This Privacy Policy explains how Gustavo Ferrufino (“we,” “us,” or “our”) handles personal information when you use TeLeo. We are responsible for the personal information we process to operate teLeo. Privacy contact: ferrufinodlf@gmail.com ## 1. How teLeo handles your content Different features process information in different places: Captions and translation Live captions, on-device transcription, and Apple-powered translation are processed on your device using supported Apple technologies. Saved content Your recordings, transcripts, translations, summaries, and chat history are stored on your device. When iCloud is available and enabled, this content may also be stored and synchronized through Apple’s iCloud services. AI features When you use “Improve this transcript,” your selected audio is sent securely through our Railway-hosted backend to OpenAI for processing. When you request a summary or ask questions about a transcript, we send the relevant transcript text, your question, and any necessary conversation context to OpenAI through that backend. This may include the full transcript. Purchases Apple processes payments, and RevenueCat helps manage subscription status, restore purchases, and determine access to paid features. We do not receive your full payment-card details. On-device speech processing does not require sending audio to our AI backend. However, saved recordings may still sync through iCloud. On-device processing and cloud storage are separate functions. ## 2. Information processed Recordings and text. Depending on the features you use, teLeo processes recorded or imported audio, transcripts, translations, summaries, questions, AI responses, recording titles, timestamps, durations, and language selections. Content may include personal information about you or other people. Please avoid submitting unnecessary sensitive information and obtain any required permissions before recording or uploading another person’s information. Purchase information. Apple and RevenueCat process information needed to complete purchases, restore them, and determine access to paid features. This can include app user identifiers, product identifiers, transaction history, subscription status, and technical information about the app and device. We do not receive your full payment-card details. RevenueCat’s app privacy guidance. Technical information. Our backend and hosting infrastructure process information needed to deliver and secure requests, such as IP addresses, request identifiers, timestamps, response status, and error information. Support communications. If you contact us, we receive the contact information, message, and attachments you choose to provide. teLeo does not require a separate teLeo login for its current core functionality. Subscription identifiers can nevertheless distinguish an app installation or purchasing customer; they should not be considered fully anonymous. ## 3. Why we process information We process information to: - Provide the recording, transcription, translation, and AI features you request. - Save and synchronize your content. - Process purchases, restore access, and manage subscription status. - Respond to support requests. - Prevent abuse, enforce security controls, and maintain service reliability. - Meet legal obligations and resolve disputes. We do not sell your personal information or use recordings and transcripts for targeted advertising. ## 4. AI processing When you request enhanced transcription, we send the selected audio to OpenAI through our backend. When you request a summary or chat response, we send transcript text and the relevant question or conversation context. This may include the full transcript, not just the portion visible on screen. OpenAI states that API content is not used to train its models by default unless the API customer opts into data sharing. Provider retention depends on the endpoint and configuration. For example, chat requests may be subject to abuse-monitoring retention of up to 30 days, with exceptions for legal requirements; the audio-transcription endpoint has different retention rules. OpenAI’s data controls. Deleting a recording from teLeo does not retroactively withdraw information already processed by a provider. ## 5. Service providers and disclosures We use these providers for the purposes described above: - Apple: device-level speech and translation technologies, iCloud storage and synchronization, and App Store payments. - Railway: hosting and infrastructure for our backend. - OpenAI: enhanced transcription, summaries, and transcript chat. - RevenueCat: purchase and subscription management. We may also disclose information where reasonably necessary to comply with law, respond to valid legal requests, prevent fraud or security threats, or protect people’s rights and safety. If the business is transferred or acquired, relevant information may transfer with it, subject to applicable law and appropriate notice. Content you export or share is handled by the recipients and services you choose. Their handling of that content is outside teLeo’s control. ## 6. Storage and retention Saved content: Recordings and associated text remain on your device and, where applicable, in iCloud until deleted or otherwise removed through the relevant storage controls. Backend processing: Our current AI backend does not maintain a persistent library of your recordings, transcripts, summaries, or chat messages. Text is processed during requests. Uploaded audio uses temporary storage that the service is designed to remove after processing ends, including handled failures and cancellations. An unexpected server crash may delay cleanup until the temporary server storage is removed. Operational information: Security and operational records are retained only as needed for troubleshooting, abuse prevention, and legal obligations. Retention also depends on the hosting provider’s configuration. Purchase and support records: These may be retained as needed to restore purchases, resolve support issues, prevent fraud, and meet accounting or legal requirements. Providers may maintain separate records or backups under their applicable retention arrangements. Deletion is not necessarily immediate across every backup or provider system. ## 7. Your controls and rights You can: - Delete saved recordings using teLeo’s controls. - Manage teLeo’s iCloud storage through your Apple settings. - Revoke microphone and speech-recognition permissions in device settings. - Avoid cloud AI processing by not using the features that send content to our backend. - Manage or cancel subscriptions through Apple. - Contact ferrufinodlf@gmail.com about information we or our processors hold. Deleting the app does not necessarily delete iCloud content, purchase records, or provider-held information, and does not cancel subscriptions. Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of personal information; restrict or object to processing; withdraw consent; or complain to a privacy regulator. We may need limited information to verify a request. We cannot directly retrieve content that exists only on your device or in your private iCloud storage. Legal exceptions may require us or our providers to retain certain records. ## 8. Legal grounds and international processing Where applicable law requires a legal basis, we process information to provide requested services and fulfill our agreement with you, with your consent where required, for legitimate interests such as security and support, or to meet legal obligations. Where consent is required, you may withdraw it. Withdrawal does not affect processing that was lawful before withdrawal, but may prevent us from providing the relevant feature. Our providers may process information outside your country, including in the United States. These countries may have different privacy laws. Where required, we use legally recognized safeguards for international transfers. ## 9. Security We use measures intended to protect information, including encrypted network connections to our backend, restricted access to service credentials, and request-verification controls. No storage or transmission system is completely secure. Cloud AI features are not end-to-end encrypted in a way that prevents the processing provider from accessing the content needed to perform your request. ## 10. Children teLeo is not directed to children under 13. Users must also meet any higher age or parental-consent requirements that apply where they live. If you believe a child has provided personal information to us contrary to these requirements, contact ferrufinodlf@gmail.com so we can investigate and take appropriate action. ## 11. Changes and contact We may update this policy when our features, providers, or practices change. We will update the effective date and provide additional notice for material changes. Where required, we will obtain consent before processing information for a new purpose.