Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and the identifier from the sign-in provider you use (Sign in with Apple or Google). Authentication is handled by Supabase; we do not store your sign-in password.
• Voice recordings and transcripts — the audio you record or upload, and the text transcripts produced from it.
• AI outputs — the summaries, drafts, titles, and chat responses generated from your content.
• Content and personalization you provide — imported text, tags, and the context terms or background you add to improve transcription and drafting accuracy.
• Usage and device data — app interactions, feature usage, device type, operating system, and diagnostic information, collected through analytics to keep the Service reliable.
• Subscription information — your subscription status and purchase history. Payments are processed by the Apple App Store or Google Play through our provider Adapty; we never receive or store your full payment card number.

What we do not collect

We do not request government identifiers, payment card numbers, precise geolocation, biometric identifiers, health information, or passwords and authentication secrets.

We use your information to:

• Provide the core Service — record, transcribe, summarize, draft, search, and chat across your notes;
• Personalize transcription and drafting using the context and language preferences you set;
• Maintain, secure, debug, and improve the Service;
• Process subscriptions and provide customer support;
• Communicate with you about your account and important changes; and
• Comply with legal obligations.

We do not sell your personal information, and we do not use your recordings or notes to serve you advertising.

To provide its core features, the Service sends your audio and transcript text to OpenAI to perform the processing you request. Specifically:

• Speech-to-text — your audio is sent to OpenAI to produce transcripts.
• AI drafting, summaries, titles, and chat — your transcripts and related text are sent to OpenAI to generate the output.
• Search — to power semantic search across your notes, short excerpts of your transcripts are sent to OpenAI to generate numerical embeddings.

OpenAI processes your content to perform the requested operation and handles it under its own terms and privacy policies. We do not sell your content and do not use it to serve advertising. Before you record or import audio in the mobile app, DraftOut asks for your permission to send audio and transcript text to OpenAI. If you do not agree, you can decline and the app will not start that recording or import flow.

We share information with the following providers strictly to operate the Service:

• OpenAI — speech-to-text transcription, AI summaries, drafts, titles, chat, and search.
• Cloudflare R2 — storage of your audio recordings.
• Supabase — database and authentication.
• Adapty, with the Apple App Store and Google Play — subscription and payment processing.
• PostHog — product analytics and diagnostics.
• Apple and Google — sign-in / authentication.

We share your personal data with these providers only to operate the Service, and only to the extent each provider needs it to perform its function. We require each of them, by contract, to safeguard your data and to provide the same or equal level of protection for it as described in this Privacy Policy, and to use it solely to provide services to us and not for their own purposes.

Your data, including audio recordings and transcripts, is stored on servers located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where our providers operate, which may have data-protection laws different from those in your country. Where required, we rely on appropriate safeguards for such transfers.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete an individual note, it is removed from your account. When you delete your account, we delete your recordings, transcripts, and associated content, except where we must retain limited information to comply with legal obligations, resolve disputes, or enforce our agreements.

We use industry-standard measures to protect your information, including encryption in transit and access controls that limit who can reach your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address vulnerabilities promptly.

Depending on where you live, you may have rights over your personal data. You can:

• Access and review the content in your account;
• Correct your account information;
• Delete individual notes, or delete your entire account;
• Export your transcripts and notes;
• Opt out of non-essential analytics; and
• Withdraw consent by discontinuing use of the Service.

If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct, and erase your personal data and to grievance redressal. If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR, including access, rectification, erasure, restriction, portability, and the right to object. To exercise any of these rights, contact us using the details below.

You can delete your account at any time from within the app: go to Settings → Profile → Delete Account and follow the confirmation steps. This permanently removes your recordings, transcripts, and notes, subject to the limited legal-retention exceptions described above. You may also email us and we will process your request.

The Service is not directed to children. Under India's Digital Personal Data Protection Act, 2023, a child is anyone under the age of 18. We do not knowingly process the personal data of a child without verifiable parental or guardian consent. If you believe a child has provided us with personal information without such consent, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at contact.unidesk@gmail.com.