Privacy Policy

• Account information — such as your email address, used to create your account and sign you in.
• Your content — recordings and the transcripts, summaries, and notes generated from them. Stored content is encrypted on your device before it is uploaded; when “AI features” are on, the relevant audio or text is sent to our AI providers for that step.
• Usage & diagnostics — crash and reliability reports, and app usage events: which feature was used (for example app launch, transcript completed, paywall viewed, purchase, credits running out), with small labels such as the plan or a text length. Usage events are linked to your account ID and an install ID; they never contain your recordings or transcripts. They are on by default, and you can turn them off at any time in Settings → Usage diagnostics.
• Purchase status — your subscription/credit status. Payments are processed by the Apple App Store or Google Play; we do not receive or store your card details.

We do not sell your personal information.

We use your data only to run and protect the service you ask for. For users in regions with a legal-basis requirement (e.g., the EEA/UK), we rely on:

• Performance of a contract — creating your account, syncing and storing your content, and producing the transcripts and summaries you request.
• Consent — turning on “AI features” (sending audio or text off your device) and the resulting cross-border transfer. You can withdraw consent at any time by turning Cloud AI processing off or deleting your account.
• Legitimate interests — securing the service, preventing abuse, and keeping the app reliable through minimal diagnostics.
• Legal obligation — complying with applicable law and responding to valid legal requests.

None. We do not provide your personal data to any third party for that party's own purposes. Every external company that touches your data is a processor acting on our instructions, and they are listed in the next section.

We do not sell personal information and do not share it for cross-context behavioral advertising. We may disclose data if required by law or to protect rights and safety.

Two things that look like a provision and are not. If you create a share link and send it to someone, that is your own decision to share a copy — not a provision by us. And when you buy a subscription or credits, Apple or Google processes the payment directly under their own privacy policies; we receive only your purchase status, and we never send them your data.

We share data only with service providers (processors) that help us run Recnovo, under contracts that limit them to our instructions. They are established in the United States, except Supabase, which is established in Singapore and keeps our data in the United States; some of them also process data in other countries, as the table and the next section say. This is the same list, with the same work and retention, as the cross-border transfer consent you agreed to at sign-up.

Recnovo's servers are located in the United States. To store your data and run transcription and AI processing, some personal data is transferred to and processed in the U.S. Specifically:

• Destination & recipients: United States. The recipients are the processors listed under Processors above, with the work consigned to each and how long they keep it.
• Data transferred: account information (such as your email), the audio or text sent at the moment of processing, purchase receipts and an account identifier for subscription processing, your email address for sign-in messages, and app usage events linked to your account (unless you have turned them off). Stored recordings sync as ciphertext encrypted on your device, which we do not read.
• When & how: transferred over the network (TLS) when you use the service.
• Retention: stored data is kept until you delete it or your account (a long-unpaid cloud copy may be removed after notices and a 30-day grace period — see the Terms); AI providers retain API data for a period each provider sets — up to 30 days for text (longer where the law requires it or to protect the provider’s services or others from harm), and for transcription audio until we ask the provider to delete it, which we do normally about three days after the transcript is saved and again when you delete your account (once that request is processed, the provider’s debugging and moderation logs may still retain related data, and a copy may remain in its backups for up to about 30 days). Each provider’s period and training position is in the processors table and the “No training on your data” section above.

Where required, these transfers rely on your consent (given by turning on “AI features”) and, where applicable, on the data-processing terms our processors provide, which incorporate standard contractual clauses. If you are in a jurisdiction that requires it (e.g., Korea/PIPA, EU/EEA or UK under GDPR), your use of Recnovo with “AI features” turned on constitutes consent to this cross-border transfer, and you may withdraw it by turning the feature off or deleting your account. Questions: hello@recnovo.com.

The mobile app asks for the device permissions below to provide these features. It asks through the operating system’s prompt the first time you use the feature.

We do not ask for access to your photo library, location, contacts or calendar. On iOS, importing a file uses the system file picker, which gives the app only the file you choose, without a separate permission.

You can refuse an optional permission and still use everything except that feature. Without microphone permission you cannot record. You can change any permission at any time in your device’s settings (iOS: Settings > Recnovo; Android: Settings > Apps > Recnovo > Permissions).

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. Our legal bases are described in “How we use your data” above.

You may lodge a complaint with your local Data Protection Authority (in the EEA) or the Information Commissioner's Office (in the UK). Where we are required to appoint an EU and/or UK representative under Article 27, their contact details will be published here. Transfers to the United States are made under appropriate safeguards as described in “International data transfers”.

This section applies if you live in the United States and adds to the rest of this policy. In the United States, Recnovo is available only to people aged 18 or older. Whether or not a particular state’s privacy law applies to us, we offer what this section describes to every user who lives in the United States.

What is not yet available to U.S. accounts. For accounts whose registered country is the United States — and accounts whose country we do not know — cloud transcription and AI features are not yet available, speaker separation is not offered, and share links cannot be created. Our servers enforce this, not only the app. Recording in the mobile app still works on your device.

