CrossVox
Menu
Reserve V1 · $10

CROSSVOX APP

Privacy Policy

Updated October 5, 2026

CrossVox is a native devotional companion operated by Manle Technology (Shenzhen) Company Limited and available on iPhone and a paired Apple Watch. It provides voice-guided prayer, Scripture reflection and quiet faith moments. Prayer can reveal deeply personal beliefs and circumstances, so this policy explains what the CrossVox app and website collect, how we use and protect that information, when it is shared, how long it is kept and the choices available to you.

Who can use CrossVox

CrossVox is intended only for users aged 13 and older. We do not knowingly provide the service to children under 13. If you believe someone under 13 has supplied personal information, contact us so we can investigate and remove it.

Information we collect

Google Sign-In and Google user data

Google Sign-In is optional. It is offered only as a convenient way to create, link or access a CrossVox account. After you choose Google Sign-In, CrossVox receives an ID token and uses only:

We use this data only to authenticate you, prevent account impersonation, link you to the correct CrossVox account and communicate essential account or security information. CrossVox does not request or access your Google password, Gmail messages, Google Drive files, Google Photos, contacts, calendar, browsing activity or Google Workspace content. We do not request Google OAuth access or refresh tokens, and we do not store the raw Google ID token or nonce after verification. We store only your verified email address, the provider name “Google,” and the stable identifier while your CrossVox account remains active.

Your Google Sign-In data is not used for advertising, ad personalization, credit or lending decisions; sold to data brokers; disclosed to other CrossVox users; sent to CrossVox voice or AI providers; or used to develop, improve or train generalized or non-personalized AI or machine-learning models. CrossVox does not use Google Workspace APIs.

CrossVox's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How Google data is protected and shared

The Google ID token is sent from the app to the CrossVox service over HTTPS. The server verifies the token's signature, issuer, audience, verified-email status and one-time nonce before accepting it, then discards the raw token and nonce. CrossVox's hosting and database providers process the stored email address and stable identifier only as necessary to operate and secure your account. Access is restricted to authorized systems and personnel. No method of transmission or storage is completely secure, but we use reasonable technical and organizational safeguards designed to protect account data.

Google data retention, deletion and revocation

The raw Google ID token and nonce are retained only in memory long enough to verify the sign-in attempt and are then discarded. Your verified email address, provider name and stable Google identifier remain in the active CrossVox database while your account is active. You can permanently delete the account in CrossVox Settings or through the account deletion page; this removes the linked Google identity and account data from the active CrossVox database. You can separately revoke CrossVox's Google connection from your Google Account's third-party connections settings. Revoking the connection stops future Google sign-in but does not by itself delete your CrossVox account.

Sign in with Apple

Sign in with Apple is optional. Apple sends CrossVox a signed identity token containing a stable Apple account identifier and, when Apple makes it available, a verified email address or private relay address. CrossVox verifies the token and one-time nonce, then stores only the provider name, stable identifier and account email needed to sign you in. We do not receive or store your Apple Account password, Apple access or refresh tokens, contacts, photos or payment credentials. Deleting CrossVox removes this linked identity from the active CrossVox database but does not delete your Apple Account.

Prayer, cloud voice and AI

Cloud voice is optional and requires a separate choice. When enabled, microphone audio travels through CrossVox to AssemblyAI for speech recognition. The resulting text is screened for some obvious identifying details before being sent to OpenAI for an AI-assisted reply. This screening is imperfect, so avoid speaking details you do not want shared. Reply text is sent to ElevenLabs to generate speech.

CrossVox does not save prayer recordings, transcripts, chat history or generated speech to durable storage. Up to 24 recent messages may remain in volatile server memory to continue the current conversation and expire after one hour of inactivity, when you end the session, or when you delete your account. Audio buffers are kept only while needed for the current turn. On supported routes the microphone may remain active while a reply plays so you can interrupt. The iPhone app stops capture when you leave the call or move it to the background. An explicitly started Apple Watch prayer may continue while its display sleeps during the system-approved runtime; muting or ending the prayer stops capture.

