Privacy Policy

• Account information — your email address and, optionally, your phone number, used to create and secure your account.
• Payment information — handled by our payment processor, Paystack. We do not store your card numbers or M-Pesa PIN. We retain a payment reference, amount, channel, and subscription status.
• Content you upload — the audio and video files you submit, and the transcripts, translations, and edits generated from them.
• Usage & technical data — minutes used, log data, device/browser information, the campaign or referral link that first brought you to the site, and cookies. See Section 11 for which cookies we set and which ones you can decline.
• Referral & payout details — your referral activity (who signed up via your link, and rewards earned) and, if you request a payout, the M-Pesa number and recipient name you provide — used only to send your payout via our payment processor.

• To provide, operate, and maintain the Service (transcription, editing, proofreading, export, translation).
• To process payments, manage subscriptions, and track your minute balance.
• To run the referral program — crediting rewards for qualifying payments and sending payouts you request.
• To provide customer support and respond to your requests.
• To improve and secure the Service and prevent fraud or abuse.
• To comply with legal obligations.

Your uploaded source files are used only to produce your transcript. Source audio and video are kept for up to 7 days after upload and then deleted automatically — the short window lets us re-run a transcription if something goes wrong with it. If a transcription fails outright, the file is removed immediately. Your transcripts are stored privately under your account and protected by row-level security so that only you can access them, and you may delete or archive them at any time. We do not use your content to train AI models.

We rely on trusted third parties who process data on our behalf, under their own terms and security:

• ElevenLabs — speech-to-text transcription.
• Anthropic — AI clean-read formatting, translation, and spelling/grammar suggestions.
• Paystack — payment processing (M-Pesa and card).
• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Amplitude — product analytics and session replay (see Section 12).
• Google Analytics — website and product usage measurement (see Section 12).
• Google AdSense — advertising on our public pages (see Section 11).
• Reddit — advertising measurement, only if you accept advertising cookies (see Section 11).

We do not sell your personal data. We share information only with the service providers above, where you direct us to, or where required by law, regulation, legal process, or to protect our rights and the safety of our users.

Some of our service providers process data on servers located outside Kenya. Where personal data is transferred abroad, we take steps to ensure an appropriate level of protection consistent with the Kenya Data Protection Act, 2019.

We protect your data using encryption in transit, access controls, and database row-level security. No method of transmission or storage is completely secure, but we work to safeguard your information and to promptly address any incidents.

To resolve issues you report, an authorised member of our support team may temporarily access your account on your behalf. Every such access is recorded in an internal audit log.

We keep your account data while your account is active. Uploaded source media is deleted automatically within 7 days of upload (see Section 3). Transcripts are retained until you delete them or close your account. We may retain limited records (such as payment references) where required for legal, accounting, or fraud-prevention purposes.

Under the Kenya Data Protection Act, 2019, you have the right to:

• Be informed of how your data is used.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below.

The Service is not intended for anyone under 18. We do not knowingly collect data from children.

We use essential cookies to keep you signed in, to remember your cookie choice, and to operate the Service. These are always set, because the Service cannot work without them.

We use analytics cookies to understand how the Service is used, as described in Section 12, and to record the campaign or referral link that first brought you here.

We also use advertising cookies. Our public pages carry Google AdSense advertising. And when we run advertising campaigns, we use the Reddit advertising pixel to measure which campaigns lead to sign-ups and purchases, so that we are not paying for advertising we cannot measure. The Reddit pixel is only loaded if you accept advertising cookies in the notice shown on your first visit. If you choose “Essential only”, it is never loaded. You can change your mind by clearing this site's cookies, which makes the notice appear again.

These advertising providers may use the information to build a profile of your interests and show you relevant adverts on other sites. We do not send them your transcripts, your uploaded media, or the contents of your account.

We use Amplitude and Google Analytics to understand how the Service is used and to improve it. This includes anonymous and pseudonymous analytics (such as page views, feature usage, performance/web vitals, and interaction signals) and, through Amplitude, session replay, which records a reconstruction of a sample of user sessions (mouse movement, clicks, and navigation) to help us diagnose issues and improve usability.

Session replay is sampled (only a small percentage of sessions) and is configured to mask text input by default, so we do not intend to capture the content of what you type or your uploaded media. We do not use this data to identify you beyond your account, and we do not sell it. Analytics data is processed by Amplitude and Google on our behalf under their security and privacy terms.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

For privacy questions or to exercise your rights, email support@transcribez.xyz. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.