Vicino Labs
Prova

Privacy Policy

Effective 2026-11-10Version 1.2Operator Vicino Labs

Prova, made by Vicino Labs, records and films your lessons and practice, lets you compare takes and helps you check audition and competition videos. Recordings and videos are stored only on your device, and you can use it without an account. Only when you sign in with a welegato ID to use AI analysis, the cloud or a subscription, or when you use Ask Prova, does anything go through our server (EU) and the services below. Here is exactly what the app handles.

1. Data controller

The operator's address and contact details are at the end of this document and in the Impressum.

Vicino Labs is the “controller” under the EU General Data Protection Regulation (GDPR) for any personal data processed in connection with this app.

2. Summary

  • Audio recordings, videos and take details stay on your device; without signing in no recording or video is uploaded to us. Recording needs no account.
  • Questions to Ask Prova are sent only to write the answer and are not stored. Only an AI answer or AI analysis you report yourself is kept, with your comment, for 180 days.
  • Before you record or film a lesson, the app asks you to confirm that the teacher (and, for minors, a parent or guardian) has agreed.
  • Do Not Disturb while recording (Android) is switched on only if you allow it, and your own setting is restored when the take ends.
  • No ads, and no analytics or tracking tools.
  • AI analysis, the cloud and subscriptions need a welegato ID. When you sign in, account data falls under the welegato privacy policy.
  • AI analysis sends only the sound, even for videos — an audio excerpt made on your device is analysed by Google Gemini and deleted afterwards.
  • The cloud (Plus) uploads only the sound of the takes you upload. For video takes only the sound is extracted and uploaded; the video stays on your device (Cloudflare R2).

3. Data stored on your device

  • Audio recordings (AAC) and videos (mp4, front or back camera)
  • Take details — the mode (lesson, practice takes, submission video), date and length and, if you fill them in, piece, passage, “with” (names of teacher or accompanist), notes and a star
  • The confirmation you gave before recording a lesson
  • Settings — theme colour, whether to use Do Not Disturb while recording, and your Do Not Disturb setting before a take (to restore it)

This data stays in the app's private storage and is never sent to us. It is deleted when you remove a take or uninstall the app. Legal basis: providing the app's features (Art. 6(1)(b) GDPR).

4. Camera, microphone and notifications

The app asks for the microphone only to record and for the camera only to film. You start a recording with the button and stop it yourself. While recording, a “Recording” notification is shown so the recording keeps going with the screen off or in another app (for this the app asks for the notification permission).

When you look at silent stills from a video, the frames are read from the video file saved on your device. This too happens only on the device.

5. Recording lessons and other people's consent

Recording other people's words without their consent can be against the law (for example § 201 of the German Criminal Code). In lesson mode the app therefore asks you to confirm, before recording or filming starts, that the teacher — and, if a minor is recorded, a parent or guardian — has agreed. Actually obtaining that consent is your responsibility.

Names you enter under “with” are kept on your device as take details. What happens when you sign in and use AI analysis or the cloud is described below.

6. Do Not Disturb while recording

Android: once you have granted Do Not Disturb access in your device settings, the app switches the phone's Do Not Disturb on while a take is being recorded. Calls, messages, notifications and vibration are held back; media sound is allowed. When the take ends, your own Do Not Disturb setting is restored. This setting and your previous state are stored only on the device. You can withdraw the access at any time in your device settings.

iPhone and iPad: the app cannot change Do Not Disturb; it only reminds you to turn on a Focus before recording.

Airplane mode: emergency alerts can pass Do Not Disturb, so the app may suggest airplane mode. It only reads whether airplane mode is on and cannot change it.

7. Android backup

On Android, if your device's Google backup is on, the app's settings may be backed up to your Google account and restored when you reinstall. Google handles this backup under the Google Privacy Policy; we cannot see it. You can turn it off in your device settings.

8. welegato ID (needed for AI, cloud and subscriptions)

Recording and comparing takes need no sign-in. AI analysis, the cloud and subscriptions require signing in with a welegato ID (an account of welegato, run by the same company — one ID for all Vicino Labs apps). These features come with the welegato ID; this section applies when you sign in or use them.

  • Account data (email, name, sign-in method Google, Kakao or email, account number) is processed under the welegato privacy policy. Sign-in is handled by Supabase Auth. An ID created in Prova is marked “signed up in Prova”, and one welcome email is sent at the first sign-in.
  • Prova links the ID to your subscription and AI time, so they follow you to other devices, between Android and iOS, and to other Vicino Labs apps that use the same ID (such as Leggii).
  • For email sign-up and sign-in, Cloudflare Turnstile checks browser signals to stop automated sign-ups (Cloudflare privacy policy). Google and Kakao sign-in fall under those companies' policies.
  • Deleting the ID in the app or at welegato.com/konto-loeschen deletes the account, AI time and links and the cloud files in every Vicino Labs app that uses the ID. Recordings and videos on your device stay.

Under welegato's terms, only people aged 16 or over can sign in. Legal basis: providing the feature you chose (b).

9. AI analysis (only on request)

It runs only when you are signed in, tap “AI analysis” on a take, see the AI minutes it costs and start it. The first time, the app explains this and asks for your consent.

  • What is sent: only the sound. Even for a video take no picture is sent — only an audio excerpt made on your device (mono, 16 kHz AAC) — together with the mode, the piece, passage and names you entered, and the answer language.
  • Processing: our server (Supabase, EU) prepares the job; the audio goes to Google's Gemini API for analysis. We use the paid API; Google does not use this data to train its models.
  • Deletion: the audio is deleted once it is analysed; anything left is deleted by Google within 48 hours. The results go back to your device and are stored only there; interim results on the server are deleted when the analysis ends.
  • Kept on the server: records to count your AI time (time, length, kind, minutes used, cost, which app it was used in) with a pseudonymous account number – no recording content and no results.
  • Shared AI time: AI time is shared per welegato ID with Leggii, so each use records whether Prova or Leggii used it.

