Effective Date: 2026-05-01
Last Updated: 2026-05-01
This Privacy Policy describes how the mobile application "Polly" (the "App"), provided by Isa Toltar ("we", "us", or "our"), handles information in connection
with your use of the App. By downloading, installing, or using the App, you agree to the practices described in this Policy. If you do not agree, do not use
the App.
1. Summary (Plain Language)
- We do not require you to create an account.
- We do not sell your personal information or share it with advertisers.
- Your recordings, transcripts, and notes are stored on your device.
- To convert speech into text, the App sends your audio recording to Groq, Inc. via our backend (Supabase Edge Functions).
- To generate summaries, key points, action items, and titles, the App sends the text transcript to OpenAI, L.L.C. via the same backend.
- The App requires your explicit consent before any audio or transcript is transmitted to a third-party AI service.
- We use limited analytics (Firebase) and crash reporting (Sentry) to keep the App working reliably.
2. Information We Do Not Collect
We do not collect, track, or store any of the following:
- Your name, email address, phone number, or other contact information.
- Account credentials (no account is required).
- Advertising IDs or cross-app tracking data.
- Location data.
- Contacts, photos, or other data from your device beyond what you record.
We do not retain copies of your recordings, transcripts, or notes on our backend after processing is complete.
3. Information Processed Locally on Your Device
The following data is created and stored on your device:
- Audio recordings (.m4a files) saved in the App's local Documents directory.
- Transcripts returned to your device after processing.
- Summaries, key points, action items, and titles returned by the AI service.
- Metadata (titles, timestamps, folder organization) stored in a local Core Data database.
- Your analysis preferences (role, output format, focus areas).
You are responsible for backing up or protecting this data. Uninstalling the App or losing your device may permanently delete this data.
4. Information Transmitted to Third Parties
Polly sends data to third parties only as described below, and only after you have agreed to the AI disclosure presented in the App.
4.1 Backend Routing (Supabase)
Audio and transcript data are routed through Supabase Edge Functions, which we operate as a thin proxy to forward your data to Groq and OpenAI. Supabase, Inc.
acts as our infrastructure provider. The Edge Functions do not log your audio or transcript content; they exist to authenticate App requests and forward them
to the AI providers. See Supabase's Privacy Policy: https://supabase.com/privacy.
4.2 Audio Transcription — Groq
Your audio recording is sent to Groq, Inc. ("Groq") to convert speech into text using their Whisper API. According to Groq's policies as of the Effective
Date:
- Groq does not use API data to train its models.
- Groq may retain API data for a limited period for service operation and abuse monitoring.
See Groq's policies:
- https://groq.com/privacy-policy/
- https://groq.com/terms-of-use/
4.3 Apple Speech Recognition (Free Tier Only)
For users on the free tier, the App attempts to use Apple's on-device Speech framework before falling back to Groq. When Apple's framework is used,
transcription may occur on-device or on Apple's servers depending on your device and language. Apple's privacy practices apply when their servers are used.
See https://www.apple.com/legal/privacy/.
4.4 Summarization & Analysis — OpenAI
The text transcript is sent to OpenAI, L.L.C. ("OpenAI") via OpenAI's API to generate summaries, key points, action items, and titles. The App does not send
your audio file, device identifiers, or contact information to OpenAI. According to OpenAI's API Data Usage Policy as of the Effective Date:
- API data is not used by OpenAI to train its models by default.
- OpenAI may retain API data for a limited period (generally up to 30 days) for abuse monitoring, after which it is deleted, except where legally required
otherwise.
See OpenAI's policies:
- https://openai.com/policies/privacy-policy
- https://openai.com/policies/api-data-usage-policies
Do not include highly sensitive information (such as government identifiers, financial account numbers, health records, or legally privileged material) in any
content you choose to process through the App.
4.5 Analytics — Firebase (Google)
The App uses Google Firebase Analytics to understand aggregate usage patterns (e.g., which features are used, onboarding completion rates). Firebase may
collect limited technical information including device model, OS version, country, and a randomly generated installation identifier. We do not link this data
to your real-world identity. See Google's Privacy Policy: https://policies.google.com/privacy and Firebase's data handling:
https://firebase.google.com/support/privacy.
4.6 Crash Reporting — Sentry
The App uses Sentry to capture crash reports and performance traces so we can fix bugs. Sentry may receive technical information including device model, OS
version, App version, and stack traces at the time of a crash. Crash reports do not include your recordings, transcripts, or notes. See Sentry's Privacy
Policy: https://sentry.io/privacy/.
4.7 Subscription Management — RevenueCat
In-app subscription purchases are managed through RevenueCat, which receives anonymized purchase events from Apple to determine your subscription entitlement.
See RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy/.
4.8 Apple App Store
The App is distributed through the Apple App Store. Apple may collect information related to your download, purchase, and use of the App under Apple's own
privacy practices.
5. Permissions Requested by the App
- Microphone Access — required to record audio.
- Speech Recognition — required for Apple Speech framework transcription on the free tier.
You may deny or revoke these permissions in iOS Settings at any time. Denying microphone access will prevent the App from functioning.
6. Your Consent for AI Processing
The first time you complete onboarding (and again if consent is missing), the App presents an explicit AI Disclosure that names Groq and OpenAI, describes
what data is sent, and requires your affirmative consent before any audio or transcript is transmitted. If you decline, the App will not transmit your data to
Groq or OpenAI, and AI-powered features will remain unavailable.
7. In-App Purchases
The App offers a free tier with usage limits (including a 6-minute cap on audio transcription) and optional paid upgrades. Payments are processed exclusively
by Apple through the App Store. We do not receive or store your payment card details.
8. Children's Privacy
The App is not directed to children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction, such as 16 in parts of the EEA). We do
not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us so we can
advise.
9. Your Rights
Because the data created in the App is primarily under your direct control on your device, most data subject rights under the GDPR, UK GDPR, and CCPA/CPRA are
satisfied by your direct control:
- Access your data at any time within the App.
- Delete individual recordings, transcripts, notes, or folders within the App.
- Delete all local data by uninstalling the App.
- Withdraw your AI consent at any time by reinstalling the App or contacting us; AI features will be disabled until you re-consent.
For data held by third parties (Groq, OpenAI, Firebase, Sentry, RevenueCat), please contact those providers directly to exercise rights related to data they
hold. We will assist where reasonably possible — contact us at the email below.
10. Security
We rely on iOS security features (device passcode, Face ID / Touch ID, iOS sandboxing, file system encryption) to protect locally stored data. All
transmission to Supabase, Groq, and OpenAI occurs over HTTPS. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute
security.
11. International Users
The App is available worldwide. When you use AI features, your audio and transcripts may be processed on servers located in the United States or other
countries operated by Groq, OpenAI, or our backend provider. By consenting to AI processing in the App, you understand and agree to this international
transfer.
12. Equivalent Protection by Third-Party AI Services
We have reviewed the public privacy policies and data handling commitments of Groq and OpenAI and have determined that, as of the Effective Date, they offer
protections equivalent to those described in this Policy with respect to data they receive from the App, including not using API submissions to train their
models by default and limiting retention to abuse monitoring.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last Updated" date indicates when it was last revised. Material changes will be reflected in an
updated version distributed with a new App release.
14. Contact Us
Isa Toltar
Email: isatoltar@gmail.com