Privacy Policy

Last updated: May 2026

Lauda ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Lauda app.

1. Data We Collect

We collect the following data to provide our services:

• Account information: email address and password (hashed)
• Voice recordings: audio files you record or upload for transcription
• Transcripts: text generated from your voice recordings
• Translations: text you translate using our translation features
• Conversation logs: AI conversation sessions you initiate
• Reminders: calendar events extracted from your transcripts
• App preferences: language settings, notification preferences
• Usage data: which features you use and how often (anonymised)

2. How We Use Your Data

We use your data exclusively to:

• Provide transcription, translation, and AI conversation services
• Store your transcripts and allow you to access them across devices
• Improve our services through anonymised analytics
• Send you service-related notifications (reminders, alerts)
• Enforce our Terms of Service and prevent abuse

3. Third-Party Services

To deliver Lauda's features we rely on a small set of established third-party processors. We carefully select providers that contractually agree not to use your data to train their own models and that match or exceed our security standards.

Categories of processors:

• AI transcription, translation, and language-model providers — process your audio and text to return transcripts, translations, summaries, grammar suggestions, lesson content, and conversational replies.
• Voice synthesis (text-to-speech) providers — convert text into natural-sounding audio for the Stories and AI Partner features.
• Image generation providers — create on-demand illustrations from short text prompts.
• Authentication, database, and storage providers — store your account, transcripts, vocabulary, settings, and audio under encrypted at-rest storage with row-level access controls.
• Crash reporting, analytics, and push notification providers — record anonymised performance and crash data so we can fix bugs, plus deliver notifications you opt into.
• Subscription billing providers — manage Premium subscriptions through the Apple App Store and Google Play platforms.

Audio sent to AI transcription or voice-synthesis providers is processed in real time and not retained by those providers beyond the duration of the API call (per their contractual commitments). We do not sell your data to anyone, and we do not allow any processor to use your data for advertising or to train their general-purpose models.

The current list of named processors and their privacy policies is published at https://lauda.studio/privacy/processors and updated whenever we add or replace a provider.

4. Audio Data Retention

Audio files are treated with special care:

• Free plan: Audio files are automatically deleted 48 hours after upload
• Premium plan: Audio files are retained for 90 days, then deleted
• Transcripts (text): Retained until you delete them or your account
• Translations: Cached for performance and retained until account deletion

Audio sent to OpenAI or Groq for transcription is not stored by those providers beyond the duration of the API call.

5. Data Security

We implement industry-standard security measures:

• All data is transmitted over HTTPS/TLS encryption
• Database data is encrypted at rest (AES-256)
• Authentication is handled by Supabase Auth with secure JWT tokens
• Row-level security policies ensure users can only access their own data
• API keys are stored as server-side secrets, never exposed to clients

6. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure ("right to be forgotten"): delete your account and all associated data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to processing of your personal data
• Right to restrict processing: request that we limit how we use your data

To exercise your right to erasure, use the "Delete Account" option in Settings. This permanently deletes all your data from our systems. For other rights requests, contact us at contact@lauda.studio.

7. Children's Privacy

Lauda is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We rely on Standard Contractual Clauses (SCCs) and the Data Privacy Framework for EU-US transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of Lauda after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us:

Email: contact@lauda.studio
Response time: within 30 days (GDPR requirement)

---