Privacy Policy

Last Updated: February 4, 2026

This Privacy Policy describes how JustTranscribe collects, uses, and shares information when you use our mobile application.

Data Controller

The data controller responsible for your personal data is:

Richard Carruthers
Trading as JustTranscribe
Contact: support@justtranscribe.com

Information We Collect

Audio Recordings

JustTranscribe requires access to your device's microphone to record audio for transcription purposes. Here's how we handle audio:

• Audio is never stored on our servers. When you record audio, it is temporarily stored on your device only.
• Audio is sent directly to AssemblyAI (our transcription provider) for processing and is deleted immediately after transcription.
• We do not save, archive, or retain your audio recordings.
• Audio is never shared with third parties for marketing or advertising purposes.

Transcriptions

Transcription results are not stored in our database. When transcription completes, the text is displayed to you in the app but is not saved to our servers. You must manually copy or save transcriptions to preserve them.

Subscription and Usage Data

To manage your subscription and usage limits, we collect:

• Subscription tier (none, starter, standard, or pro)
• Total seconds of transcription included in your plan
• Seconds of transcription used
• Subscription period dates
• RevenueCat user ID (for payment processing)

Authentication Information

When you sign in, we collect minimal authentication data:

• Email/Password: If you sign in with email, your email address and encrypted password
• Apple Sign In: Email (if shared) and name (if shared) - Apple allows you to hide your real email
• Google Sign In: Email and basic profile information (name, profile picture) - we only request basic profile scope
• Unique authentication identifiers for session management

Device Information

We do not collect device information, analytics, or crash reports. The app does not use analytics or tracking services.

How We Use Your Information

We use the information we collect to:

• Provide transcription services: Audio is sent to AssemblyAI for processing
• Authenticate and manage your account: Verify your identity and maintain secure sessions
• Manage subscriptions: Track usage against your plan limits and process payments via RevenueCat
• Provide customer support: Respond to your inquiries and support requests

We do not: Use your data for advertising, sell your data to third parties, or track your behavior across apps or websites.

Lawful Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Contract performance: Processing audio for transcription, managing your account, and providing the Service you requested
• Legitimate interests: Tracking usage against subscription limits, maintaining service security, and improving the Service
• Consent: Where you have given consent for specific processing (e.g., optional marketing communications, if any)

International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA), specifically the United States. The following services process data in the US:

• AssemblyAI (transcription processing) - US-based
• RevenueCat (payment processing) - US-based

These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreement (IDTA) where applicable. Your subscription and account data is stored in the EU (Supabase EU-West region).

Cookies and Tracking

JustTranscribe does not use cookies, tracking pixels, or similar technologies. We do not track your behavior across apps or websites.

Data Storage and Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption in Transit: All data sent between your device and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Subscription and usage data stored in our database (Supabase PostgreSQL) is encrypted at rest
• Secure Token Storage: Authentication tokens are stored in your device's secure storage (iOS Keychain on iPhone, Android Keystore on Android)
• Authentication Security: Uses secure OAuth 2.0 protocols with JWT tokens
• No Audio Storage: Since audio is never stored on our servers, there is no audio data at risk

Third-Party Services

JustTranscribe uses the following third-party services:

Transcription Processing

• AssemblyAI - Your audio is sent to AssemblyAI for transcription processing. Original audio files are deleted immediately after transcription. Transcoded versions are retained for 3 days for troubleshooting, then automatically deleted. Transcripts are deleted from AssemblyAI immediately after being sent to you. See AssemblyAI's Privacy Policy.

Payments and Subscriptions

• RevenueCat - Processes subscription status, purchase history, and user ID for payment management. See RevenueCat's Privacy Policy.

Infrastructure

• Supabase - Hosts our database and authentication infrastructure. Stores subscription and usage metadata. See Supabase's Privacy Policy.

Authentication Providers

• Apple Sign In - We collect only email and name (if you choose to share). Subject to Apple's Privacy Policy.
• Google Sign In - We request only basic profile scope (email, name, profile picture). Google user data is used solely for authentication and account management. We do not request additional Google API scopes. Subject to Google's Privacy Policy.

We do not use: Third-party analytics services, advertising networks, crash reporting tools, or tracking services.

Your Rights

You have the right to:

• Access your personal data: View your subscription status and usage data in the app settings
• Request account deletion: Delete your account directly in the app settings, or contact us at support@justtranscribe.com
• Withdraw consent: Sign out of the app or delete your account at any time
• Data portability: Since transcriptions are not stored on our servers, you retain full control by saving them locally on your device

Note: Transcriptions are not stored in our database, so there is no transcription data to export. Your subscription and usage metadata can be provided upon request.

Data Retention

We retain minimal data as follows:

• Audio recordings: Never stored - deleted immediately after transcription
• Transcriptions: Never stored in our database - remain only on your device
• Subscription data: Retained while your account is active
• Usage logs: Retained to track your subscription limits

Account Deletion: You can delete your account at any time from the app settings. When you delete your account, all associated data (subscription records, usage logs, authentication data) is permanently and automatically deleted from our database immediately. There is no retention period - deletion happens instantly via database cascade triggers.

Note: RevenueCat may retain purchase history for legal and tax compliance purposes according to their own retention policies.

Children's Privacy

JustTranscribe is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

support@justtranscribe.com