Privacy Policy

1. Scope

This Privacy Policy describes how Aaron Newcomer LLC, the operator of the Document Transcribe service ("Document Transcribe," "we," "us," or "our"), collects, uses, discloses, retains, and deletes information when you use our website, web service, or mobile application (together, the "Service").

The mobile app is local-first. Documents in your on-device archive remain on your device unless you choose a feature that sends them to us, such as AI processing, DT Sync, or copying an archive item to the cloud service. Removing the app does not by itself delete an online account or cloud data.

2. Information We Collect

3. How We Use Information

• Provide accounts, authentication, document storage, processing, sync, sharing, and support.
• Transcribe and translate the documents you submit and return results to you.
• Verify purchases, provide credits and subscription benefits, restore entitlements, and prevent duplicate or fraudulent transactions.
• Maintain security, investigate abuse, diagnose errors, monitor reliability, and improve the Service.
• Communicate about transactions, account changes, support requests, and material Service updates.
• Comply with law, enforce our Terms, and protect the rights and safety of users and others.

We do not use document content submitted for processing to train our own general-purpose AI models. We do not sell personal information or disclose personal information to data brokers. We do not use mobile-app data to track you across apps and websites owned by other companies, and we do not disclose mobile-app data to advertising networks for targeted advertising.

4. When We Disclose Information

We disclose information only as needed for the following purposes:

• Hosting, authentication, storage, and infrastructure. Supabase and other infrastructure providers host accounts, databases, private files, and server functions.
• AI processing. OpenAI receives the files, images, prompts, and related settings selected for AI transcription or translation.
• Payments. Apple processes App Store purchases and provides verified transaction information. Stripe processes eligible website transactions.
• Website analytics and measurement. RudderStack and Google receive website usage, device, network, and campaign information as described in our Cookie Policy. RudderStack acts as our analytics provider, and signed-in usage and related diagnostic events may be associated with your account. Google receives website campaign and conversion-measurement events through the Google Ads tag. We do not disclose document content to either provider for advertising.
• At your direction. People you invite or anyone with an enabled public sharing link may access the content and account information made available through that feature.
• Legal, safety, and business needs. We may disclose information when required by law, to protect rights or safety, to investigate fraud or abuse, or as part of a merger, acquisition, financing, or sale, subject to appropriate protections.

We require service providers that process personal information for us to protect it and use it only to provide their services to us, consistent with this Policy and applicable law.

We do not disclose personal information to data brokers. The native mobile app does not include ad network integrations. Our website's limited Google Ads measurement is described above and in the Cookie Policy; because Google provides advertising services, we do not claim that the website shares no information with advertising providers.

5. App Privacy Disclosure Summary

Depending on the features you use, the mobile app may collect the following App Store data types. These categories are generally linked to your account and used for app functionality unless stated otherwise:

• Contact Info: name and email address for account management.
• User Content: photos, document images or files, and other content you choose to process, sync, or store.
• Purchases: purchase history, subscription status, entitlements, and credit balances.
• Identifiers: account or user ID and transaction-related account token.
• Usage Data: product interaction and processing, sync, and entitlement activity used for app functionality and service improvement; signed-in usage events may be linked to your account.
• Diagnostics: error and reliability information used for app functionality and support; these events may be linked to your account when needed to investigate a request or provide support.

We do not collect precise location, contacts, health, fitness, or payment-card details through the mobile app, and we do not use mobile-app data for tracking as Apple defines that term.

6. Retention

• On-device content: remains on your device until you delete it or remove the app, subject to your device backups and settings.
• Mobile AI processing: uncompleted uploads generally expire after 30 minutes and abandoned processing requests are cleaned up after about 72 hours. After the app confirms that a completed result is safely stored on your device, the uploaded source is deleted and the temporary server result is scheduled for deletion about 24 hours later. If the app has not confirmed receipt, we retain the result so it can be retrieved or until the related account or content is deleted.
• DT Sync and cloud copies: content remains while sync or cloud storage is enabled and the account is active, or until you delete the content or account. Expired, incomplete transfer files are removed from temporary storage.
• Website documents and outputs: remain available until you delete them, the workspace owner deletes them, or the account is deleted, subject to applicable subscription retention rules shown in the Service.
• Account and commerce records: remain while the account is active. After deletion, we may retain limited transaction, tax, security, dispute, and legal-compliance records for the period required by law or reasonably necessary for those purposes.
• Diagnostics and logs: are retained for a limited period appropriate to security, support, fraud prevention, and reliability, then deleted or de-identified.

Deletion from active systems may take time to propagate. Encrypted backups may retain residual copies until they are overwritten through our ordinary backup cycle, and those copies are not restored to active use except for disaster recovery.

7. Deletion and Privacy Choices

You can delete individual documents and projects using the controls available in the Service. Mobile users can initiate account deletion from the app's account settings after confirming recent authentication. If that control is temporarily unavailable, or to request access, correction, export, restriction, objection, or deletion, email privacy@documenttranscribe.com.

Account deletion removes or schedules removal of server-side account data and invalidates sessions. It does not automatically delete the local archive on your device, cancel an App Store subscription, remove content another workspace legitimately controls, or erase records we must retain by law. To stop App Store renewal, manage the subscription separately in your Apple Account settings.

You can withdraw optional DT Sync consent by disabling DT Sync. This stops future sync activity but does not by itself delete content already stored in your cloud account. Website cookie and analytics choices are described in our Cookie Policy.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encrypted network transport, private storage, access controls, signed short-lived transfer links, and transaction verification. No system is completely secure, so please avoid submitting information that is not needed for the Service and protect your devices and account credentials.

9. International Processing

We and our service providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use legally recognized safeguards for international transfers.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

11. Changes to This Policy

We may update this Policy as our Service or legal obligations change. We will post the revised Policy with a new effective date and provide additional notice when required by law.

12. Contact Us

For privacy questions or requests, contact: