Nolia, and nothing else.

It never includes your child's school, home address, full name, phone number, or where their parents work. If your child mentions those, we leave them out of the profile. Section 6 says how long we keep it; you can ask to see it or have it deleted at any time.

About the Player

Device identifiers (hardware address, serial number, firmware version)
Status the Player reports: battery, charging, volume, brightness, whether the microphone is active, which character card is inserted, and which of your recordings it currently holds
Whether the Player is online, which we work out from whether it is currently connected to our servers

When the Player is not yet paired, is being set up, or you briefly turn on pairing, it broadcasts a Bluetooth name made of a fixed prefix and the last 3 bytes of its Wi-Fi hardware address — not the full address. The full address is given only to the phone that connects to it during setup, over an encrypted connection. The Player's Bluetooth address does not change, so a nearby Bluetooth scanner could recognise it as the same Player.

Family profiles (optional)

If you choose to add them: a nickname, a role (child or parent), an optional age, and interests. This is text you type. It is not a voice profile — voice profiles are a separate, optional thing described in section 3. It is used only to make Nolia's replies, and stories you create, more relevant.

3. What happens when your child speaks

Your child speaks to the Player.
The audio is sent to our servers (section 5 says where those are today).
It is converted to text, sent to an AI language provider to generate a reply, and the reply is converted back to speech.
The reply plays on the Player.

Who processes this. Your child's speech is turned into text by a speech-to-text provider. The reply is written, and the memory profile described in section 2 is built, by large language models, which we reach through our model gateway provider. The reply is turned back into speech by a text-to-speech provider. Each of these receives only what it needs to do its part — the audio for speech-to-text, the conversation text for the reply and the memory profile, and the reply text for text-to-speech. We do not permit providers to use your child's data to train their models.

If your child's voice profile is set up, the speech-to-text result also carries who was speaking, so Nolia can answer that person appropriately. Working out who is speaking happens on our own server — the voice templates are never handed to any AI provider. Section 5 says where our own server is.

Stories and music your child asks for are already stored on the Player and play from the Player itself.

The companies we use

We use one or more of the following U.S. companies for each step. We do not list which company handles which step, because that changes as we improve Nolia.

What they do	Companies	Country
Speech-to-text	Soniox, AssemblyAI, Deepgram, Microsoft (Azure), Google (Google Cloud)	United States
Text-to-speech, including the voice for your stories	Microsoft (Azure), Google (Google Cloud), ElevenLabs, Cartesia, Soniox	United States
Large language models	Anthropic, OpenAI, Google — reached through AssemblyAI's model gateway	United States
Email	GoDaddy	United States
Phone notifications	Apple (Apple Push Notification service), Google (Firebase Cloud Messaging)	United States
Hosting	Our servers, in a data center in Virginia, United States, operated by OVHcloud US (OVHcloud's U.S. subsidiary)	United States

These are the only outside companies that receive your data, and each receives only what it needs to do its part.

Voice profiles (voice recognition)

This is optional and off until you turn it on, separately for each family member.

What it is. You record a short voice sample for that person. From it we derive a mathematical template — a set of numbers. The template is what lets Nolia tell family members apart. It cannot be played back as sound.
What we ask first. We ask for that person's permission in writing, on its own screen, before anything is recorded. Declining changes nothing else about Nolia.
The sample itself. The short recording is held only until you confirm or discard it. If you leave without confirming, it is destroyed. The template is what we keep.
Where it lives. The templates are stored on our own server and the matching runs there. They are never handed to any AI provider — unlike the conversation itself, no part of a voice profile is sent out for processing. (Where that server physically sits is answered in section 5.)
What it is used for. Only to tell family members apart, so Nolia can answer each person appropriately. Nothing else.
What it is never used for. We never sell, lease, or otherwise disclose voice data. We never use it for advertising. We never use it to train AI models.
Turning it off. You can delete a voice profile at any time from the app. Deleting it destroys the template. Section 6 has the full retention and destruction schedule.

