Add first draft of privacy policy

Author: dylanhand

PRIVACY_POLICY.md

@@ -0,0 +1,60 @@
+# Privacy Policy
+
+**Donate Your Speech**
+Last updated: 2026-03-13
+
+## Data Controller
+
+UiT The Arctic University of Norway (UiT)
+Divvun
+Contact: <sjur.n.moshagen@uit.no>
+
+## What Data We Collect
+
+When you use Donate Your Speech, we collect the following:
+
+- **Voice recordings**: Audio recordings you voluntarily submit through the app.
+- **Recording metadata**: Duration, sample rate, bit depth, number of audio channels, content type, and timestamp of each recording.
+- **Device information**: Operating system name and version (e.g. "Android 14").
+- **Client identifier**: A randomly generated anonymous ID (UUID) stored on your device. This is not linked to your name, email, or any account. It is used solely to group your donations and to allow you to delete your data.
+
+## What We Do Not Collect
+
+- We do not collect your name, email address, or any account information.
+- We do not use analytics, advertising, or tracking services.
+- We do not use cookies.
+- We do not access your contacts, location, camera, or any data beyond microphone input.
+
+## Why We Collect This Data
+
+Your voice recordings are used to build speech corpora for language research and the development of language technology. The metadata is collected to ensure the technical quality of the recordings.
+
+## Permissions
+
+The app requests **microphone access** to record your voice. No recordings are made without your explicit action. You may deny or revoke this permission at any time through your device settings.
+
+## Where Your Data Is Stored
+
+Recordings and metadata are stored locally on your device until uploaded. Uploaded data is transmitted over HTTPS and stored in Microsoft Azure Blob Storage in the North Europe region (hosted in the EU/EEA).
+
+## Data Sharing
+
+We do not sell your data. Voice recordings and associated metadata may be shared with research partners for the purpose of language research and language technology development. Data is not shared with advertisers or other third parties for commercial purposes.
+
+## Data Retention and Deletion
+
+You may delete all data associated with your client identifier directly from within the app. This removes your recordings from both the local device and the server. If you need further assistance with data deletion, contact us at the address above.
+
+## Children's Privacy
+
+This app is not directed at children under the age of 13. We do not knowingly collect data from children.
+
+## Changes to This Policy
+
+We may update this privacy policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page.
+
+## Contact
+
+If you have questions about this privacy policy or your data, please contact:
+
+<sjur.n.moshagen@uit.no>