What we collect, from where, and why. In the last 12 months and going forward, we collect: identifiers (email address, account identifier, sign-in identifiers from Apple or Google); customer records (your account and support messages); commercial information (subscription and credit status and purchase receipts — not card details); audio and other electronic information (your recordings, transcripts and AI output); internet activity (diagnostics and web access logs); and sensitive personal information — your account sign-in credentials, and whatever sensitive details, such as health information, you or others say in a recording. We collect it from you, your device, the sign-in provider you choose and the app store, and use it only to provide, secure and support the Service and to comply with law. We disclose it only to the processors in the Processors table, for the work stated there. We keep it for the periods in “How long we keep your data”. We do not collect precise location, contacts, calendar entries or advertising identifiers.

No sale, no sharing for advertising, no profiling. We do not sell personal information, do not share it for cross-context behavioral or targeted advertising, and do not use it for profiling that produces legal or similarly significant effects. We use sensitive personal information only to provide the feature you ask for, and not to infer characteristics about you.

Your rights. You may ask us to confirm whether we process your personal information and to give you access to it; to delete it; to correct it; and to give you a copy in a portable form. You can delete recordings or your whole account, and export your content (TXT, DOCX, PDF), yourself in Settings; for anything else, email hello@recnovo.com. An authorized agent may make a request for you with your signed permission. To protect your account, we verify a request by confirming it from the email address on the account (or by asking you to sign in); we ask for no more information than that needs. We respond within 45 days; if we need more time — up to 45 more days — we will tell you why within the first 45. We will not treat you differently for exercising these rights.

Appeals. If we decline a request in whole or in part, we tell you why. You can appeal by replying to our answer, or by writing to hello@recnovo.com with “Privacy appeal” in the subject, within 60 days of it. We review the decision again and answer in writing within 60 days of receiving the appeal, with our reasons. If you are not satisfied, you may contact the Attorney General of your state.

Do Not Track and Global Privacy Control. Recnovo does not track you across other companies’ websites or apps over time, and does not let third parties do so through recnovo.com or the app — the website runs no third-party analytics or advertising scripts and sets no advertising cookies. Because there is no such tracking to switch off, we do not change how we handle data when a browser sends a Do Not Track signal. We do not sell or share personal information, so a Global Privacy Control signal has nothing further to turn off; if that ever changes, we will honour it as a request to opt out.

Health and voice information. How we handle health information that appears in your recordings is set out in our Consumer Health Data Privacy Policy, and how speaker separation works — including what we do not do with voices — in our Voice and Speaker Separation Policy.

If you appear in someone else’s recording. You can contact us at hello@recnovo.com even if you do not use Recnovo. Stored recordings are encrypted on the account holder’s device and we do not read them, so we cannot search recordings for your voice or name. If you can tell us which recording or share link is involved, we will tell the account holder about your request, disable a share link that exposes you, and handle a request to delete as the law requires.

Children. If we learn that we have collected personal information from a child under 13, we delete it.

For users in the Republic of Korea, we handle personal data under the Personal Information Protection Act (PIPA). You may request to access, correct, delete, or suspend the processing of your personal data, and withdraw consent at any time.

Transfer of personal data abroad (국외 이전): with your consent, the items listed in “International data transfers” are transferred to the United States. Recipients: the processors listed under Processors; country: United States; method: encrypted (TLS) network transfer at the time of use; retention: as stated above. You may refuse by leaving “AI features” off; core on-device recording still works.

Privacy Officer (개인정보 보호책임자): Junmee You, Representative Director, serves as our Personal Information Protection Officer. Contact: hello@recnovo.com.

If you need help with a complaint or redress about how your personal data is handled, you can also contact these Korean bodies:

• Personal Information Infringement Report Center (KISA) — privacy.kisa.or.kr / 118
• Personal Information Dispute Mediation Committee — kopico.go.kr / 1833-6972
• Supreme Prosecutors’ Office — spo.go.kr / 1301
• Korean National Police Agency Cybercrime Reporting System — ecrm.police.go.kr / 182

For users in Japan, we handle personal data under the Act on the Protection of Personal Information (APPI). Our purpose of use is to provide transcription and AI features, operate your account, provide support, and keep the service secure.

Providing your data to the processors named above, which are located in a foreign country (the United States), is done with your consent and with the information about that transfer set out in “International data transfers”. To request disclosure, correction, deletion, or to stop the use of your personal data, contact hello@recnovo.com.

Once a year we email members whose personal data we are processing, in line with the notice items set out in Korea's Personal Information Protection Act art. 20-2 and art. 15-3 of its Enforcement Decree. The email states the period covered and points to the three items below; this policy is where they are set out in full.

• The purposes your personal data was collected and used for, and what was collected — What we collect and How we use your data and our legal bases.
• Anyone your personal data was provided to, why, and what was provided — Provision to third parties, which states there is none.
• The processors handling personal data on our instructions and what they do — Processors.

This is a data-protection notice, not marketing: it is sent regardless of your marketing preferences. Since 8 September 2026 it is sent to members in Korea.