Privacy

HeadVoice is built so that your camera picture stays on your own computer.

What stays on your computer

• The camera picture. It is processed in memory to measure head position and whether your eyes are open, and is never stored.
• Session logs: the measured numbers (head angles, eye openness, signal quality, and the positions of 68 face landmarks) and the messages chosen, saved in the HeadVoice folder so a helper can review them. They are never uploaded automatically. You can delete the data folder at any time.

What can go to the cloud

• Adaptation (when online): every minute or so, a short summary of numbers, such as how far you tilted compared with your calibration and how many choices you cancelled. No picture, no face shape, no messages you said. It is checked on your computer before it is sent.
• Cloud calibration (only if you choose it): a 25-second clip, uploaded encrypted, used once to compute your settings, and deleted as soon as it is read. Calibrating "on this computer" uploads nothing.

Where it is processed

Cloud parts run in Amazon Web Services (United States, us-east-1): encrypted storage with automatic deletion for calibration clips, and Amazon Bedrock for the adaptation model. A decision log (the numbers and the decision, never pictures) is kept to show why the app changed something.

Safety

Nothing is ever spoken without your own confirming blink. The cloud model can only adjust the interface within fixed limits; it cannot speak, alert anyone or see video. HeadVoice is a research prototype, not a medical device.