Legal basis: providing the feature you asked for (Art. 6(1)(b) GDPR). You must get the consent of other people who are recorded. Under 16, please use it with a parent's consent. Google processes data under the Google Privacy Policy.

10. Cloud (Plus, optional)

With a Plus subscription and the welegato ID signed in, the cloud keeps your takes the same on every device of that ID.

  • What is stored: the audio of the takes you upload and the take details. For video takes only the sound is uploaded, never the video file. For each file its size, fingerprint (SHA-256) and time of change are kept.
  • Where: the files with Cloudflare R2 (Cloudflare, Inc., processor); the list of items and the space used on our server (Supabase, EU, Frankfurt, Germany). Transfers are encrypted; files go only between the app of that ID and the cloud, through signed links that are valid for a short time. We do not open your recordings or videos.
  • Sending in welegato chat: if you pick a recording from your cloud in a welegato chat, your chat partner can listen to its audio for 7 days from sending, through links that are valid for a short time (video is not sent). The file is not copied; welegato keeps a record of the share (title, type, size). You can turn sharing off at any time (welegato privacy policy).
  • Space: cloud space is shared per ID with the Leggii cloud; what both apps use is added up.
  • Keeping and deleting: a take deleted on one device is deleted in the cloud and on the other devices too. Deleting the ID deletes all its cloud files and records without delay (within 24 hours at the latest). When Plus ends, only new uploads stop and everything can be downloaded for 90 days; after two reminder emails the cloud files are then deleted. Files on your devices are never touched.

Legal basis: providing the subscribed service (Art. 6(1)(b) GDPR).

11. Subscriptions and purchases

Subscriptions and AI time are bought through Google Play or the App Store. The store handles payment and card details; we never receive them. To subscribe you must first sign in with a welegato ID, so the subscription works across Vicino Labs apps and between Android and iOS.

  • The app sends the proof of purchase (purchase token) to our server, which checks with the store that the purchase is real and the subscription active. The server stores an irreversible hash instead of the token, plus the product, time, subscription end date, the link to your ID and AI time records.
  • Top-up records are kept as hashes, separated from the account, even after an ID is deleted, so the same purchase is never credited twice.

Legal basis: providing what you bought (b), preventing abuse (f). The store's processing falls under the Google Privacy Policy or Apple Privacy Policy.

12. Ask Prova

When you ask the assistant, your question, the app language, the name of the screen you are on and a few recent messages go to our server and the Google Gemini API to write the answer. It works without signing in, and questions are not stored. No recordings, videos or take titles are sent; picking a take happens on the device.

To keep it free with up to 30 questions a day, a hash of the install number, the time, the question length, the language and the kinds of suggested actions are kept for 30 days to prevent abuse, then deleted. Legal basis: providing the feature you asked for (b), preventing abuse (f).

13. Reporting an AI answer

If an Ask Prova answer or an AI analysis seems offensive or wrong, you can report it. Only then do the reported AI text (for Ask Prova, the question and the answer), the reason you chose, your comment, the app language and a hash of the install number go to our server, and our team gets a notification mail. Reports are used only for review and to improve the AI, and are kept for 180 days, then deleted. To prevent abuse we accept up to 10 reports a day per install. Legal basis: our legitimate interest in improving the service and handling inappropriate AI output (f).

14. Service providers (processors) and transfers

These providers are involved only when you sign in or use AI analysis, the cloud, a subscription or Ask Prova. If you only record without signing in, no data goes to any of them.

  • Supabase — sign-in (Supabase Auth), server and database, EU data centre (Frankfurt, Germany) (policy)
  • Google — Gemini API (AI analysis and assistant), Google Play payments and purchase checks, Google sign-in
  • Cloudflare — file storage of the cloud (R2, Plus), protection against automated email sign-ups (Turnstile)
  • Apple — App Store payments (iPhone, iPad)

Where these providers process data outside the EU (e.g. in the USA), this is based on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

15. Data we don't collect

Without signing in we receive no name, email or phone number. We collect no location, contacts or advertising ID, and there are no ad networks or analytics or tracking SDKs. The picture of a video is not sent, not even for AI analysis.

16. Children

The basic features such as recording and comparing takes have no age limit. Signing in with a welegato ID is only for people aged 16 or over; under 16, AI analysis and Ask Prova need a parent's consent. For lessons in which a minor is recorded, please get a parent's or guardian's consent.

17. Your rights

  • Access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR)
  • Lodge a complaint with a supervisory authority — e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW) or the authority where you live

Takes on your device can be deleted in the app or by uninstalling it. Your ID and cloud data can be deleted at welegato.com/konto-loeschen or on request to contact@vicinolabs.com.

18. Changes to this policy

We may update this policy when the law or the app changes; changes and the effective date are posted on this page.

19. Contact

For questions about data protection, please contact us.

Trading name
Vicino Labs (sole proprietorship, Einzelunternehmen)
Owner
Jeong-Hwan Lee
Address
Ruhrallee 41, 44139 Dortmund, Germany
Email
contact@vicinolabs.com
Impressum
vicinolabs.com/impressum
This policy is effective from 10 November 2026 (version 1.2). Previous versions 1.1: 9 November 2026, 1.0: 7 November 2026.Terms of Service →Impressum