Privacy Policy
Last updated: 30 September 2026
This policy explains what personal data vox1.ai collects, why, who it is shared with and what rights you have. We try to collect as little as we need to run the site.
1. Who we are
vox1.ai is run by Sergei Iartsev, an individual based in Dubai, United Arab Emirates ("we", "us"). We are the controller of the personal data described here. For anything about your data, write to privacy@vox1.ai.
2. What we collect and why
Browsing without an account
You can read every tree and lesson without signing up. Our servers receive the technical data every website receives: your IP address, browser and device type, the page requested and the time. We use it to deliver pages, keep the service secure and fix problems, and keep server logs only for a limited period.
Your account
- Email and password sign-up: your email address and your password. The password is stored by our backend in hashed form, not as readable text.
- Sign-in with Google (or another provider we offer): the provider tells us your email address, whether it is verified, your name, your profile picture URL and your account ID with that provider. We never receive your provider password.
- Learning progress: which skill nodes you have marked as learned and when, so we can show your progress in each tree.
Emails
When you create an account we send a welcome email. We may also send occasional emails about new trees, nodes and lessons. Every such email has an unsubscribe link, and you can unsubscribe at any time without affecting your account. If you write to us, we keep the conversation so we can reply.
Analytics (only if you accept)
If you click Accept in the cookie banner, we use Google Analytics 4 to understand how the site is used: which pages and trees are visited, when someone signs up or logs in, and when a node is marked as learned (with the tree and node it belongs to). Google Analytics also records your device, browser, approximate location (country or city) and how you reached the site. If you are signed in, we send your internal account ID (a random identifier, never your email address) so that visits from your phone and laptop count as one person. Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics for advertising: advertising features and signals are turned off. If you click Reject, the Google Analytics script is not loaded at all.
3. Legal bases
Where laws such as the EU or UK GDPR apply, we rely on:
- Contract: running your account and tracking your progress, as you asked us to.
- Legitimate interests: keeping the service secure and working (server logs, strictly necessary cookies), answering your messages, and emails about new content for our users, which you can unsubscribe from at any time.
- Consent: analytics cookies. You can withdraw consent at any time (see Cookies).
4. Who we share data with
We do not sell your personal data. We share it only with service providers that help us run vox1.ai:
- Hosting provider: runs the servers that host the site and store its data.
- Email delivery provider: sends our emails.
- Google: sign-in with Google (if you use it), Google Analytics (only if you accept analytics cookies), and Google Fonts. Our pages load fonts from Google's servers, so your browser sends your IP address to Google when a page loads.
We may also disclose data when the law requires it, or to protect the rights and safety of our users or of vox1.ai.
5. International transfers
We are based in the UAE, and our providers may process data in other countries, including the United States. Where data from the EU, UK or another region with transfer rules leaves that region, we rely on the safeguards the provider offers, such as Standard Contractual Clauses or the EU–US Data Privacy Framework.
6. How long we keep data
- Account and progress: as long as your account exists. When you ask us to delete your account, we delete this data within 30 days, except where the law requires us to keep it longer.
- Server logs: a limited period for security and troubleshooting, then deleted.
- Google Analytics data: 14 months, after which Google deletes it.
- Emails you send us: as long as needed to handle your request.
7. Cookies
Cookies are small files your browser stores for a website. We use strictly necessary cookies, which the site cannot work without, and analytics cookies, which are set only if you accept them.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
vox1_token, vox1_refresh | Keep you signed in | Strictly necessary | When you log out or your session expires |
vox1_email | Shows which account you're signed in with | Strictly necessary | With your session |
vox1_consent | Remembers whether you accepted or rejected analytics cookies | Strictly necessary | 6 months |
vox1_ga_events | Passes a sign-up or login event to Google Analytics across a redirect | Analytics (only if accepted) | 60 seconds |
_ga, _ga_5BSLEM7VDS | Google Analytics: tell visits and visitors apart | Analytics (only if accepted) | 2 years |
You can change your choice at any time with Cookie settings at the bottom of every page. If you withdraw consent, we stop analytics and delete the Google Analytics cookies. You can also block or delete cookies in your browser settings, but blocking the strictly necessary ones will sign you out.
8. Your rights
Depending on where you live (for example under the EU or UK GDPR, or the UAE Personal Data Protection Law), you may have the right to:
- get a copy of your personal data;
- correct data that is wrong;
- have your account and data deleted;
- receive your data in a portable format;
- object to, or ask us to restrict, how we use your data;
- withdraw consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, write to privacy@vox1.ai from the email address on your account. We will reply within 30 days. If you think we have mishandled your data, you can also complain to your local data protection authority.
9. Security
The site is served only over HTTPS. Sign-in tokens are kept in cookies that browser scripts cannot read. No online service is perfectly secure, but we take reasonable measures to protect your data, and we will tell you if a breach affects you where the law requires it.
10. Children
vox1.ai is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
We will update this page when our practices change and change the date at the top. If the changes are significant, we will tell signed-up users by email or on the site before they take effect.
12. Contact
Sergei Iartsev, Dubai, United Arab Emirates, privacy@vox1.ai