Privacy Policy

Last Updated: March 1, 2026

This Privacy Policy describes how JustTranscribe collects, uses, and shares information when you use our mobile application.

Data Controller

The data controller responsible for your personal data is:

Richard Carruthers
trading as JustTranscribe
Contact: support@justtranscribe.com

Information We Collect

Audio Recordings

JustTranscribe requires access to your device's microphone to record audio for transcription purposes. Here's how we handle audio:

• Audio is temporarily uploaded to our cloud storage (Supabase Storage) so it can be sent to AssemblyAI (our transcription provider) for processing. The audio file is deleted from our storage automatically after transcription completes.
• We do not permanently save, archive, or retain your audio recordings.
• Audio is never shared with third parties for marketing or advertising purposes.

Transcriptions

Transcription text is temporarily stored in our database to deliver results to your device. Once you view the transcription, the text is automatically deleted from our servers. Only metadata (duration, status, timestamps) is retained for usage tracking. You must manually copy or save transcriptions to preserve them.

Subscription and Usage Data

To manage your subscription and usage limits, we collect:

• Subscription tier (none or monthly)
• Total seconds of transcription included in your plan
• Top-up balance (purchased extra transcription seconds)
• Seconds of transcription used
• Subscription period dates
• RevenueCat user ID (for payment processing)

Authentication Information

When you sign in, we collect minimal authentication data:

• Email/Password: If you sign in with email, your email address and encrypted password
• Apple Sign In: Email (if shared) and name (if shared) - Apple allows you to hide your real email
• Google Sign In: Email and name
• Unique authentication identifiers for session management

Device Information and Analytics

We collect anonymised usage analytics via PostHog to improve the Service. This includes events such as recording actions and transcription lifecycle events (e.g. recording started, transcription completed). No device identifiers or personal information are included in analytics data.

How We Use Your Information

We use the information we collect to:

• Provide transcription services: Audio is sent to AssemblyAI for processing
• Authenticate and manage your account: Verify your identity and maintain secure sessions
• Manage subscriptions: Track usage against your plan limits and process payments via RevenueCat
• Improve the Service: Analyse anonymised usage analytics to understand how features are used
• Provide customer support: Respond to your inquiries and support requests

We do not: Use your data for advertising, sell your data to third parties, or track you across apps or websites.

Lawful Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Contract performance: Processing audio for transcription, managing your account, and providing the Service you requested
• Legitimate interests: Tracking usage against subscription limits, maintaining service security, and improving the Service

International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA), specifically the United States. The following services process data in the US:

• AssemblyAI (transcription processing) - US-based
• RevenueCat (payment processing) - US-based

PostHog analytics data is processed in the EU and is not transferred to the US.

These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreement (IDTA) where applicable. Your subscription and account data is stored in the EU (Supabase EU-West region).

Cookies and Tracking

JustTranscribe does not use cookies or tracking pixels. We use PostHog for anonymised product analytics, hosted in the EU. PostHog does not track you across apps or websites.

Data Storage and Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption in Transit: All data sent between your device and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Subscription and usage data stored in our database (Supabase PostgreSQL) is encrypted at rest
• Secure Token Storage: Authentication tokens are stored in your device's local storage
• Authentication Security: Uses secure OAuth 2.0 protocols with JWT tokens
• No Permanent Audio Storage: Audio is only stored temporarily during processing and is automatically deleted after transcription completes

Third-Party Services

JustTranscribe uses the following third-party services:

Transcription Processing

• AssemblyAI - Your audio is sent to AssemblyAI for transcription processing. We delete both the transcript and audio reference from AssemblyAI immediately after processing completes (or fails). AssemblyAI may independently retain transcoded copies of audio for up to 3 days under their default data-retention policy. We do not control this retention period. See AssemblyAI's Privacy Policy.

Payments and Subscriptions

• RevenueCat - Processes subscription status, one-time purchase events (including top-up packs), purchase history, and user ID for payment management. See RevenueCat's Privacy Policy.

Infrastructure

• Supabase - Hosts our database and authentication infrastructure. Stores subscription and usage metadata. See Supabase's Privacy Policy.

Analytics

• PostHog - Collects anonymised product usage events (e.g. recording started, transcription completed) to help us improve the Service. Data is hosted in the EU. No personal information or device identifiers are collected. See PostHog's Privacy Policy.

Authentication Providers

• Apple Sign In - We collect only email and name (if you choose to share). Subject to Apple's Privacy Policy.
• Google Sign In - We request only email and name. Google user data is used solely for authentication and account management. We do not request additional Google API scopes. Subject to Google's Privacy Policy.

We do not use: Advertising networks, crash reporting tools, or cross-app tracking services.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data: View your subscription status and usage data in the app settings
• Rectification: Request correction of any inaccurate personal data we hold about you
• Request account deletion: Delete your account directly in the app settings, or contact us at support@justtranscribe.com
• Restrict processing: Request that we limit how we use your personal data in certain circumstances
• Object to processing: Object to processing based on legitimate interests. We will stop processing unless we have compelling legitimate grounds
• Data portability: Transcription text is only temporarily stored on our servers and automatically deleted after viewing. You retain full control by copying or saving transcriptions locally on your device
• Stop using the Service: You can sign out or delete your account at any time
• Lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated

Note: Transcription text is automatically deleted from our database after you view it, so there is no transcription data to export. Your subscription and usage metadata can be provided upon request.

Data Retention

We retain minimal data as follows:

• Audio recordings: Temporarily uploaded for processing, then deleted automatically after transcription
• Transcriptions: Text is temporarily stored to deliver results to your device, then automatically deleted after viewing. Only metadata (duration, status) is retained
• Subscription data: Retained while your account is active
• Usage logs: Retained to track your subscription limits

Account Deletion: You can delete your account at any time from the app settings. When you delete your account, all associated data (subscription records, usage logs, authentication data) is permanently and automatically deleted from our database immediately. There is no retention period - deletion happens instantly via database cascade triggers.

Note: RevenueCat may retain purchase history for legal and tax compliance purposes according to their own retention policies.

Children's Privacy

JustTranscribe is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

support@justtranscribe.com