Privacy Policy
Last updated: 22 September 2026. Changes apply as described in section 16.
Voxum Software Technology - FZCO (the “Company”, “we”) determines the purposes and means of processing personal data in Voxum and on voxum.net. This Policy explains what we use, why, who receives it and how to exercise your rights. Reading it is not a substitute for separate consent where required.
1. Definitions
Personal data relates to an identified or identifiable person. Processing includes collection, storage, use, disclosure and deletion. The Company acts as controller; a provider processing on its instructions is a processor. Some providers, such as app stores, independently determine processing for their own services.
Removing a name or replacing it with an identifier does not anonymise information. Data remains protected as personal data while identification is reasonably possible. We call information anonymous only where re-identification is not reasonably possible.
2. Data we process
Swipe or scroll horizontally to view the full table.
| Category | Examples and source | Purpose |
|---|---|---|
| Account | Email, name, profile image, internal identifier and information supplied by your chosen Google, Apple or Telegram sign-in | Access, communication, preferences and account protection |
| Your materials | Strategies and blocks, virtual deposit, risk and bot settings, manual trades, notes, screenshots, backtests and recommendation history | Requested features and saved results |
| Conversations | Messages, AI responses, the relevant strategy, trade or backtest, and support requests | Answers and support; separate voluntary AI improvement under section 4 |
| Purchases | Plan, subscription status and duration, purchase identifiers, payment and refund information from the store and RevenueCat | Providing and restoring purchased access |
| Device and usage | IP address, device and system, app version, language, usage times and events, technical errors, push token, visitor and session identifiers | Operation, security, notifications and consented analytics |
| Referrals | Invitation code, visits and downloads, time, IP and browser information, and registration attribution where applicable | Invitation attribution, rewards and abuse prevention |
Do not submit passwords, private keys, full card details, identity documents or other people's personal data without necessity and a lawful basis. Images and messages may contain such information; review them before sending. Stores process payment credentials under their own rules; Voxum receives purchase information, not your full card number.
3. Purposes and legal grounds
Swipe or scroll horizontally to view the full table.
| Purpose | Required data | Legal ground |
|---|---|---|
| Requested features, account, purchase and support | Relevant section 2 information | Necessity to perform a contract or take requested pre-contractual steps, where recognised by applicable law |
| Security, abuse investigation and legal claims | Minimum relevant technical and case records | Applicable obligations and protection of rights; legitimate interests only where recognised and not overridden by your rights |
| Accounting and legal records | Necessary payment, request and transaction information | Applicable legal obligations |
| Optional site analytics and conversation-based AI improvement | Information for the relevant voluntary programme | Separate, withdrawable consent |
| Notifications | Contact information, push token and preferences | Requested service; separate consent for optional communications where required |
A reference to legitimate interests does not automatically import a GDPR ground into UAE law. Processing under UAE Federal Decree-Law no. 45 of 2021 relies on consent or a specific statutory exception, including contractual necessity where the law provides it.
The current Free plan offers limited features and an upgrade to expand access. Viewing advertisements is not the method described here for buying additional actions.
4. AI and voluntary model improvement
To answer, the assistant processes your message, the necessary conversation history and relevant information about your selected trade, strategy or backtest. Answering a request and improving models from the conversation are separate purposes.
Settings contains a separate “Help improve Voxum AI” card. Its switch is off by default. If you enable it, we may use your new messages and AI responses created after consent to evaluate and improve Voxum models. This does not authorise old conversations. Participation is optional and does not affect features included in your plan.
You may turn it off at any time. After withdrawal, conversations are not used in subsequent evaluation and improvement processes on this basis. Withdrawal does not invalidate earlier lawful processing or automatically reverse computations or change parameters of an already trained model. Your rights concerning personal data that remains stored continue. The choice version and time are recorded to demonstrate consent and withdrawal.
We do not use private conversations in public advertising. Access to improvement materials is limited to persons and processors who need it for that purpose. Participants should not include secrets or other people's information.
Statistics and comparisons may combine results of completed user backtests. This separate processing of requested-service results does not mean publishing private strategies or conversations. Aggregates remain subject to personal-data rules while users can be identified.
