privacy policy.

last updated 29 may 2025

This Policy explains how Sonic Flow ("we", "our") collects, uses and shares your information when you visit sonicflow.app, install our desktop application or otherwise interact with the Service.

1. information we collect

CategoryExamplesPurpose
Account DataName, emailCreate your account, communicate with you
Payment DataCard / UPI details handled by Paddle; we only store billing tokensProcess subscriptions, detect fraud
Audio & TranscriptsMicrophone input, transcriptsOperate the dictation feature
Usage AnalyticsFeature usage, crash logsImprove performance and stability
Device DataOS, app version, IP addressDebugging, security

2. how we collect it

  • Directly from you when you sign up or interact with the app.
  • Automatically via the app (crash logs, usage events).
  • Via third parties (e.g., payment processor).

3. why we process your data

Legal basis (GDPR)Example
ContractWe need your audio to return a transcript you requested.
Legitimate interestsDebugging crashes, preventing abuse.
ConsentIf you opt-in to marketing emails.
Legal obligationTax and accounting records.

4. where your data goes

  • Supabase – authentication, database & storage (EU-Central).
  • Groq & Google Gemini – optional cloud transcription (US). Audio and transcripts are sent only if you enable those engines.
  • Paddle – billing (UK/EU/US).

We never sell your data.

5. retention

  • Account data – while your account is active plus 12 months.
  • Audio files – deleted automatically after transcription unless you elect to store them.
  • Transcripts – kept in your account until you delete them.

6. your rights

Depending on where you live, you can: access, correct, delete, download or object to processing of your data. Email [email protected] to action these rights.

7. security

We use encryption in transit and at rest, role-based access control, and regular security reviews. No system is 100% secure—use the Service at your own risk.

8. children

Sonic Flow is not directed to children under 16. If we learn we hold data from a minor we will delete it.

9. changes

We'll post any privacy updates here and, if major, notify you by email.

10. contact

Questions? [email protected]