Privacy & your data
A voiceprint is biometric data. Here is exactly what voxID keeps, where, and how to remove it.
Kept while you're verified
| What | Where |
|---|---|
| Your voiceprint: 192 numbers, the average of your two takes | Verifier database, encrypted with AES-256-GCM. The key lives only in the verifier's environment. |
| Your wallet address | Verifier database, next to the encrypted voiceprint. |
| A random 32-byte person ID and when you verified | Verifier database. On-chain too, once credentials are issued there. |
Never kept
- Your audio. Your browser converts the recording to a WAV file and uploads it over HTTPS. The verifier decodes it in memory, runs the checks and drops it. It is never written to disk.
- Anything about your voice on-chain. The program stores your wallet, the random person ID, a timestamp and a revoked flag. Nothing more.
- Your name, email or IP address. IPs are counted in memory for rate limiting and forgotten.
Logs and statistics
- Every attempt adds one anonymous row for the Network page: when it happened, how it ended, and the nearest score. No wallet, no voice.
- The verifier's server logs record wallet addresses and similarity scores, used to tune the same-voice threshold. When the words don't match, the log records what Whisper heard.
Models
Whisper and ECAPA-TDNN run on the verifier itself. Your recording is not sent to any third-party API.
Deleting
Connect the same wallet on Verify and choose delete. The wallet signs voicegate delete / wallet / issued with the current time; requests older than five minutes are refused. The verifier then removes the voiceprint, wallet and person ID. Afterwards your voice can verify again, with any wallet.