Privacy Policy

• Account information — such as your email address, used to create your account and sign you in.
• Your content — recordings and the transcripts, summaries, and notes generated from them. Stored content is end-to-end encrypted; when Cloud AI processing is on, the relevant audio or text is sent to our AI providers for that step.
• Usage & diagnostics — minimal, largely aggregated technical data (e.g., crash and reliability signals) to keep the app working.
• Purchase status — your subscription/credit status. Payments are processed by the Apple App Store or Google Play; we do not receive or store your card details.

We do not sell your personal information.

We use your data only to run and protect the service you ask for. For users in regions with a legal-basis requirement (e.g., the EEA/UK), we rely on:

• Performance of a contract — creating your account, syncing and storing your content, and producing the transcripts and summaries you request.
• Consent — enabling Cloud AI processing (sending audio or text off your device) and the resulting cross-border transfer. You can withdraw consent at any time by turning Cloud AI processing off or deleting your account.
• Legitimate interests — securing the service, preventing abuse, and keeping the app reliable through minimal diagnostics.
• Legal obligation — complying with applicable law and responding to valid legal requests.

None. We do not provide your personal data to any third party for that party's own purposes. Every external company that touches your data is a processor acting on our instructions, and they are listed in the next section.

We do not sell personal information and do not share it for cross-context behavioral advertising. We may disclose data if required by law or to protect rights and safety.

Two things that look like a provision and are not. If you create a share link and send it to someone, that is your own decision to share a copy — not a provision by us. And when you buy a subscription or credits, Apple or Google processes the payment directly under their own privacy policies; we receive only your purchase status, and we never send them your data.

We share data only with service providers (processors) that help us run Recnovo, under contracts that limit them to our instructions. All of them are located in the United States. This is the same list, with the same work and retention, as the cross-border transfer consent you agreed to at sign-up.

Recnovo's servers are located in the United States. To store your data and run transcription and AI processing, some personal data is transferred to and processed in the U.S. Specifically:

• Destination & recipients: United States. The recipients are the processors listed under Processors above, with the work consigned to each and how long they keep it.
• Data transferred: account information (such as your email), the audio or text sent at the moment of processing, purchase receipts and an account identifier for subscription processing, your email address for sign-in messages, and minimal usage diagnostics. Stored recordings sync as end-to-end encrypted ciphertext we cannot read.
• When & how: transferred over the network (TLS) when you use the service.
• Retention: stored data is kept until you delete it or your account (a long-unpaid cloud copy may be removed after notices and a 30-day grace period — see the Terms); AI providers retain API data for up to about 30 days for abuse monitoring before deleting it, and do not use it to train models.

Where required, these transfers rely on your consent (given by enabling Cloud AI processing) and, where applicable, on the data-processing terms our processors provide, which incorporate standard contractual clauses. If you are in a jurisdiction that requires it (e.g., Korea/PIPA, EU/EEA or UK under GDPR), your use of Recnovo with Cloud AI processing enabled constitutes consent to this cross-border transfer, and you may withdraw it by turning the feature off or deleting your account. Questions: hello@recnovo.com.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. Our legal bases are described in “How we use your data” above.

You may lodge a complaint with your local Data Protection Authority (in the EEA) or the Information Commissioner's Office (in the UK). Where we are required to appoint an EU and/or UK representative under Article 27, their contact details will be published here. Transfers to the United States are made under appropriate safeguards as described in “International data transfers”.

If you are a California resident, you have the right to know, access, delete, and correct your personal information, the right to opt out of its sale or sharing, and the right to limit the use of sensitive personal information. You can exercise these rights yourself or through an authorized agent.

• Categories collected: identifiers (such as email), audio and other electronic information (your recordings and transcripts when Cloud AI processing is on), and internet/usage activity (diagnostics).
• Sources & purpose: collected from you and your device, used only to provide and secure the service.
• Sensitive personal information: audio content can be sensitive; we use it solely to deliver the feature you request and do not use it to infer characteristics about you.
• No sale or sharing: we do not sell your personal information and do not share it for cross-context behavioral advertising.

For users in the Republic of Korea, we handle personal data under the Personal Information Protection Act (PIPA). You may request to access, correct, delete, or suspend the processing of your personal data, and withdraw consent at any time.

Transfer of personal data abroad (국외 이전): with your consent, the items listed in “International data transfers” are transferred to the United States. Recipients: the processors listed under Processors; country: United States; method: encrypted (TLS) network transfer at the time of use; retention: as stated above. You may refuse by leaving Cloud AI processing off; core on-device recording still works.

Privacy Officer (개인정보 보호책임자): Junmee You, Representative Director, serves as our Personal Information Protection Officer. Contact: hello@recnovo.com. You may also report concerns to the Personal Information Protection Commission (privacy.go.kr / 182) or the KISA Privacy Center (118).

For users in Japan, we handle personal data under the Act on the Protection of Personal Information (APPI). Our purpose of use is to provide transcription and AI features, operate your account, provide support, and keep the service secure.

Providing your data to the processors named above, which are located in a foreign country (the United States), is done with your consent and with the information about that transfer set out in “International data transfers”. To request disclosure, correction, deletion, or to stop the use of your personal data, contact hello@recnovo.com.

Once a year we email members whose personal data we are processing, in line with the notice items set out in Korea's Personal Information Protection Act art. 20-2 and art. 15-3 of its Enforcement Decree. The email states the period covered and points to the three items below; this policy is where they are set out in full.

• The purposes your personal data was collected and used for, and what was collected — What we collect and How we use your data and our legal bases.
• Anyone your personal data was provided to, why, and what was provided — Provision to third parties, which states there is none.
• The processors handling personal data on our instructions and what they do — Processors.

This is a data-protection notice, not marketing: it is sent regardless of your marketing preferences. Since 8 September 2026 it is sent to members in Korea.