Key points: audio for live listening translation usually goes directly from your browser to the speech provider. Calls, file transcription and voice cloning may pass through the Site's server. Call recordings and subtitles are stored on the server and can be viewed by people with the room link. File transcription results are also stored temporarily. Use recording and cloning only with permission from the participants or the person whose voice is used, and keep room links secure.
1. What we collect
Account information: the account identifier, email address, name and profile-picture URL obtained at Google sign-in, plus the registration time, last sign-in time and the invitation code used.
Usage records: recognition time, starts, summaries, call recognition and read-aloud time, and estimated costs. Listening translation keeps the most recent 30 dates with daily records and retains monthly totals long-term for reconciliation. Call usage is stored separately for limits and cost checks.
IP address: used to limit failed sign-in attempts and in the reverse proxy's access log; kept briefly.
Call content: recordings, subtitles, translations, typed messages, call times and related archive information are stored on the server. The room link is a credential for accessing these records.
Voice samples: when you use voice cloning, samples pass through the Site to Soniox to generate a read-aloud voice. Original samples uploaded through listening translation settings are also kept by the Site. Upload only your own voice or a sample for which the person whose voice is used has given explicit permission.
Purchase records: when you buy an hour pack we store Stripe's checkout and payment identifiers, the amount, time, pack type and the email address you entered on the payment page. Card numbers are never stored. Your balance and its change history are also kept on the server.
Data in your browser: listening subtitles, session records, summary history, interface settings, sign-in tokens and room credentials are stored locally. Summary, file transcription and call features also send the relevant content to the Site or its providers. The Site's sign-in does not depend on cookies.
2. Where your voice and text go
Real-time recognition and translation: listening translation usually sends audio directly from your browser to Soniox for recognition, translation and speech synthesis. The Site issues temporary access credentials. Recognition and read-aloud connections during calls may use the Site's proxy, so audio does not always bypass the Site.
Video calls: participants exchange audio and video using WebRTC (browser real-time communication), potentially through TURN (a network relay service) when a direct connection is unavailable. The device handling recognition sends audio to the speech provider and uploads recordings and subtitles to the Site for archiving. Fixed family rooms and rooms created with the shared creation passcode retain access for the authorized family observer. Private rooms created with an account creation ticket are excluded from that shared observer access.
AI summary: when you press "Summarize", the subtitle text in the range you selected, together with the scene and terms you entered, is sent to a third-party AI provider to generate the summary. The Site stores neither the text sent nor the summary produced (summaries live only in your browser).
File transcription and translation: uploaded audio passes through the Site to Soniox; temporary upload audio on the Site is cleaned up. Completed results are stored until 24 hours after the task was created. Once the result has been saved successfully, the Site requests deletion of the audio and transcription task from Soniox. Background cleanup retries expired results and failed upstream deletions; service failures may delay deletion.
Sign-in: Google sign-in is provided by Google; the Site verifies the sign-in credential with Google.
Payments: processed by Stripe (Stripe, Inc., United States). Card details you enter on Stripe's payment page go directly to Stripe; the Site never receives your card number. The Site tells Stripe your account identifier and the pack you are buying, and Stripe notifies the Site of the payment result.
Each provider applies its own privacy policy. The Site does not sell your data. Sharing a room link may give its recipient access to the call and its archive; share it only with people you trust.
3. Purposes
Providing the service itself; calculating quotas, balances and fees; preventing abuse (sign-in limits, quotas); and troubleshooting.
4. Retention and deletion
Account information: contact the operator to request access, correction, deletion or deactivation. There is currently no self-service process that automatically completes account deletion.
Usage: listening translation keeps the most recent 30 dates with daily records and monthly totals long-term. Call usage is retained separately for reconciliation.
Call recordings and subtitles: accessible to people with a valid room link. New archives created after this update in private account rooms are retained for a default of 30 days from the start of the call; background cleanup deletes expired archives after the call has ended. Failures may delay cleanup; contact the operator to confirm the configured period. Fixed family rooms, rooms created with the shared creation passcode, and existing archives without a recorded deletion deadline are not automatically deleted when their room links expire; they remain until handled by the operator. Contact the operator to request earlier deletion.
File transcription results: retained until 24 hours after task creation. After completion, deletion of upstream audio and tasks is requested and retried on failure; actual deletion may be delayed.
Purchase records and balance: retained long-term for reconciliation. Contact the operator to request account deletion or anonymization of associated identifiers; the operator will confirm what can be processed. Automatic anonymization is not guaranteed.
Voice samples and generated voices: request deletion using the voice settings or contact the operator. Provider outages may cause deletion to fail or be delayed. Deactivating an account does not automatically delete these voices.
Server logs: retained according to the deployment's logging configuration. Contact the operator for information or to request handling of relevant records.
Data in your browser: cleared by you in your browser; "Sign out" removes the sign-in token.
5. Your rights
You can contact the operator at any time to access, correct or delete your account data, or to have your account disabled. Contact: otogi2025@gmail.com.
6. Security
The deployed service uses HTTPS (encrypted web connections). Google sign-in tokens are signed, have a default lifetime of 30 days, are renewed during normal use and can be revoked by the operator. Room links and locally stored room credentials also grant access and should not be made public. Keep your Google account and device secure.
7. Minors
Users under 18 should use the Site with a guardian's consent. Guardians who want a minor's data deleted should contact the operator.
8. Changes
Changes to this policy are published on this page with an updated date. Significant changes will be announced on the Site.