Privacy Policy

Reflct operates reflct.io and is the data controller under GDPR. Contact: privacy@reflct.io

We never receive your audio. Recording and transcription both happen on your own Mac, using Apple's on-device speech engine. No audio file is ever uploaded, and in the Mac app the component that can reach the network is unable to open an audio file at all.

These also stay on your Mac and are never sent:

• The audio recordings themselves
• Any name you gave a session — a session title can name your employer or your job search, so it is deliberately excluded
• File names and folder paths on your machine
• The name of your microphone or headphones — a device name is often a person's name

A transcript reaches us only when you press Send on a specific session. Nothing is uploaded automatically. What arrives is:

• The transcript text — the words spoken by you and by the other side of the conversation, including word-level timings. Per-word confidence scores are stripped before sending.
• Session metadata: when it started, how long it ran, and the language
• Device metadata: the platform, the app version, and a label you chose yourself
• Your email address, name and profile picture, from Google when you sign in
• Server logs containing IP address and request metadata. Transcript content, credentials and authorisation headers are never written to logs.

A transcript is stored exactly as it arrived, byte for byte, with a checksum, so it can be shown to be the same transcript your Mac sent.

A recording has other people in it. The other side's words are in the transcript you send us. Whether you may record a conversation depends on where you and they are, and that responsibility is yours, not ours. Please tell the people you speak with.

• Consent (Art. 6(1)(a)) for emailing you when the Mac app is ready, if you joined the waitlist. Withdrawable at any time by leaving the list.
• Consent (Art. 6(1)(a)) for analysing a transcript, which includes sending its text to the provider named in section 6. Withdrawable at any time by not sending transcripts and by deleting those already sent.
• Contract performance (Art. 6(1)(b)) for keeping your account and the transcripts you asked us to store
• Legitimate interests (Art. 6(1)(f)) for security, and for keeping the service running

• To store the transcripts you send, so you can read them back
• To analyse a transcript and show you the result
• To email you when the Mac app is ready to download, only if you asked us to (see below)
• To keep you signed in
• To keep the service secure and working

The waitlist. Signing in does not put you on it. You join only by pressing “Email me when it's ready” after you sign in. We then keep the Google address you signed in with, when you joined, and which version of that wording you saw, so we can show you agreed. We use the address for one thing: an email telling you the Mac app is ready to download, with the link. No newsletter, and nothing else. You can leave the list at any time on the page where you joined (reflct.io/start), which deletes your entry immediately, or by writing to privacy@reflct.io.

We do not sell your data. We do not share it with advertisers. We do not use your content to train models, and the provider in section 6 is not permitted to either.

Analysing a transcript sends its text to OpenAI, in the United States. That is a transfer outside the EEA, and it is the one thing on this page most worth knowing. It applies to the text only — never the audio, which never leaves your Mac.

• OpenAI — analysis of transcript text. United States.
• Supabase — the database holding your account and transcripts. European Union, in Ireland.
• Vercel — hosting for this website and its API.
• Google — sign-in only. We ask Google for your identity and nothing else: no access to your Gmail, Drive or Calendar is requested, and we hold no Google credentials.

• Transcripts are kept until you delete them, or until you ask us to close your account
• You can delete any transcript yourself, at any time, from your account. Deleting it removes the transcript text permanently.
• A short receipt survives a deletion — the time it arrived, its size and its checksum, but none of its words. It exists so we can answer what was received and when.
• Analysis results, which contain scores and references to positions in the transcript but no transcript text, are removed with the transcript
• Ask us to close your account and we will delete your data within 30 days. This is currently a manual operation on our side rather than an automated one.
• A waitlist entry is kept until you leave the list or the launch email has gone out, and then deleted. Deleting the list after the launch email is a manual step on our side.
• Server logs are kept for 30 days

• Right of Access (Art. 15) — ask for a copy of your data
• Right to Rectification (Art. 16) — ask us to correct it
• Right to Erasure (Art. 17) — delete a transcript yourself, or ask us to delete everything
• Right to Restrict Processing (Art. 18) and to Object (Art. 21)
• Right to Data Portability (Art. 20) — ask for your transcripts in a machine-readable form
• Right to withdraw consent (Art. 7(3)) at any time

Write to privacy@reflct.io and we will answer within one month.

Everything travels over HTTPS. Your session cookie holds a random value and we store only a hash of it, so a database disclosure does not hand over live sessions. The token your Mac holds is stored the same way, is short-lived, and is replaced on every use — if an old one is presented twice, every token for that Mac is revoked rather than replaced. Data at rest is encrypted by our database host. We will notify you and the supervisory authority of a breach as Art. 33–34 GDPR requires.

You can unlink a Mac at any time from your account, which stops it uploading.

Only an essential session cookie, needed to keep you signed in. No tracking, no advertising, no analytics scripts, and therefore no cookie banner.

Naming these is more useful to you than a page that implies everything is settled.

• No data processing agreement is yet in place with the analysis provider named in section 6, and we have not verified a zero-retention configuration with them. Until both are done, do not send us a conversation you would not want processed in the United States under that provider's standard terms.
• There is no setting to store transcripts without analysing them. Today, choosing not to have a conversation analysed means not sending it.
• Deletion on account closure is manual rather than automatic, and nothing deletes old transcripts on a schedule
• Reflct cannot send email. Nothing on this site will email you, including about changes to this policy.
• Reflct is free. There is no billing of any kind, no payment processor, and no card details anywhere.

Material changes will be posted here with a new date above, at least 14 days before they take effect. We cannot email you about them, so this page is the notice.

privacy@reflct.io — and you may complain to Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de