Verba

Privacy Policy

Last updated: November 1, 2026

1. Who We Are

Verba ("we", "our", or "us") operates the Verba mobile application (iOS and Android) and the website at https://meetverba.com (collectively, the "Service"). This Privacy Policy explains what personal data we collect when you use Verba, how we process and protect it, the third-party processors involved, and how you can exercise your privacy rights, including instantaneous account and data deletion.

2. Information We Collect

We collect only the information necessary to provide and personalize your conversational training experience in Verba:

  • Account Information (Supabase Auth): When you register or sign in using Email & Password, Sign in with Apple, or Google Sign-In via Supabase Auth, we collect your email address, unique authentication identifier, and display name.
  • Profile Photo (Optional): If you choose to upload or take a profile picture using your device's camera or photo library, the image is stored securely in our Supabase Storage profile-photos bucket associated with your user ID.
  • Training Progress & Phrase Vault Data: Your selected focus track (Dating & Attraction, Social & Charisma, or Workplace Assertiveness), completed academy lessons, daily streak metrics, simulation scores, and saved phrases in your Phrase Vault.
  • Voice & Text Roleplay Inputs: When you participate in the 3-Act Voice & Chat Arena, we process the text messages you type and the voice audio you record via your device's microphone so that your AI coach can respond and generate your post-session debrief.
  • Push Notification Tokens & Preferences: If you opt into daily practice and streak reminders, we store your Expo push token, device platform (iOS or Android), timezone, and reminder schedule in our devices table to deliver notifications via the Expo Push Service.
  • Subscription & Entitlement Metadata: When you subscribe to or purchase Verba Pro (Monthly, Yearly, or Lifetime), Apple App Store, Google Play Store, and our subscription processor RevenueCat provide us with non-financial transaction identifiers, product IDs, and entitlement status. We never collect or store your credit card or payment details.

3. Server-Side AI Processing (Voice & Text Roleplay)

To power live conversational simulations and personalized coaching feedback, Verba uses server-side AI processing provided by OpenAI:

  • Speech-to-Text (STT): Audio recorded during a voice roleplay turn is transmitted over encrypted TLS to our backend API and processed via OpenAI's speech transcription models to convert your speech into text.
  • Conversational Roleplay & Coaching Debrief (LLM): Your session transcript and scenario context are processed via OpenAI's language models to generate in-character responses (e.g., Sofia, Leo, or Victor) and to evaluate your performance across key communication pillars during the Act III Debrief.
  • Text-to-Speech (TTS): Character responses are synthesized into voice audio via OpenAI's text-to-speech API and streamed to your device during active voice calls.

Strict Purpose Limitation: Your voice audio and conversation transcripts are processed strictly to deliver the real-time simulation and your coaching debrief. Raw voice recordings used for transcription are processed ephemerally in memory and are not permanently stored after transcription completes. Your data is never sold to third parties or used to build advertising profiles.

4. How We Use Your Information

We process your personal information for the following purposes:

  • Authenticating your account and synchronizing your progress, streaks, and Phrase Vault across devices.
  • Delivering interactive lessons, AI chat simulations, live AI voice calls, and structured coaching feedback.
  • Verifying your Verba Pro subscription status and unlocking premium features via RevenueCat.
  • Sending optional daily habit and streak protection reminders via push notifications (which you can disable at any time in your Profile settings or device OS settings).
  • Providing customer support and responding to your inquiries or data requests.

5. Third-Party Service Providers

Verba relies on trusted infrastructure and service providers that process data solely on our behalf under strict data protection obligations:

  • Supabase: Authentication (Supabase Auth), PostgreSQL database hosting, and cloud object storage (profile-photos bucket).
  • OpenAI: Server-side artificial intelligence processing for text roleplay, coaching debriefs, speech-to-text transcription, and text-to-speech voice synthesis.
  • RevenueCat: In-app subscription and entitlement validation across Apple App Store and Google Play Store.
  • Apple App Store & Google Play Store: Native authentication (Sign in with Apple / Google Sign-In) and secure in-app payment processing.
  • Expo (Expo Push Service): Delivery of opt-in push notifications to iOS (APNs) and Android (FCM) devices.

We do not sell, rent, or trade your personal information to any third party, nor do we include third-party behavioral advertising SDKs in Verba.

6. In-App Subscriptions (Verba Pro)

Verba offers optional Verba Pro plans (Monthly auto-renewable subscription, Yearly auto-renewable subscription, and Lifetime one-time purchase). All billing and payment authorization are handled directly by Apple (via StoreKit) or Google (via Google Play Billing). RevenueCat processes pseudonymous app user IDs and purchase receipts to keep your Pro status synchronized across devices.

7. Data Retention and Account Deletion

We retain your personal data only for as long as your Verba account remains active. You have complete control over your account and may delete your account and all associated personal data at any time through either of two methods:

  • Instantaneous In-App Deletion: Open the Verba app, navigate to Profile → Delete Account, and confirm deletion. This immediately and permanently deletes your Supabase Auth record, profile information, uploaded photos in the profile-photos bucket, push notification tokens in the devices table, lesson history, simulation transcripts, and saved Phrase Vault items.
  • Web / Email Deletion Request: If you no longer have the app installed, you can submit a deletion request at https://meetverba.com/data-deletion or email support@meetverba.com. Web and email deletion requests are processed within 30 days (and typically within 48 hours).

Please note that deleting your Verba account does not automatically cancel an active auto-renewable subscription billed through Apple or Google; you must manage or cancel active subscriptions in your Apple ID or Google Play account settings.

8. Data Security

All communications between the Verba mobile app, our backend API, Supabase, OpenAI, and RevenueCat are encrypted in transit using industry-standard TLS (HTTPS). Data stored in our database and cloud storage is encrypted at rest and protected by Row-Level Security (RLS) policies and strict server-side access controls.

9. Device Permissions

Depending on the features you choose to use, Verba may request the following operating system permissions:

  • Microphone: Required only when you initiate a live voice simulation with an AI coach.
  • Camera & Photo Library: Requested only if you choose to take or select a profile picture.
  • Notifications: Requested only if you enable daily practice or streak reminders.

You may revoke any of these permissions at any time in your iOS or Android system settings.

10. Your Privacy Rights (GDPR, UK GDPR, CCPA/CPRA)

Depending on your jurisdiction, you have the right to access, rectify, port, restrict processing of, or erase your personal data, as well as the right to withdraw consent at any time. Where GDPR or UK GDPR applies, our lawful bases for processing are performance of a contract (providing the Service you requested), legitimate interests (maintaining security and service reliability), and your consent (optional profile photo, microphone recording, and push notifications). To exercise your rights, use the in-app Profile → Delete Account control or contact us at support@meetverba.com.

11. Children's Privacy

Verba is intended for users aged 16 and older and is not directed at children under 13 (or under 16 in the European Economic Area and United Kingdom). We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us at support@meetverba.com and we will promptly delete the account and associated data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect new features, operational changes, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page and notify you in the app when required by law.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@meetverba.com or visit https://meetverba.com/support.