AI may be wrong. Its trading output is not a decision about credit, employment or another legally significant assessment of a person. Rights to challenge automated decisions apply where the decision falls within the relevant law.
5. Recipients
Data is shared as necessary, not with every provider for every action:
- Google, Apple and Telegram for the corresponding sign-in; scope depends on permissions and provider information.
- Apple App Store, Google Play and RevenueCat for purchases, verification, restoration and subscription records.
- Expo, Apple Push Notification service and Firebase Cloud Messaging for app updates and/or notifications depending on platform and feature.
- Hosting, storage, file-delivery and technical-support providers for infrastructure. AI processing may involve processors operating the model; using a feature does not automatically transmit data to every external AI provider.
- Other users to the extent you share materials. Links and codes can be forwarded; review content before sharing.
- Competent authorities and parties to legal proceedings where legally justified and to the required extent.
- A successor following reorganisation or business transfer, subject to law, confidentiality and applicable notice requirements.
Mobile-build code contains a Google Mobile Ads integration. If that module is active in your build, Google may process device information, IP addresses and identifiers according to its settings and privacy rules. This disclosure is not consent to personalised advertising and does not replace a choice required by law or the platform.
Contact section 18 for current information about particular processors, countries and safeguards. Independent providers also operate under their own policies. We do not sell private conversations or authorise independent third-party model training merely because you accept the Terms.
6. International transfers
International providers may process data outside the UAE or your country. Transfers require their own legal ground and safeguards; using Voxum is not blanket consent to every transfer.
Where UAE law applies, articles 22 and 23 of Federal Decree-Law no. 45 of 2021 are relevant. Data covered by GDPR or UK GDPR follows the corresponding transfer rules: recognised adequacy, appropriate safeguards including applicable contractual provisions, or a permitted exception. You may request the particular mechanism and available safeguards information.
7. Security
We apply technical and organisational measures proportionate to the data and risks, including access restrictions, transmission protection, access management and incident investigation. This is not a promise of absolute security or certification.
Protect your device and sign-in accounts and do not share verification codes. Report suspected unauthorised access. For an incident, we assess consequences and notify authorities and affected people when and within the time required by applicable law.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to provide the Service to you, to comply with our legal obligations, to resolve disputes, to enforce our agreements, and to protect our legal rights.
8.1 Active Accounts
While your account is active, we retain your account information, trading configuration, usage data, recommendation history, manually entered trades, notes, uploaded images, strategies, backtest runs and conversations with the assistant, so that the Service can present a complete record of your activity. You may review, update, or delete much of this information yourself within the Service.
8.2 Deleted Accounts
You can delete your account at any time from the Settings section of the application, confirming the request with the one-time code we send to the email address associated with your account. If you cannot access the application or that email address, you may contact our support team at support@voxum.net or via Telegram at @Voxum_Co_Support, and we will verify your identity before acting on the request. When you delete your account, access ends immediately, your bots stop generating recommendations and your push notification tokens are removed so that no further notifications are sent to your devices. Within thirty (30) calendar days we permanently delete: your account information, including your email address, name, profile information and the identifiers received from your sign-in provider; your trading configuration, bot settings, risk preferences and other personal settings; your manually entered positions, trade notes and annotations; your uploaded images, including chart screenshots, which are removed from our storage; your strategies; your backtest runs; and your conversations with the assistant. Recommendation history and performance statistics may be retained in de-identified and aggregated form for internal analytical purposes, provided that such data cannot reasonably be used to identify you. Strategies or backtest results that you shared and that another user has already cloned remain in that user’s account, because the copy belongs to them. Payment and billing records, including transaction and subscription history, are retained for the period required by applicable tax, accounting and audit law, typically seven (7) years, with access restricted to personnel who need them for legal and compliance purposes. Communications and support records may be retained for a reasonable period to resolve pending disputes, claims or inquiries, typically three (3) years, after which they are deleted or anonymized. Technical logs and diagnostic information are retained for a limited period for security monitoring and are purged periodically. A hashed version of your email address may be retained where your account was terminated for violations of our Terms of Use, solely to prevent re-registration. Account deletion is permanent and irreversible. Deleting your account does not by itself cancel a subscription purchased through the Apple App Store or the Google Play Store; you must cancel such a subscription separately through the applicable platform.
