Privacy policy

What a session captures

A session captures two separate streams of audio, from the moment you start it until you end it.

The first is everything your computer plays, which on a call is the other person speaking. The second is your microphone, which is you. They are captured separately and transcribed separately, so the text of the conversation knows who said what.

Both are on by default. Either can be muted during a session, and a muted stream genuinely stops: the frames are dropped in the app before anything is sent, so a muted stream reaches no processor at all rather than being discarded at the far end.

A screenshot of your screen is captured only when you ask for one, by pressing the key that takes one or by dragging out an area. Nothing takes a screenshot on its own and no screenshot is kept after the answer it was taken for.

The audio itself is never stored, by us or by anyone we send it to. What is kept is the text it was turned into.

Who processes it

Two companies process the content of a conversation on our behalf.

AssemblyAI turns the audio into text, in real time, while the session is running. Anthropic takes that text and writes the answers you read. Both are in the United States.

Neither is reached from your computer. Both are called by our own service, which is the only place the credentials for them exist; those credentials are never on a customer’s machine and are never in anything we publish.

Four more companies handle parts of the product that are not the conversation itself. Supabase holds your account and every row below. Fly.io runs our own service. Ably relays messages between the desktop app and your phone when you use the glasses. Resend sends the two emails described below. Vercel serves this website, and Cloudflare operates this domain’s name records.

Stripe sells the subscription. See the last section.

What is kept, row by row

Your account holds the following, and nothing else. Each one is a table in our database.

• Your profile: the email address you signed up with and a display name.
• Your settings: the choices you have made in the app.
• Sessions: when each conversation started and ended, what kind it was, and the basis you recorded for having consent to record it.
• Transcript segments: the text of what was said. This includes the other person’s speech, not only yours. It is the part of this product that holds somebody else’s words, and it is why the app offers you a sentence to say out loud before you start.
• Questions and answers: the questions the app decided were questions, and the answers it wrote for them.
• Session notes: notes written from a transcript, only when you ask for them, from a template you chose.
• Documents: files you upload for a conversation to read, their text, and which conversations used them.
• Presets: a saved setup for a kind of conversation.
• Usage: how many minutes and how many requests each session cost, as counts. No content.

What is on your own computer

The desktop app keeps a database file on your machine. It is encrypted, with a key held in Windows’ own secure storage, and the app never writes the key anywhere you could read it.

That file is a buffer and a queue rather than a store. It holds what a running session has produced until it has been sent to your account, and what is waiting to be sent when the machine is offline. Your account is where the data lives; the local file is how a session survives a dropped connection.

Uninstalling the app never deletes that file. Deleting your account does not reach it either, because it is on your machine and not ours; delete the app’s data folder yourself if you want it gone.

How long it is kept

Until you ask us to delete your account. Nothing prunes anything on a schedule: there is no retention period after which a transcript disappears, because no such job exists in this product. If you want something gone, ask.

We would rather say that plainly than name a period we do not enforce.

How to have it deleted

Write to privacy@cuecircle.io from the address on the account, and say that you want the account deleted.

There is no button in the product that does this. Not on the desktop app, not on this website, not on the phone. Saying so is the honest version of a page that would otherwise imply a control exists.

We will reply within 30 days. We do not promise anything faster than that, because this is a one person company and a promise nobody staffs is worse than none.

Deleting the account deletes everything above with it. Every table in the list is keyed to your account and is removed by the database itself when the account row goes, so nothing is left behind by somebody forgetting a step.

Logs

The app and our service both write logs. They carry counts, outcomes, error codes and how long something took. They do not carry anybody’s words: no transcript text, no question, no answer, no document contents.

This is enforced in the logging code rather than left to whoever writes the next log line.

Email

Two emails exist in this product: the six digit code that confirms a new account, and the six digit code that resets a forgotten password.

There is no marketing email, no newsletter and no list. Your address is not shared with anybody and is not used for anything else.

Payment

Stripe is the seller of record. You buy from Stripe, your receipt says so, and Stripe handles the payment and any dispute about it.

We never see your card details. They are entered on Stripe’s own checkout page and never reach this website, the app or our service.

Your rights, and the other person’s

You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to the same address.

The person on the other end of your call has rights too, over the part of a transcript that is their speech. We hold that text on your instruction, which is why the app offers you a sentence to say before you start and why the terms forbid recording somebody with no lawful basis for doing so. If somebody you recorded writes to us about their own data, we will tell you.

Contact

Write to privacy@cuecircle.io.