← Back
Privacy Policy
Last updated: May 2026
Lauda ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Lauda app.
1. Data We Collect
- Account information: email address and password (hashed)
- Voice recordings: audio files you record or upload for transcription
- Transcripts: text generated from your voice recordings
- Translations: text you translate using our translation features
- Conversation logs: AI conversation sessions you initiate
- Reminders: events extracted from your transcripts
- App preferences: language settings, notification preferences
- Usage data: which features you use and how often (anonymised)
2. How We Use Your Data
- Provide transcription, translation, and AI conversation services
- Store your transcripts and allow you to access them across devices
- Send you reminder notifications you have explicitly set up
- Improve our services through anonymised usage analytics
- Provide customer support when you contact us
We do not sell your data, train external AI models on your private content, or use your data for advertising.
3. Third-Party Services
We use the following processors strictly to deliver the features above:
- Supabase — authentication, encrypted database, file storage
- OpenAI — Whisper (transcription), GPT (chat, lesson generation)
- ElevenLabs — text-to-speech voice synthesis
- RevenueCat — subscription management (no payment info reaches us)
- Firebase — crash reporting, analytics, push notifications
- Groq — accelerated transcription for short clips
Each provider's policies apply when your data passes through them. Content sent for transcription/translation is processed and not retained beyond the request lifecycle.
4. Data Retention & Deletion
You can delete your account and all associated data at any time from Settings → Delete Account. Once confirmed, your data is permanently removed within 30 days from our active systems and within 90 days from encrypted backups.
5. Security
- All API communication uses TLS 1.3 encryption in transit
- Row-level security on every database record — your data is isolated from other users at the database layer
- Rate limiting on all endpoints to prevent abuse
- Login attempt lockout after repeated failures
6. Your Rights (GDPR, CCPA, etc.)
- Access — request a copy of all your data
- Correction — update inaccurate data via app settings
- Deletion — remove your account and all data
- Portability — export your transcripts and other content
- Objection — opt out of analytics in app settings
To exercise any right, email [email protected].
7. Children
Lauda is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
8. Changes
We may update this Privacy Policy. Material changes will be notified in-app at least 7 days before they take effect.
9. Contact
Questions? [email protected]