Privacy Policy

Last updated: 15 June 2026

David Arthur Software ("we", "us", "our") is committed to protecting your privacy. This policy explains what data our products collect, how it is used, and your rights. It covers all our products including DuoVox and QuietTime.

Data Controller: David Arthur Software, Kirkbymoorside, York, YO62 6LJ, United Kingdom
Contact: info@davidarthur.app

1. QuietTime

1.1 Data Collected

QuietTime operates entirely offline. It collects and stores the following data locally on your device only:

  • Your PIN and recovery password (stored on your device as one-way hashes, not in plain text)
  • Schedule settings (weekday/weekend times, weekend day selections)
  • Theme and lock level preferences
  • Allowed app selections
  • Activity log (block start/end, overrides, extensions, settings changes)

1.2 Data NOT Collected

QuietTime does not:

  • Transmit any data to any server
  • Require an account or login
  • Use analytics, tracking, or telemetry
  • Display advertisements
  • Collect personal information
  • Access contacts, messages, photos, or location

1.3 Permissions (Android)

QuietTime requires the following Android permissions to function:

  • Display over other apps — To show the block screen on top of other applications
  • Accessibility service — To prevent the block screen from being dismissed by children

These permissions are used solely for screen time control and are not used to monitor, record, or transmit any user activity.

2. DuoVox

2.1 Data Collected

Free tier (offline): All audio processing happens on your device using local models. No data is sent to any server. No account is required.

Paid tiers (online): Audio is streamed in real time to third-party AI service providers for transcription and translation. We do not store this audio ourselves and do not intentionally retain it; our providers process it to return the result and may keep limited operational logs under their own privacy policies, which can change without notice — please review their policies. Transcribed and translated text exists only in your device's memory during the session unless you choose to save it.

2.2 Service Infrastructure Data

For paid tiers, we maintain minimal infrastructure data to manage your subscription:

  • An anonymous device identifier linked to your subscription tier
  • Usage minutes (for tracking against your monthly allocation)
  • Device verification data (to prevent subscription sharing)
  • Ad grant status (Free tier only)

2.3 Data NOT Collected

DuoVox does not:

  • Store audio recordings on our own servers
  • Store transcriptions or translations on our own servers
  • Collect personal information unless you contact support
  • Track your location
  • Sell or share data with third parties for marketing

2.4 Third-Party Services

DuoVox uses the following third-party services:

  • AI processing providers — For real-time transcription and translation (paid tiers). Audio is streamed and processed in real time; it is not stored.
  • Google AdMob / Microsoft WebView2 — For displaying advertisements (Free tier only). These services may use cookies or device identifiers as described in their own privacy policies. You can limit ad personalisation through your device's ad settings and Google's Ad Settings.
  • Google Play Billing / Microsoft Store — For subscription management.

2.5 Relationship to the Terms of Use

For DuoVox, this Privacy Policy forms part of the DuoVox Terms of Use. The full DuoVox Privacy Policy is available at duovox.net/privacy.html.

2.6 Sensitive Information

DuoVox is a general-purpose tool and is not intended for special-category data. You are responsible for any sensitive information (such as health or legal details) you choose to process through it; where such information is processed, we rely on your explicit consent. You must also obtain any consent required to record, transcribe, or translate a conversation.

3. Our Websites

Our websites (davidarthur.app and duovox.net) are static sites hosted on GitHub Pages. They use Cloudflare Web Analytics, a privacy-first, cookieless service that records anonymous, aggregated visit data (such as page views and country) without setting any cookies and without tracking individual users across sites. We do not use any other analytics or advertising trackers. Contact forms are processed by web3forms, which receives only the information you submit.

4. Payment Processing

Purchases of paid features are processed by the Microsoft Store or Google Play; we do not process card payments on our website.

Payments made through app stores (Google Play, Microsoft Store) are governed by those platforms' respective privacy policies.

5. Your Rights (GDPR / UK GDPR)

If you are in the UK or European Economic Area, you have the right to:

  • Access — Request a copy of any personal data we hold about you
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your data
  • Portability — Request your data in a portable format
  • Objection — Object to processing based on legitimate interests
  • Withdraw consent — Where processing is based on consent (e.g., ad personalisation)

For QuietTime, all data is stored locally on your device — you can delete it at any time by clearing the app's data or uninstalling.

For DuoVox, contact info@duovox.net to exercise any of these rights.

We will respond within one month (extendable by up to two further months for complex requests, and we will tell you if so). We may need to verify your identity first. There is no fee unless a request is manifestly unfounded or excessive. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data-protection authority.

Legal Basis for Processing

Where we process personal data, the legal basis is:

  • Contract performance — Processing audio for transcription/translation as part of the DuoVox service
  • Legitimate interests — Subscription management, fraud prevention, service improvement
  • Consent — Ad personalisation (Free tier, where applicable)
  • Explicit consent — Where audio may contain special-category information (such as health or legal matters), we rely on your explicit consent. DuoVox is not intended for special-category data and you are responsible for any such data you choose to process.

6. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

7. Children's Privacy

QuietTime is designed for parents to manage their children's screen time. The app does not collect any data from children.

DuoVox is not directed at children under 13 (or under 16 in the EEA/UK). If we become aware that we have collected data from a child, we will delete it promptly.

8. International Data Transfers

DuoVox paid tiers stream audio to third-party AI providers whose servers may be located outside the UK/EEA. Where personal data is transferred outside the UK/EEA, it is subject to appropriate safeguards as required by data-protection law. We do not store this audio ourselves; providers process it to return the result and may retain limited operational logs under their own privacy policies.

QuietTime does not transfer any data internationally as it operates entirely offline.

9. Data Retention

We keep personal data only as long as necessary for the purposes set out in this policy:

  • DuoVox infrastructure data (anonymous device identifier, usage minutes, device-verification data) — retained for up to 12 months after a subscription ends, to prevent fraud and resolve billing disputes.
  • Support correspondence — retained for up to 24 months.
  • Audio and transcripts — not stored by us; processed in real time only (see section 2).
  • QuietTime data — stored only on your device until you clear the app's data or uninstall; we hold none of it.
  • CCTV Converter — we collect and retain nothing; it operates entirely offline.

10. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) for all online connections, encryption of app settings stored on your device, holding only the minimum data needed to run the service, and restricting access to it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

11. Data Breaches

If we become aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority — and, where required, affected individuals — without undue delay and within the timeframes required by law.

12. Changes to This Policy

We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. Continued use of our products constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries:

© 2026 David Arthur Software