Privacy Policy
Last updated: 19 February 2026 · ZYNTHIO™ ABN 31 314 627 918
Short version: We collect only what we need (your name, contact, and optionally a voice recording). We don't sell your data. You can ask us to delete everything at any time by emailing [email protected].
1. Who We Are
MOSOKO is a product of ZYNTHIO™, operated by Corey McIvor (ABN 31 314 627 918), based in Perth, Western Australia, Australia.
Contact: [email protected]
2. What We Collect
- Name — optional, used to personalise your lessons
- Email address — to contact you about MOSOKO access and lesson delivery
- Phone number (WhatsApp) — alternative contact, if you provide it
- Voice recording — only if you choose to record (60-second sample). Used exclusively to create your personalised AI voice model for your own language lessons.
- How you heard about us — helps us understand where our users come from
- IP address — hashed (not stored in identifiable form) for rate limiting / abuse prevention. Not linked to your account.
We do not collect: date of birth, address, payment details (these go directly to Stripe when payments are live), or any sensitive data beyond voice recordings.
3. Voice Recordings — Biometric Data
Your voice recording is biometric data. We treat it with the highest level of care.
- We only collect a voice recording if you explicitly tick the consent checkbox and click Record
- Your voice model is created solely for your personal language lessons — we never use it to impersonate you or share it with third parties for other purposes
- We use ElevenLabs (a US-based AI voice company) to process recordings and create your voice model. ElevenLabs processes the data under their privacy policy.
- You can request deletion of your voice recording and voice model at any time
4. Where Your Data Is Stored
Your data is stored on Cloudflare D1 (Cloudflare Inc., US-based infrastructure). By using MOSOKO, you consent to your data being transferred to and stored in the United States.
Cloudflare's infrastructure is SOC 2 Type II certified and ISO 27001 compliant.
5. Why We Collect It (Legal Basis)
- Consent — for voice recordings (you tick a checkbox)
- Legitimate interest — for contact details, to send you product updates you signed up for
- Contract — when you become a paid subscriber, to deliver the service
6. Who We Share Data With
- ElevenLabs — voice processing only (voice recordings)
- Cloudflare — infrastructure (all data stored here)
- Stripe — payment processing (when paid tiers launch; payment data goes directly to Stripe, we don't store card details)
- No one else — we do not sell, rent, or trade your personal data
7. How Long We Keep Your Data
- Contact details (email/phone): until you request deletion, or 3 years after your last activity
- Voice recordings: until your voice model is created and confirmed, or until you request deletion, whichever comes first
- Rate limit data: auto-expires after 1 hour (KV store)
8. Your Rights
Under the Australian Privacy Act 1988 and (where applicable) the EU General Data Protection Regulation, you have the right to:
- Access your data — email us and we'll tell you what we hold
- Correct your data — tell us what's wrong and we'll fix it
- Delete your data — email us with subject "Delete my data" and we'll remove everything within 14 days
- Withdraw consent for voice recording at any time — this does not affect lawfulness of processing before withdrawal
- Opt out of communications — unsubscribe link in any email, or email us
To exercise any of these rights: [email protected]
9. Security
We take reasonable technical measures to protect your data including:
- HTTPS on all pages (Cloudflare SSL)
- API rate limiting to prevent bulk data extraction
- No API keys or credentials in client-side code
- Input sanitisation on all user-submitted data
In the event of a data breach that is likely to result in serious harm, we will notify affected users and the relevant authority (OAIC in Australia) within 30 days, as required by the Notifiable Data Breaches scheme.
10. Children
MOSOKO is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data, please contact us immediately.
11. Changes to This Policy
We may update this policy as MOSOKO grows. We'll update the "last updated" date at the top. For significant changes, we'll notify users by email.
12. Contact
ZYNTHIO™ · ABN 31 314 627 918 · Perth, Western Australia, Australia
Email: [email protected]
Governing law: This policy is governed by the laws of Western Australia, Australia.