Privacy Policy

What We Collect

• Audio recordings you create.
• Transcripts generated from your audio.
• Extracted objects (memories, goals, feelings) produced by our processing pipeline.
• Embeddings derived from memory content to power similarity/duplicate detection.
• Recording metadata such as custom names/nicknames you provide.
• Session/auth data: Firebase UID (authenticated) or guest session token (guests).
• Operational metadata in logs (request IDs, durations, counts, status codes, IP address for security) – no transcript or memory content.

How We Use Your Data

• Process recordings via Google Gemini to transcribe and extract structured objects.
• Generate embeddings from memory content to merge similar items in your universe view.
• Render the universe view from extracted objects.
• Improve reliability using operational metadata (no content) in logs.

Guest vs. Authenticated

• Guest: Data is temporary. Audio, transcripts, extractions, and tokens are deleted when you close the tab or within 24 hours via stale-session cleanup.
• Authenticated: Data persists until you delete it (per-recording delete or “Delete all my data”).

Third Parties

• Google Gemini API: receives full audio, complete transcripts, and memory content (for embeddings) to generate transcripts, objects, and similarity vectors. Google’s data processing terms apply.
• Firebase Auth: authentication and session management.

Retention

See the full retention table at /policies/retention.html.

• Guest data: deleted on tab close or within 24 hours.
• Authenticated data: kept until you delete it.
• Logs: operational metadata only, ~30 days via hosting defaults.

Your Controls

• Delete everything (authenticated): Use “Delete all my data” in the app; this calls POST /api/delete-all and signs you out.
• Delete a single recording (authenticated): Use the delete action on a recording.
• Guest cleanup: Automatic on tab close via /api/guest/cleanup; fallback stale-session pruning within 24 hours.

What We Don’t Collect

• Behavioral analytics or tracking cookies.
• Location data or device identifiers.
• Browsing history outside this app.
• In-app support messages (no support form yet).

Security Basics

• HTTPS transport (host-level).
• Auth required for APIs (Firebase UID or validated guest token).
• Storage isolated by user/guest namespace.
• Logs scrubbed of transcript/memory content.

Contact

Questions or data requests? Email support@yourapp.com.