Privacy Policy

Last updated: August 3, 2026

This Privacy Policy explains how Captio (“Captio”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use the Captio iOS application and the captioai.app website (together, the “Service”). Captio is built as an accessibility tool for deaf and hard of hearing people, and privacy is central to how it works.

1. Who is responsible for your data

The data controller responsible for your personal data is Nejc Dovžan Kukič, a sole proprietor established in Slovenia. You can contact us about privacy at any time at nejcdovzank@gmail.com.

2. Our privacy principles

In plain terms, this is how Captio treats your data:

• Your audio is processed in real time and is not stored on our servers.
• Your transcripts and summaries are stored securely to provide the Service — including syncing them across your devices — and are never sold or used to train AI models.
• We never sell your data.
• Your content is never used to train AI models.

3. Data we collect

• Account information. When you create an account — using Sign in with Apple, Google, or by registering manually — we process your name and email address, and a password if you register manually. If you use Sign in with Apple, Apple may provide a private relay email instead of your real one.
• Audio you capture or upload. When you use live captions, translation, or upload a file for transcription, your audio is processed to produce text. See section 4 for exactly what happens to it.
• Transcripts and summaries.Text generated from your audio. These are stored on your device and, so they’re available when you sign in on another device or reinstall the app, are also stored securely in our cloud, linked to your account. They are never used to train AI models.
• Subscription information. If you subscribe to a paid plan, we and our payments provider process your subscription status. Payment is handled by the Apple App Store — we never receive or store your card details.
• Website analytics. Our website uses privacy-friendly, cookieless analytics that count visits and page views in aggregate. It does not use cookies, does not track you across sites, and does not build a profile of you.
• Technical and diagnostic data. Basic device and technical information needed to run the Service reliably and securely.

4. How your audio is processed

This is the most important part of how Captio works, so we want to be precise:

• When you use live captions, translation, or upload audio for transcription, your audio is transmitted securely to a third-party speech-recognition provider that converts it to text. The audio is processed transiently and then deleted — it is not stored on our servers, and it is not used to train any models.
• When Captio generates a title or summary, the relevant text is sent to a third-party AI provider to produce that title or summary. We use a paid service under terms where your content is not used to train models. That provider may retain the input briefly for security and abuse-monitoring under its own terms, after which it is deleted.
• These providers are Soniox, Inc. (speech recognition) and Google LLC (Gemini API, used for titles and summaries). They act as our processors, are bound by their own privacy terms and by data-processing agreements, and process your data only to provide the Service — never to train their models.

5. Where your transcripts and summaries are stored

Transcripts and summaries are stored on your device and are also synced to our secure cloud storage so they’re available when you sign in on another device or reinstall the app. They are linked to your account and protected by access controls so that only you can access them. They are never sold or used to train AI models. When you delete a transcript, it is removed from your device and from our cloud; when you delete your account — which you can do at any time from within the app — all of your transcripts and summaries are permanently deleted.

6. Legal bases for processing (GDPR)

• Performance of a contract — to provide the Service you request.
• Consent — where we ask for it (for example, microphone access).
• Legitimate interests — to keep the Service secure and to improve it using aggregate, non-identifying information.
• Legal obligations — where the law requires us to process data.

7. Who we share data with

We do not sell your data. We share data only with the processors needed to run the Service: our speech-recognition provider (Soniox, Inc.) and AI provider (Google LLC — Gemini API), as described in section 4, our subscription/payments provider and the Apple App Store, the authentication providers you choose to sign in with (Apple or Google), and our hosting and cookieless-analytics providers. We may also disclose data if required by law or to protect our legal rights.

8. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

9. How long we keep data

• Audio — not stored on our servers; the recording is kept on your device for playback until you delete it.
• Transcripts and summaries — kept on your device and in our cloud (linked to your account) for as long as you keep them; deleted when you delete them or delete your account.
• Account data — kept while your account is active; deleted when you delete your account.
• Analytics — aggregate and non-identifying.

10. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, email nejcdovzank@gmail.com. You can also delete your account, and all data linked to it, at any time directly in the app. You also have the right to lodge a complaint with your local supervisory authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec).

11. Security

We use reasonable technical and organizational measures to protect your data, including encryption of audio in transit. No method of transmission or storage is completely secure. We keep audio out of server storage entirely, and your transcripts are held in access-controlled cloud storage that only you can access — both core parts of how we reduce risk.

12. Children

Captio is an accessibility tool intended for a general audience. If you are under the age of digital consent in your country (16 in some parts of the EU; 15 in Slovenia), you may use Captio only with the consent and involvement of a parent or guardian. We do not knowingly collect personal data from children without such consent; if you believe a child has provided us data without it, contact us and we will delete it.

13. Cookies

Our website does not use tracking or advertising cookies. The analytics we use are cookieless, which is why you will not see a cookie-consent banner. The app does not use advertising cookies or trackers.

14. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top shows when it was last changed, and we will notify you of material changes where required.

15. Contact

For any privacy question or request, contact nejcdovzank@gmail.com.