8.3 Legal and Compliance Retention
Notwithstanding the above, we may retain personal information for longer periods where required or permitted by applicable law, including to comply with legal obligations, respond to legal process, establish, exercise or defend legal claims, or comply with audit, tax, accounting or regulatory requirements. Information retained for such purposes is stored with restricted access and used only for the purpose for which it is retained.
9. Rights and choices
Depending on applicable law, you may request processing and recipient information, access and a copy, correction, portability, restriction or cessation, object to particular purposes and request erasure where provided by law.
Withdraw AI-improvement consent in Settings; change site analytics through “Cookie settings” in the footer. Push notifications can also be managed through the device system. Refusing optional processing does not remove core contractual features.
Email support@voxum.net with your request and contact method. We may ask for proportionate identity verification and respond within the applicable legal deadline. Under GDPR this is generally one month; a permitted extension requires explanation. Fees or refusals require a lawful basis. You may approach the competent authority regardless of support's response.
10. United Arab Emirates
Where Federal Decree-Law no. 45 of 2021 applies, you have its rights to processing information, data transfer, correction, erasure, restriction and cessation, and objection to certain automated decisions. Consent must be demonstrable, understandable and easy to withdraw.
We handle requests and complaints without limiting recourse to the competent UAE authority. Being located in a free zone does not by itself remove data-protection requirements. Special regimes apply only within their statutory scope.
11. California
Where CCPA/CPRA applies, California residents have the relevant rights to know categories and specific data, correct and delete it, opt out of sale or sharing for cross-context behavioural advertising and limit certain sensitive-data uses.
Voxum does not sell personal data for money. Service-provider disclosures are not automatically declared outside the legal definitions of sale or sharing; classification depends on actual purposes. Applicable Global Privacy Control signals are respected for optional web analytics. You may request directly or through a duly authorised agent. Exercising rights is not grounds for discrimination.
12. EEA and United Kingdom
Where GDPR/UK GDPR applies, section 3 describes grounds, section 5 recipients and section 6 transfers. You may complain to a competent supervisory authority, including where you habitually reside, work or the alleged infringement occurred where provided by law.
Objections to legitimate-interest processing are assessed in light of your circumstances; objections to direct marketing need no justification. Statutory protections against solely automated decisions with legal or similarly significant effects, including human involvement, remain applicable.
13. Children
Voxum is for adults aged at least 18 or a higher applicable age. Our features are not intended for children. Contact support if you believe a child has submitted data so we can investigate and take necessary action.
14. External links
Visiting a store, Telegram, Discord or another service may involve that service's independent processing. Read its policy. Including a link does not remove Voxum's responsibility for disclosures made by the Company itself.
15. Cookies and identifiers
The site stores theme, language and cookie choices and, with permission, uses its own analytics. Visit records containing an identifier, IP address or browser information are not anonymous simply because they lack a name.
Referral visits also use voxum_ref (up to 90 days) and voxum_vid (up to 400 days); server attribution may match visit and registration information within 72 hours. Purposes, durations and controls are detailed in the Cookie Policy. Mobile session, purchase and notification tokens differ from browser cookies.
16. Changes
The revision date does not mean you have already received notice. We give advance notice of material purpose or rule changes, normally 30 calendar days. Earlier application may be necessary by law, for security, or following separate consent where permitted.
A new purpose requiring consent does not start merely because we publish this Policy or you continue using the Service. Non-adverse editorial clarifications may apply on publication. Earlier processing is assessed under the conditions applying at the relevant time.
17. Other documents
This Policy operates alongside the Terms and Cookie Policy. Mandatory rights, language requirements and regulatory powers remain regardless of a contractual choice of law or court. Translations are intended to convey the same content.
18. Controller contact
Voxum Software Technology - FZCO. IFZA, Dubai, United Arab Emirates. Licence no. 79762.
Data requests: support@voxum.net.
Telegram support: @Voxum_Co_Support.
Do not post identity documents in public comments or channels.