Optional memory for today

Compatible app versions offer a separate, default-off choice to remember today's words on this device. User statements—not audio recordings or AI replies—are encrypted locally and excluded from device backup and cross-device sync. Earlier statements may be sent with a new turn so relevant context can be selected, screened for some identifying details and processed by the cloud AI. This screening is imperfect, and local encryption does not make the content anonymous.

Saved words expire at the next local midnight or within 24 hours and are removed when memory is next accessed. Signing out, changing accounts or deleting the account on that device clears its local memory. Another or offline device must clear its own local copy. Turning memory off stops reading and adding memory for new turns; use Settings to clear words already saved today.

Images, video and NCII

CrossVox is not an image-generation or image-sharing service. The app does not offer features to create, edit, upload, store or distribute user images or video, and it does not use Google APIs or Google user data to generate sexual, intimate or non-consensual imagery, including non-consensual intimate imagery (NCII).

Service providers and disclosure

We use providers only for functions needed to operate CrossVox: Railway for hosting and database infrastructure; AssemblyAI for optional speech recognition; OpenAI for optional AI-assisted replies; ElevenLabs for optional speech generation; Resend for account email; Stripe for wearable reservations and card payments; Meta Pixel for website advertising measurement; and HireCX for website support. These providers process data under their own terms and our service configurations. We may also disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction subject to appropriate safeguards. We do not sell personal information or prayer content.

Provider retention

CrossVox does not use customer prayer content to train models, and our voice-provider accounts are configured not to use customer content for model improvement. This does not mean every provider has zero retention. AssemblyAI's streaming retention depends on its service and account settings. OpenAI requests are sent with response storage disabled, which is not the same as Zero Data Retention. ElevenLabs may retain reply text and generated audio under its service settings. Each provider may also keep operational, security or billing metadata under its own policies. Apple and Google sign-in data is not sent to these voice or AI providers.

Prayer access, purchases and retention

Each account receives seven complimentary complete prayer sessions. This is not a timed free trial, does not require a payment card and does not automatically become a paid subscription. The service records listed above help apply that allowance, prevent double-counting and keep the service reliable. Account-linked service and lifetime used-session records currently remain until account deletion unless a shorter period is introduced and disclosed.

Purchase records are used only to verify access, restore purchases and prevent one purchase from being assigned to another CrossVox account. CrossVox subscription records are removed with account deletion. Apple or Google may independently retain transaction and billing records under their policies. Deleting CrossVox does not cancel store billing; cancel the subscription separately in the store that billed you.

iPhone, Apple Watch and notifications

Watch sign-in uses an account credential passed through the paired iPhone, and Watch voice prayer uses the cloud processing described above. The Watch can show a Scripture widget. If you enable prayer follow-up notifications, CrossVox keeps an account-linked device token, device platform, app version and notification timing. Apple processes the token to deliver notifications. Follow-up notifications do not contain a prayer transcript or AI conversation. Permission is optional and can be managed in Settings. Device registration records are removed with account deletion. Login credentials are stored in the iOS Keychain and remain on the current device.

Website, reservations and analytics

On crossvox.net we use website and reservation information to deliver requested services, administer reservations and refunds, measure advertising, prevent abuse and understand product demand. Stripe handles card details; CrossVox does not receive your full card number. We do not use prayer answers or faith survey responses to target individuals with ads.

Your choices and rights

You can decline Google Sign-In and use an available email sign-in method. You can change cloud-voice consent in the app, manage notifications in device settings, request access or correction, and permanently delete your CrossVox account. Depending on where you live, you may have additional rights to access, correct, delete, restrict or object to processing, or receive a portable copy of certain information. Email support@crossvox.net to make a privacy request.

Children

CrossVox is intended only for users aged 13 and older. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

Safety and contact

CrossVox is a devotional companion, not a pastor, divine voice, medical or mental-health professional, or emergency service. If you or someone else may be in immediate danger, contact local emergency services or a qualified person nearby.

The data controller and app operator is Manle Technology (Shenzhen) Company Limited. For access, correction, deletion or other privacy questions, email support@crossvox.net.

We will update this policy when the app's data practices, providers or paid features materially change. Material changes will be published here with a revised date.