Privacy Policy - AI Transcribe

Last updated: 30 October 2026

This policy describes AI Transcribe 1.1.0 for iPhone and iPad.

Who is responsible

Rivia Corp s.r.o. is responsible for the personal data described in this policy. Contact support@riviacorp.com or write to Rivia Corp s.r.o., Nadační 260/35, 742 35 Odry, Czech Republic. VAT ID: CZ07861711.

Recordings, transcripts, and iCloud

The app saves recordings, imported audio and documents, transcript text, titles, translations, generated notes, and related files on your device. Microphone permission is needed to make a recording. File imports access the content you select.

When iCloud is available, the app automatically backs up saved transcript content and associated files to your private iCloud database through Apple CloudKit. Deleting a transcript removes its local files and queues deletion of its iCloud copy. Cloud deletion can be delayed while the network or iCloud is unavailable. Exports, shared copies, and Apple’s retained backups are separate from the app’s deletion operation.

AI processing through OpenAI

Before using AI processing, the app requests permission to send the relevant content through our backend to OpenAI. Depending on the action, this includes audio, transcript or extracted document text, titles, selected passages, questions, and the requested output language. OpenAI processes it to produce transcripts, titles, key points, action items, translations, and answers about a transcript. Review recordings and documents before submitting other people’s personal or confidential information.

You can withdraw this permission in Settings. Existing saved content and playback remain available, but further AI processing requires permission. Withdrawing permission does not recall requests already processed.

Our backend forwards the content for the requested operation and does not maintain a transcript or recording library in its application database. Text-generation requests disable stored responses. This does not mean every provider retains no request data. OpenAI’s API data is not used for model training by default. Provider retention depends on the endpoint and account controls; see OpenAI’s API data controls. We do not promise zero retention or immediate deletion at OpenAI.

Identifiers, service usage, and diagnostics

The app creates an account-free service identity. Our backend stores a pseudonymous identifier and authentication records, subscription status, usage allowances, request outcomes, and model, token, and cost records. This permits access control, restoration of eligible purchases, usage limits, and abuse prevention. The app stores its credentials in device-only Keychain.

We collect app activity and diagnostic events through our own AppPlatform service, hosted on Railway. Events include screen visits, feature actions and outcomes, timestamps, session and event identifiers, app version, operating system, device model, and error identifiers. Events can be linked to an app-specific customer identifier and installation identifier. These identifiers do not require a named account, but they allow us to link activity from the same installation or customer.

The app stores its customer credentials in Keychain, which can preserve them across reinstalls on the same device. We also receive Apple Ads attribution information and verified App Store transaction information, including products, purchase and renewal status, and available purchase-device information. We use this to manage purchases, understand acquisition, diagnose faults, and improve the app. Apple processes payments; we do not receive your payment-card details.

AI Transcribe events describe actions, import formats, selected translation languages, usage counts, and failures. They do not include recording content, transcript text, document text, search terms, or questions in app activity events.

The backend also uses your IP address or an IPv6 network prefix to limit abusive account creation and free use. Expired rate-limit records are cleaned up. Operational alerts can send the pseudonymous service identifier and failure information to Discord; they do not include transcript or recording content.

Support and the website

If you email us, we receive your email address, message, and any attachments. The website contact form also requests your name and the app you need help with. Cloudflare hosts the website and provides Turnstile spam protection; Resend delivers form submissions to our support mailbox. These services process submitted information and technical request data such as your IP address. Do not send sensitive information that is unnecessary for your request.

We use support information to answer your request and investigate the problem. Support correspondence may remain in our mailbox and service-provider records after the conversation ends. It has no automatic deletion deadline in the website application. Contact us about removal of records we control.

We rely on your consent for the AI content sharing described above. We process service identity, purchase, and usage information to provide requested services under our contract with you. Diagnostics, acquisition measurement, and abuse prevention serve our legitimate interests in operating and improving the app. Legal obligations can require further retention.

Apple provides purchases, attribution, and iCloud. Railway hosts our backend and AppPlatform; OpenAI processes AI requests, and Discord receives operational alerts. Website and support providers are described above. Service providers may process data outside your country, including outside the European Economic Area. See their privacy information: Apple, Railway, OpenAI API data controls, and Discord. Contact us for information about the arrangements applying to your data.

Uploaded AppPlatform activity logs are currently retained indefinitely for long-term app analysis; they do not have an automatic expiry. Customer, installation, attribution, and purchase records also have no automatic expiry in that service. This is separate from deleting content inside the app. You can contact us to request deletion of personal data, subject to applicable legal retention requirements.

The AI backend removes completed temporary usage reservations after 90 days. This does not delete durable usage and cost history, purchase records, or the service identity. Those records have no automatic expiry in our AI service. Deleting a transcript does not delete billing, usage, or diagnostic records. We use access controls and protected connections, but cannot guarantee complete security.

Your choices and rights

You can manage system permissions in your device settings. Refusing a permission can prevent the related feature from working. Deleting the app does not cancel an Apple subscription, erase information already sent to service providers, or necessarily remove iCloud data or identifiers stored in Keychain.

Under applicable data protection law, you may request access, correction, deletion, restriction of processing, or a portable copy of your personal data. You may object to processing based on legitimate interests and withdraw consent for processing that relies on consent. Withdrawal does not affect earlier lawful processing. Contact us using the details above. We may need information to identify the relevant records and verify your request; we do not need your Apple Account password. Some records may need to be retained to meet legal obligations or establish or defend legal claims.

You can complain to the Czech Office for Personal Data Protection or your local supervisory authority.

Children and changes

The app is not directed to children under 13. If you believe a child has provided personal data to us, contact us.

We will post changes to this policy on this page and update its date. We will provide further notice or request consent when required for a material change in processing.