Privacy Policy.

who we are

88088 is a small app that lets you record an affirmation in your own voice and loop it over a music bed while you sleep. This policy explains what data we hold and why. Questions: support@88088.app.

what we collect

• Email address — to create your account and sign you in.
• Your recordings and titles — the audio you record and the titles you give them.
• Transcripts of your recordings — when you use a feature that needs to read the words you spoke (e.g. AI title suggestions, captions), we send the audio to a speech-to-text provider and store the resulting text against your recording.
• Your composition settings — music bed, voice effect, volume, sleep-timer preference.
• Subscription & purchase history — trial / active / cancelled state, product purchased, price, currency, transaction identifiers from Apple, Google, or our web payment processor.
• A pseudonymous user identifier — a random ID linking your device to your account so we can restore your subscription on reinstall and across devices.
• Language preference — the interface language you pick.
• Basic device & app context — app version, OS version, country, and IP address at the moment of a purchase or sign-in, used for fraud prevention and to deliver the correct content. We do not build a long-term profile from this.
• Attribution data, if you arrived via a campaign or referral link — the campaign, channel, or referrer identifier (for example an Apple Search Ads token, an affiliate code, or a partner ID). Used solely to attribute the install and pay referral commissions.

what we do not collect

No advertising identifiers (IDFA). No location data. No contacts, photos, health data, or browsing history. No device fingerprints. We do not sell your personal data. We do not use your recordings, titles, or settings to target ads, and we do not allow our voice or speech providers to use your recordings, transcripts, or cloned voices to train their models.

tracking (App Tracking Transparency)

88088 does not track you across other apps or websites owned by other companies. If we ever introduce a feature that would require tracking under Apple's ATT framework, we will prompt you with the system permission dialog and will not enable tracking unless you allow it.

how we use it

Only to provide the service: authenticate you, store your library, play your recordings back to you, manage your subscription, prevent fraud, and — if applicable — credit the referrer who sent you. We do not use your data for advertising.

microphone

The microphone is only active while you tap record. Audio is uploaded only when you press save. Nothing is streamed in the background. Once saved, your recording is stored in our private Lovable Cloud bucket; it is only sent on to ElevenLabs when you trigger a voice feature (title suggestion, transcription, voice cloning, or text-to-speech playback).

voice cloning & AI voice

• Voice cloning is off by default and only happens if you explicitly opt in.
• The cloned voice lives only in your account — only you can generate audio with it, and it is never shared with other users or used to train ElevenLabs' models.
• You can delete the cloned voice at any time from the Me page; deletion removes the model both from our records and from ElevenLabs.
• Deleting your account also deletes any cloned voices, transcripts, and AI-generated audio tied to it.

where it lives

Your data is hosted on Lovable Cloud (Supabase) infrastructure with encryption at rest and in transit. Recordings live in a private storage bucket — only you, signed into your account, can fetch them.

service providers

We use a small number of vetted processors. They act on our instructions and are bound by data-protection agreements:

• Lovable Cloud (Supabase) — account database, authentication, recording storage.
• Google — only if you choose "Continue with Google" to sign in. Google verifies your email; we receive nothing else.
• Apple & Google Play — process in-app purchases and renewals when you subscribe on iOS or Android. They send us purchase receipts and renewal events.
• RevenueCat — subscription management. Receives your pseudonymous user ID, purchase events, product/price/currency, and basic device context (OS, app version, country) so it can grant or revoke your subscription entitlement across devices and detect fraudulent receipts. RevenueCat does not receive your recordings, email, or name. See RevenueCat's privacy policy.
• ElevenLabs — our voice AI provider. We only send data to ElevenLabs when you use a voice feature: speech-to-text (your recording audio is sent so they can return a transcript; audio is processed for the transcript and not retained for training, in zero-retention mode where supported), text-to-speech (the text you submit is sent so they can return synthesized audio in the voice you chose), and voice cloning, only if you opt in (a sample of your recording is sent so they can create a private voice model tied to your account; the model is used only to generate audio for you, is never shared with other users, and is deleted when you delete the voice or your account). ElevenLabs does not receive your email or account identifier beyond an opaque request ID. See ElevenLabs' privacy policy and DPA.
• Attribution / affiliate partners — if you install via a referral link, the partner that referred you may receive a confirmation that the install and subscription occurred, plus the campaign or affiliate code, so we can pay commissions. They do not receive your email, recordings, or settings.

international transfers

Our providers (including Lovable Cloud, RevenueCat, and ElevenLabs) may process data in the United States and the European Union. Where required (EEA, UK, Switzerland), transfers rely on Standard Contractual Clauses or equivalent safeguards.

legal basis (EEA / UK)

We process your account and recordings on the basis of the contract you enter when you sign up. We process purchase history and pseudonymous identifiers on the basis of our legitimate interest in delivering, securing, and getting paid for the service. Where we rely on consent (e.g. ATT tracking, marketing emails), you can withdraw it at any time.

children

88088 is not directed to children under 13 (under 16 in the EEA / UK). If you believe a child has created an account, contact us and we will remove it.

your rights

You can access, export, or delete your data at any time. The Me page in the app has a one-tap Delete account button that permanently removes your recordings, your subscription record, and your account. Deleting your account also deletes any transcripts, generated TTS audio, and cloned voice models tied to it.

retention

We keep your data only as long as your account exists. When you delete your account, your recordings and account record are removed within 30 days.

changes

If we change this policy, we'll update the date above and notify you in the app for any material change.

contact

support@88088.app · or use the support form.