Stories you create (optional)

In the app you can ask Nolia to write a story for your family. What you ask for — such as the topic, an age range, and an interest from a family profile you pick — is sent to an AI language provider to write the story. The language provider never sees your child's name: the story is written with a placeholder, and the nickname is filled in only on our side. When the story is turned into audio, the text with the nickname filled in is sent to a text-to-speech provider. Stories are written, and the topic you typed and the finished story are checked for content that is not suitable for children, by large language models, reached through our model gateway provider. If a topic is turned down, we do not keep the text you typed. You can stop a story while it is being written; nothing written so far is kept. You can listen to a story you have just created inside the app before sending it to the Player.

Your own voice for stories (optional, separate consent)

If you choose, you can record about 20 seconds of your own voice so that stories you create are read in a voice that sounds like you. We ask for a separate consent first, and you must be 18 or older and record only your own voice — never a child's or anyone else's. The recording is sent to the voice-cloning service of a text-to-speech provider (one of the companies listed above), which creates a synthetic voice tied to your account. It is used only to read your stories: not for advertising, not sold or disclosed, not used to train AI models, and not used to identify anyone. You can delete a voice, or withdraw this consent, at any time in "My voices"; that deletes it on our servers and at the processor.

Sharing with other Nolia parents (optional)

Nothing is shared unless you choose to share it. Story Square and Audio Square may not be open in your version of the app yet.

Story Square. If you share a story you created, other Nolia parents can read it. What they see is the story text, its topic, the age range, and the display name you chose for sharing. It does not include your child's name or voice — where your child's name would appear, the reader's own app fills in a name from their own family.
Audio Square. If you share a recording you made, other Nolia parents can see its title, length, and your chosen display name, listen to it, and save it to their own Player. Please share only recordings of adult voices, never a child's voice, and nothing that may infringe someone else's copyright.
Stopping. You can stop sharing at any time; it disappears from the square right away. Copies other parents have already saved stay with them. You can report anything in the squares that should not be there.

Safety alerts

If your child says something that suggests they may be hurt, in danger, or being asked to keep a worrying secret, Nolia does not continue the conversation on that topic. Instead, it plays a short, pre-written message encouraging your child to talk to a trusted adult, and we add a notice for you in the app ("A topic worth a gentle check-in"). The notice itself does not include your child's words or the type of topic. As with other conversations, the transcript remains visible in the app's conversation history, and you can review or delete it at any time. Safety alerts are kept for a limited period and then automatically deleted, and are deleted sooner when you delete your account or withdraw your consent. If you withdraw consent, safety alerts may still be added to your app so you can check in with your child; they never include your child's words. This feature is not a monitoring or emergency service and does not contact emergency services or child-protection agencies. If you believe your child is in immediate danger, call 911.

Emails and notifications

We email you to confirm your address and about your account; these emails are sent through GoDaddy's email service. If you allow notifications, we send them to your phone — for example, to tell you a story you asked for is ready — only through Apple Push Notification service (iPhone) and Firebase Cloud Messaging (Android). To do this we keep a notification token for your phone, linked to your account; it is removed when you sign out. A notification carries only a short message and a reference to the story, never your child's voice. You can turn notifications off at any time in your phone's settings.

4. What we do not do

No voice recognition unless you switch it on, per family member — and no voice-profile data leaves our own server. See section 3.
No advertising, and no advertising identifiers.
We do not sell your data, and we do not share it for anyone else's purposes.
No model training on your child's data.
No third-party analytics, tracking, or attribution tools in the app.

5. Where your data is stored

Your data is stored only on our servers in Virginia, United States, in a data center operated by OVHcloud US, OVHcloud's U.S. subsidiary. Our own databases, files and voice-profile matching run there. Your data is shared only with the U.S. companies listed in section 3, and only for the steps described there.

Data is encrypted in transit and at rest, with one exception you should know about, described in section 7.

Your data belongs to your account, not to the Player. Unpairing the Player does not delete anything.

