This policy explains what information Nani? (the Mac app, its backend and this website, together “the Service”) collects, why, who it's shared with, and the choices you have. The Service is provided by Coretech Labs (“we”, “us”), based in Singapore, which is responsible for your personal data. Contact us at hello@coretechlabs.co.
The short version
- We never receive your meeting audio. It goes from your Mac straight to our speech recognition provider.
- Sentences pass through our servers to our translation provider, but we don't store them.
- We keep what we need to run your account: your email, your plan and payments, and how much you've used the Service.
- Voice prints for speaker labels, and your transcripts, stay on your Mac.
- We don't sell your data, and we don't use it for advertising.
What we collect
Your account
When you sign in we receive your email address. If you sign in with Google, Google also gives us your name, profile picture and Google account ID; we use only your email address to identify your account. Our sign-in provider keeps a record of sign-ins, including the IP address and device type, to protect your account.
How you use the Service
To apply your plan's limits, we record:
- when each subtitle session starts and ends, whether it was meeting audio or your microphone, and how much meeting time it used (as measured by us and by our speech recognition provider);
- a random identifier the app creates for each Mac it's installed on, so that time on one Mac counts once;
- how many translations, catch-ups and summaries you request each month, and their size in AI “tokens”.
Our servers log each request's type, result and duration to keep the Service running. These logs don't include your IP address or anything said in your meetings, and are deleted after 30 days.
Your meetings
To produce subtitles, the app sends:
- Audioto our speech recognition provider, directly from your Mac over an encrypted connection, using a single-use key from our servers. The audio never passes through our servers and we don't record it.
- Textfor enhanced translation, catch-up and summaries: the sentence being translated, the last few lines of the meeting, and the glossary, meeting notes and names you've entered in the app. This text passes through our servers to our translation provider and back. We don't store it or write it to our logs.
Instant draft translations are made on your Mac by a translation model that runs on-device. Speaker labels come from voice prints computed only on your Mac. If you turn on voice recognition, the voice prints of people you name are saved on your Mac so they're named in later meetings; they never leave it. Transcripts are saved on your Mac in Meeting History (you can turn this off, or have them deleted after a set time, in Settings → General); we never receive them unless you send them to us. Exports are files you control.
Payments
Payments are handled by Stripe. We never see or store your full card number. We keep your Stripe customer ID, your plan, the status and dates of your subscription, and a record of each purchase. Stripe keeps your payment details, billing address and any tax ID you give, under its own privacy policy.
Support and this website
If you email us, we keep the conversation to help you. This website uses Vercel Web Analytics, which counts page views without cookies and without identifying you. The site remembers your light or dark theme choice in your browser.
How we use it
- To provide the Service: sign you in, produce subtitles and translations, and apply your plan (performance of our contract with you).
- To bill you and keep records required by tax and accounting law (contract and legal obligation).
- To keep the Service secure and reliable, prevent abuse, and understand overall usage and costs (our legitimate interests).
- To answer your questions and tell you about important changes to the Service or these policies.
We don't sell your personal data or use it for advertising.
Information from Google
If you sign in with Google, we ask only for your basic profile and email address. We use them only to create your account and sign you in. We don't access your Google Calendar, Drive, Gmail, contacts or any other Google data, and we don't share what Google gives us except with the providers that run our sign-in and database, listed below.
Nani?'s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share it with
We use these service providers, who may process your data only to provide their service to us:
- Soniox: speech recognition (meeting audio).
- OpenAI: enhanced translation, catch-up and summaries (meeting text). Under OpenAI's API terms, it may keep this data for up to 30 days to detect abuse. We ask it not to store responses.
- Supabase: sign-in and our database (account and usage data), hosted in Singapore.
- Amazon Web Services: our servers and logs, in Singapore.
- Stripe: payments, subscriptions and invoices.
- Google: sign-in, only if you choose “Continue with Google”.
- Vercel: hosting and analytics for this website.
- Hugging Face: the app downloads its speaker-recognition model from Hugging Face the first time it runs, which shares your IP address with Hugging Face. No meeting data is sent.
We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.
International transfers
Our servers and database are in Singapore. Some providers, including OpenAI and Soniox, may process data in the United States or other countries. Where the law requires it, we rely on safeguards such as the providers' data processing agreements and standard contractual clauses.
How long we keep it
- Meeting audio and text: not kept by us (see the provider terms above for theirs).
- Account and usage records: while your account exists. When you delete your account in the app they're deleted straight away; if you ask us by email, within 30 days.
- Payment records: as long as tax and accounting law requires, typically 5 to 7 years.
- Server logs: 30 days.
Your choices and rights
Depending on where you live (for example under Singapore's PDPA, the EU and UK GDPR, or California law), you can ask to access, correct, export or delete your personal data, or object to or restrict how we use it. In the app, Settings → Account → Export My Data downloads what we hold about you, and Delete Account cancels any subscription and deletes your account. For anything else, email hello@coretechlabs.cofrom the address you sign in with, and we'll respond within 30 days. You can also complain to your local data protection authority (in Singapore, the PDPC).
On your Mac, you can turn off voice recognition and remove saved voices in Settings → Voices, delete saved transcripts in Meeting History, and sign out in Settings → Account.
Security
Data in transit is encrypted with TLS. API keys for our providers stay on our servers; the app only gets short-lived, single-use keys. Access to production systems is limited to the people who run the Service. No system is perfectly secure, and we'll tell you and the authorities about a breach that affects you as the law requires.
Children
The Service isn't meant for children under 16, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.
Changes to this policy
We'll post any changes on this page and update the date above. If a change is significant, we'll also tell you by email or in the app before it takes effect.
Contact
Coretech Labs, Singapore. Email: hello@coretechlabs.co. See also our Terms of Service.