Privacy policy

Last updated: October 30, 2026

1. Data controller

The controller of personal data is Miha Mlakar, Studenca 3b, 1241 Kamnik, Slovenia (“we” or “us”).

For any questions about personal data, contact us at info@supertranscription.com.

2. What data we process

We process only the data that is strictly necessary to run the Service:

  • Audio files: recordings uploaded on the homepage are sent to the transcription server for processing only; they are deleted after transcription and we don’t store them. If you sign in and save a recording in My notes, we keep the recording and its transcript until you delete them.
  • Account data: when you sign in with a Google account we receive your email address and name, and when you sign in with Apple ID we receive your email address (or Apple’s relay address, if you chose to hide yours). We don’t share this data with third parties for marketing purposes.
  • Technical data: IP address, browser type and basic access logs, to prevent abuse. For signed-in accounts, also which days and on which device (web, iPhone, Mac) the account was used, to measure how the service is used; never the content.

3. Legal bases and purposes of processing

  • Performance of a contract (Article 6(1)(b) GDPR): transcription, account management, billing of subscriptions.
  • Legitimate interest (Article 6(1)(f) GDPR): preventing abuse, security of the Service, measuring the performance of advertising and improving the Service. We occasionally (at most once a month) send news about the Service to users with an account; every message has an unsubscribe link.
  • Consent (Article 6(1)(a) GDPR): where you give it explicitly: for sending recordings and notes to artificial intelligence services (below) and, for example, for receiving email notifications.

4. Processors and third parties

To run the Service we use reliable third-party providers who act as data processors:

  • Google (Google Ireland Ltd.): sign-in through Google OAuth.
  • Apple (Apple Distribution International Ltd.): sign-in with Apple ID (Sign in with Apple).
  • Cloudflare, Inc. (USA): hosting of the web application, delivery and protection of the website, cookie-free anonymous visit statistics, and storage of the recordings in My notes (Cloudflare R2).
  • PlanetScale, Inc. (USA): database hosting (servers in Frankfurt, EU).
  • ElevenLabs, Inc. (USA): AI transcription of recordings and dictation (speech to text). Audio is sent only to be converted into text.
  • Google Gemini (Google): artificial intelligence in My notes. From a note’s title and beginning it picks the note’s icon. In a note’s chat (“Ask AI”), the text of the note and the visible part of the transcripts of its recordings are sent with every question; we keep the conversation with the note until you delete it. Google does not use data from the paid service to improve its products.
  • Cloudflare, Inc. (USA): sending emails (welcome messages, subscription notices, occasional product news).
  • Anthropic, PBC (USA): the Claude AI helps prepare replies to messages you send to our email address or through the “Write to us” form on the website. A person reads and approves every reply before it is sent. Cloudflare receives and stores these messages.

Artificial intelligence and your permission. We send recordings and dictation (audio) to ElevenLabs, which converts them into text. We send Google Gemini the text of notes and transcripts for “Ask AI” and “Ask your notes”, note titles and beginnings and folder names for choosing icons. This happens only when you use the feature. The iPhone app asks for your permission before the first send; you can withdraw it at any time in Settings, and we will then send nothing more to these services. Without permission you can still use the app to write notes. Both providers process the data only on our behalf and on our instructions, under a data processing agreement that requires the same level of protection that we provide.

Connected assistants. If you add our connector in Claude, ChatGPT or another AI assistant and confirm it on our page, that assistant can read your notes, folders and transcripts and, if you allow it, add new notes and add text to the end of existing ones. It can't delete or change them. What the assistant reads is processed by its provider (for example Anthropic or OpenAI) under its own privacy rules, not as our processor: that is your choice and your agreement with them. We keep only the connection details (the assistant's name, its permissions and when it was last used). You can disconnect it any time in Settings (Connected apps), and from then on the assistant gets nothing more.

Some processors may be located outside the EU/EEA (in particular in the United States). In such cases, personal data is transferred on the basis of the European Commission’s standard contractual clauses (SCCs) or other appropriate safeguards.

5. Cookies and tracking

On your first visit we show a cookie notice where you can accept or reject cookies. We record your choice in a cookie called cookie_consent (valid for 180 days). You can change your choice at any time by deleting this cookie in your browser settings and refreshing the page.

Without your consent we use only the following:

  • Cloudflare Web Analytics: anonymous visit statistics; it uses no cookies and collects no personal identifiers. We also run our own cookie-free visit statistics (pages and time on page); the IP address is not stored, and the anonymous visitor ID changes every day.
  • Technical cookies: strictly necessary for operation (sign-in, session, consent setting). We don’t need consent for these because they are essential for the Service to work.

6. Retention period

  • Audio recordings: we don’t store recordings uploaded on the homepage; the transcription provider processes them only to carry out the transcription. We keep recordings in My notes until you delete them.
  • Transcripts: we don’t store the text of homepage transcripts for free use or a single-recording purchase; they appear only in your browser. For Pro subscribers we save homepage transcripts in My notes. We keep transcripts in My notes together with the recording (if there is one) until you delete them. To enforce the limit of the free version, we keep usage data (date, duration and file size).
  • Account and subscription data: for as long as the account exists and for 12 months after it is closed. We keep invoices and payment data for as long as accounting and tax rules require (10 years in Slovenia).
  • Access logs: at most 90 days.

7. Your rights (GDPR)

If you are in the European Union or the European Economic Area (EU/EEA), you have the following rights under the GDPR:

  • the right to access your personal data,
  • the right to correct inaccurate data,
  • the right to erasure (the “right to be forgotten”),
  • the right to restrict processing,
  • the right to data portability,
  • the right to object to processing based on legitimate interest,
  • the right to withdraw consent at any time.

Send your requests to info@supertranscription.com. We will reply within 30 days at the latest.

If you believe we are violating your rights, you have the right to lodge a complaint with a supervisory authority. As our operator is based in Slovenia, this is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

8. Data security

We protect data with encryption in transit (HTTPS/TLS), restricted access and regular updates of our infrastructure. Even so, no system is 100% secure. In the event of an incident, we will notify affected users and the competent supervisory authority within the legal deadlines.

9. Children

The Service is not intended for children under 16. If we find that we have unintentionally collected a child’s personal data, we will delete it immediately.

10. Changes to this policy

We may update this privacy policy from time to time. We will tell you about material changes by email or with a notice on the website. The date of the last update is shown at the top of this page.

11. Contact