6. How long we keep it

What	How long
Conversation text	90 days, then deleted automatically
The memory profile described in section 2	Likes and your child's name: 90 days after they last come up. Things they and Nolia did together: 90 days. Deleted sooner when you delete the source conversation, withdraw your consent, or delete your account
Conversations you star	Kept until you delete them
All conversations, if you turn on "Keep everything"	Kept until you turn it off or delete them
Your own recordings	Until you delete them
Stories you create and save	Until you delete them or your account
Your own voice for stories (section 3)	Until you delete it, withdraw that consent, or delete your account — and in any case deleted automatically after 12 months without use
Stories or recordings you share	Shown until you stop sharing or delete your account. Copies other parents already saved stay with them
Account details	While your account exists
Safety alerts (section 3)	Kept for a limited period, then deleted automatically. Deleted sooner when you delete your account; alerts from before you withdraw your consent are deleted when you withdraw it
Records of the parental consent you give, and any withdrawal	At least 2 years, because the law requires it — kept even after you delete your account

If you turn "Keep everything" back off, anything older than 90 days that is not starred is deleted after a 7-day grace period, and we tell you first. Turning on "Keep everything" does not extend how long the memory profile is kept.

Biometric data (voice) — retention and destruction schedule

This applies to any voice profile you choose to create (section 3). We ask for that person's permission in writing before anything is recorded, and this published schedule applies from that moment:

A voice profile is deleted as soon as you withdraw consent, delete that family profile, or delete your account
It is deleted once it is no longer needed for the purpose you agreed to
In any case, no later than 12 months after it was last used
We never sell, lease, or otherwise disclose voice data

7. Deleting things — including what we cannot delete

You can delete a single conversation, clear all of them, delete a recording, a story, or a voice you created for stories, stop sharing anything you shared, or delete your whole account, from the app.

Four things we want to be straightforward about:

Recordings you sent to the Player. When you delete one, the Player removes its copy the next time it connects to the internet. A Player that never connects again keeps its copy.
Recordings on the Player's memory card are not encrypted. Someone who removes the card can read them.
A recording that is only on your phone and was never uploaded cannot be recovered once you delete it.
Things you shared that other parents saved. Stopping sharing, or deleting your account, removes them from the squares, but copies other parents already saved stay with them.

Deleting your account takes effect after a 7-day grace period. During those 7 days, signing in again cancels the deletion. After that, your data is deleted, except the record of agreements described in section 6.

8. Your controls

From the app you can:

Read and delete conversations, one at a time or all at once
Turn the AI conversation feature off entirely
The microphone switches itself off after the Player sits idle for about five minutes (about 30 seconds in night-light mode) — this cuts the microphone's bias power and stops it picking up sound. A red light shows it is off; press the button once to talk again. This happens automatically; the timing is not adjustable from the app yet
Add or remove family profiles
Create or delete a voice profile for a family member (deleting it destroys the template)
Delete a voice you created for stories, or withdraw that consent
Stop sharing a story or recording
Change or clear the name the app calls you
Withdraw your consent, and delete your account

Turning something off does not delete what came before; deleting does.

9. Children's privacy and parental consent

Nolia is designed for children aged 3 to 10 and is set up by a parent or guardian.

Before your child uses the Player, we ask you for consent, separately from accepting the Terms of Service. We verify that you are the parent by confirming your email address. We record which agreement you accepted, the version, the date, and how consent was obtained, and we keep those records for at least 2 years.

You may, at any time:

See what we have collected from your child
Delete it
Withdraw your consent and stop any further collection

If you withdraw consent, we stop collecting and delete your child's information (family members, conversations, and memories), and anything about your child is removed from story text you have shared. Nolia will not be able to talk with your child again until you give consent again. We keep the record of your consent and its withdrawal, as described in section 6. To do any of these, use the app or email support@zegbot.com.

We do not condition your child's use of Nolia on giving us more information than we need to run it.

10. California residents

If you live in California, you may request a copy of the personal information we hold about you, ask us to delete it, and ask us to correct it. We do not sell or share personal information, including for cross-context behavioural advertising. We will not treat you differently for exercising these rights. Email support@zegbot.com.

This section is about your information as a parent. Your child's information is covered in section 9.

11. Security

We encrypt data in transit and at rest, restrict access to the people who need it, and issue each Player its own credentials rather than a shared default password. The exception is the Player's memory card, described in section 7.

No system is perfect. If a breach affects your information, we will notify you and the relevant authorities as required by law.

12. Changes

If we make a material change to what we collect, how we use it, or who receives it, we will ask you to agree again before the change applies to your family. Smaller wording changes are published with a new version number and date.

13. Contact