The short version
Your recordings are stored in your own Supabase database, scoped to your user ID. API keys (OpenAI, Anthropic) are stored as server-side Edge Function secrets — they never appear in the app or on your device. We don't sell your data, we don't train AI models on your recordings, and we don't share your information with third parties except where strictly necessary to provide the service.
What we collect
Account information
When you create an account, we collect your email address and (if using OAuth) your name and profile photo from Google or Apple. This is stored in Supabase Auth.
Recordings and transcripts
Audio files you record or upload are stored in a private Supabase Storage bucket scoped to your user ID. Transcripts, summaries, action items, and all other AI-generated content are stored in your Supabase database. Row-level security ensures only you can access your data.
Usage data
We collect basic usage analytics (screens visited, features used) to improve the product. This data is anonymised and never linked to individual recordings or transcripts.
How we use your data
We use your data for one purpose: to provide the Tapelog service. Specifically:
- Audio files are sent to OpenAI Whisper for transcription via our Supabase Edge Function
- Transcripts are sent to Anthropic Claude for analysis via our Supabase Edge Function
- Results are stored in your Supabase database
- Nothing else
We do not use your recordings or transcripts to train AI models. We do not sell your data. We do not share your data with advertisers.
Third-party services
Tapelog uses the following third-party services to operate:
- Supabase — database, auth, storage, and Edge Functions
- OpenAI — Whisper transcription (audio is sent to OpenAI's API)
- Anthropic — Claude AI analysis (transcripts are sent to Anthropic's API)
Each of these services has their own privacy policy. We recommend reviewing them if you have concerns.
Data retention
Your data is retained for as long as your account exists. You can delete individual recordings at any time from within the app. You can delete your entire account by contacting hello@tapelog.ai — we will delete all your data within 30 days.
Security
We take security seriously. Key measures include:
- Row-level security on all database tables
- API keys stored as server-side secrets, never in client code
- Private Supabase Storage buckets with per-user access control
- All data encrypted in transit via HTTPS/TLS
- Supabase's at-rest encryption for stored data
For more detail, see our Security page.
Your rights
Depending on your location, you may have rights including access to your data, correction, deletion, and data portability. To exercise any of these rights, contact us at hello@tapelog.ai.
Changes to this policy
We'll notify you by email of any material changes to this policy. The current version is always at this URL.
Contact
Questions about this policy? Email hello@tapelog.ai or use our contact form.