Privacy Policy

• Account information — your email address and, optionally, your phone number, used to create and secure your account.
• Payment information — handled by our payment processor, Paystack. We do not store your card numbers or M-Pesa PIN. We retain a payment reference, amount, channel, and subscription status.
• Content you upload — the audio and video files you submit, and the transcripts, translations, and edits generated from them.
• Usage & technical data — minutes used, log data, device/browser information, and cookies necessary to operate the Service.

• To provide, operate, and maintain the Service (transcription, editing, export, translation).
• To process payments, manage subscriptions, and track your minute balance.
• To provide customer support and respond to your requests.
• To improve and secure the Service and prevent fraud or abuse.
• To comply with legal obligations.

Your uploaded source files are used solely to produce your transcript. Source audio/video is automatically deleted shortly after processing (and in any case within 7 days). Your resulting transcripts are stored privately under your account and protected by row-level security so that only you can access them. You may delete your transcripts at any time. We do not use your content to train AI models.

We rely on trusted third parties who process data on our behalf, under their own terms and security:

• ElevenLabs — speech-to-text transcription.
• Anthropic — AI clean-read formatting and translation.
• Paystack — payment processing (M-Pesa and card).
• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Amplitude — product analytics and session replay (see Section 12).

We do not sell your personal data. We share information only with the service providers above, where you direct us to, or where required by law, regulation, legal process, or to protect our rights and the safety of our users.

Some of our service providers process data on servers located outside Kenya. Where personal data is transferred abroad, we take steps to ensure an appropriate level of protection consistent with the Kenya Data Protection Act, 2019.

We protect your data using encryption in transit, access controls, and database row-level security. No method of transmission or storage is completely secure, but we work to safeguard your information and to promptly address any incidents.

To resolve issues you report, an authorised member of our support team may temporarily access your account on your behalf. Every such access is recorded in an internal audit log.

We keep your account data while your account is active. Source media is deleted within 7 days of upload. Transcripts are retained until you delete them or close your account. We may retain limited records (such as payment references) where required for legal, accounting, or fraud-prevention purposes.

Under the Kenya Data Protection Act, 2019, you have the right to:

• Be informed of how your data is used.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below.

The Service is not intended for anyone under 18. We do not knowingly collect data from children.

We use essential cookies to keep you signed in and to operate the Service. We do not use cookies for third-party advertising.

We use Amplitude to understand how the Service is used and to improve it. This includes anonymous and pseudonymous analytics (such as page views, feature usage, performance/web vitals, and interaction signals) and session replay, which records a reconstruction of a sample of user sessions (mouse movement, clicks, and navigation) to help us diagnose issues and improve usability.

Session replay is sampled (only a small percentage of sessions) and is configured to mask text input by default, so we do not intend to capture the content of what you type or your uploaded media. We do not use this data to identify you beyond your account, and we do not sell it. Analytics data is processed by Amplitude on our behalf under their security and privacy terms.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

For privacy questions or to exercise your rights, email support@transcribez.xyz. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.