ScribeAI Meeting Privacy Policy

1. What we collect

• Apple ID user identifier (no real name) — used to recognize the same user across devices and link subscription status.
• Optional email — only if you choose to share it during Sign in with Apple.
• On-device data — audio recordings, transcripts, AI summaries, action items, tags and project labels are stored locally on your device.
• Subscription status — synced via RevenueCat and the Apple App Store.

2. What we do not collect

• No real names (unless you choose to share one via Sign in with Apple);
• No precise location, contacts, call logs, or photo library;
• No third-party advertising SDKs and no cross-app tracking;
• No clipboard access.

3. Data storage

Recordings and transcripts are stored locally on your device by default (SQLite database + cache directory) — there is no automatic background upload. Only when you explicitly tap “Transcribe” or “Summarize” and give in-app consent is the relevant audio or text sent over encrypted transport (TLS) to our self-hosted AI gateway for processing. You can use the app without signing in.

4. AI processing and third-party AI providers

When you explicitly request transcription or a summary, the data is processed by the following third-party AI providers:

• OpenAI — speech transcription and text summarization (privacy policy)
• Google — AI language and text processing (privacy policy)

We never send your real name, email, Apple ID, or location to AI providers. Results are written back to your device; original data is not persistently retained server-side and only appears in session-level request logs for at most 30 days. AI providers do not use your data to train models or for advertising.

Consent and withdrawal: before your first AI request, the app shows an explicit consent prompt; nothing is sent to third-party AI before you agree. You can withdraw consent anytime in Settings → Compliance → AI data-sharing consent. Withdrawing disables AI transcription and summaries; everything else keeps working.

5. Third-party services

• Apple App Store / StoreKit — subscriptions and payments
• RevenueCat — subscription status aggregation
• Supabase — sign-in sessions and account-deletion backend
• Third-party AI providers (OpenAI, Google, via our self-hosted AI gateway) — process the transcription and summary requests you explicitly submit

6. Your rights

• Access — all data is visible inside the app;
• Deletion — Settings → Delete account & data erases your server-side account and all local data in one step; this cannot be undone;
• Withdraw consent — Settings → Compliance → AI data-sharing consent at any time; deleting your account also withdraws all consent.

7. Children’s privacy

This app is not directed at children under 13. If you believe a child is using it, contact support@sanva.tk to request data deletion.

8. Changes to this policy

We may update this policy from time to time and will announce updates in-app or on this page. Continued use of the app constitutes acceptance of the updated policy.

9. Contact

For privacy questions, contact support@sanva.tk. We respond within 30 days.