Spiik privacy policy

This policy explains what information Fadel.io OÜ ("we", "us") handles when you use Spiik on iPhone, iPad or Mac, and when you visit spiik.io. If anything here is unclear, email [email protected].

1. What information we collect

Recordings and transcripts

• Recordings. Your recordings and library are stored on your device. If you turn on the iCloud folder, they're also stored in your own iCloud account, which we can't access.
• Live transcript. The transcript you see while recording comes from Apple's speech recognition or an on-device model. Depending on your device and language, Apple may process that speech on its servers, under Apple's privacy policy.
• Cloud transcription. To create a final transcript, Spiik uploads the audio to our servers. The upload storage deletes it automatically after one day, and the transcript is deleted from our servers once it has been sent back to your device.
• Speaker labels. Speaker labels separate the voices within one recording. Spiik doesn't create voiceprints that identify who someone is, and it doesn't keep voice data between recordings.
• Local transcription on a Mac. With Enable Local Transcription turned on and the speech model downloaded, audio is transcribed on your Mac and isn't uploaded.
• Translation and AI tools. The transcript text is sent to our servers and to an AI provider that generates the result. We delete it from our servers once the result is sent back to you. The AI provider doesn't use it to train its models, and may keep it for a limited time to monitor for abuse, as its terms allow.

App data

• A random app user ID, created the first time you open Spiik. Spiik has no accounts, so we don't ask for your name, email address or a password.
• Purchases. Apple handles payment, and we never see your card details. We receive your subscription status and Spiik purchase history, linked to the random ID.
• Ad attribution. If you install Spiik after tapping an Apple Search Ads ad, Apple provides a token that tells us which campaign it was. It doesn't identify you.
• Usage data, such as which features and screens you use, linked to the random ID and not to your name. We use it to understand what to improve.
• Diagnostics, such as crash reports, error logs, device model and system version, to find and fix bugs.
• A notification token, if you allow notifications, so the app can send them to your device.

When you contact us

• If you email support, we receive your email address and what you write.
• If you sign in to the Spiik feature request board, we receive the details you sign in with and what you post. Posts on the board are visible to other Spiik users.

On spiik.io

• Google Analytics measures visits with cookies: the pages you view, your device and browser, and your approximate location.
• Our hosting and security providers process your IP address to deliver the site and protect it from attacks.

2. How we use your information

If you're in the European Economic Area (EEA), the UK or Switzerland, these are the legal bases we rely on:

• Performance of a contract: to transcribe, translate and run AI tools when you ask, and to provide the subscription you bought.
• Legitimate interests: to keep Spiik working and improve it (diagnostics and usage data), to measure which ads and pages bring people to Spiik, to keep our services secure, and to answer your messages.
• Consent: to send notifications. You can turn them off at any time in your device's Settings.
• Legal obligations: to keep purchase records and to respond to lawful requests.

We don't sell your personal information, and we don't use it for targeted advertising.

3. Will your information be shared with anyone?

We share information only as described here:

• Service providers. We use providers for hosting, cloud transcription, AI processing, subscription management, analytics and crash reporting. They process information only on our behalf, under written contracts.
• Legal obligations. We may disclose information where the law requires it, such as in response to a court order or a subpoena, including requests from public authorities for national security or law enforcement.
• Vital interests. We may disclose information where we believe it's necessary to investigate, prevent or act on suspected fraud, threats to anyone's safety, illegal activity or violations of our terms, or as evidence in litigation.
• Business transfers. We may share or transfer information in connection with a merger, sale of company assets, financing or acquisition of all or part of our business.

Some of our providers process information outside the EEA, mainly in the United States. Where they do, the transfer is protected by safeguards that EU law requires, such as the European Commission's Standard Contractual Clauses.

4. How long we keep your information

We keep personal information only as long as necessary for the purposes in this policy, unless a longer period is required or permitted by law, such as for tax or accounting. No purpose in this policy requires us to keep your personal information for longer than 90 days.

• Uploaded audio is deleted automatically after one day.
• Transcripts, translations and AI results are deleted from our servers once they're sent back to your device.
• Recordings on your device and in your iCloud account stay until you delete them.

When we no longer need personal information, we delete or anonymize it. If that's not possible, for example because it's in backup archives, we store it securely and isolate it from any further processing until it can be deleted.

5. How we keep your information safe

We use technical and organizational measures designed to protect the information we process, and uploads are encrypted in transit. Still, no transmission over the internet or storage technology is 100% secure, so we can't guarantee that unauthorized third parties will never defeat those measures.

6. Your controls in the app

• Delete a recording in Spiik to remove it from your device, and from iCloud if the iCloud folder is on.
• Turn on local transcription on a Mac with Apple silicon to transcribe without uploading.
• Turn notifications off in your device's Settings.
• Email us to stop usage analytics for your app, or to delete data linked to your app user ID.

7. Your privacy rights

In some regions, such as the EEA and the UK, you have the right to request access to and a copy of your personal information, to request correction or erasure, to restrict processing, to data portability, and to object to processing. Where we rely on your consent, you can withdraw it at any time. This doesn't affect processing that happened before you withdrew it.

To make a request, email [email protected]. Spiik has no accounts, so we may ask for details that help us find your data, such as your purchase receipt. We'll act on your request in line with applicable data protection law.

If you believe we're processing your personal information unlawfully, you can complain to a data protection authority. Our lead authority is the Estonian Data Protection Inspectorate. You can also contact your local authority in the EEA or, in Switzerland, the Federal Data Protection and Information Commissioner.

8. Children

Spiik isn't directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us personal information, email us and we'll delete it.

9. California residents

California Civil Code Section 1798.83, the "Shine the Light" law, lets California residents ask us once a year, free of charge, which categories of personal information we disclosed to third parties for their direct marketing in the previous calendar year. We don't make such disclosures.

Under the California Consumer Privacy Act (CCPA), a "resident" is anyone in California for other than a temporary or transitory purpose, and anyone domiciled in California who is outside the state for a temporary or transitory purpose. In the past 12 months, we collected these categories of personal information:

We disclose categories A, D, F and H to our service providers for business purposes, as described in section 3. We haven't sold personal information or shared it for cross-context behavioral advertising in the past 12 months, and we won't in the future.

As a California resident, you have the right to:

• Know whether we collect and use your personal information, which categories we collect, why we collect them, and the categories of third parties we disclose them to.
• Request deletion of your personal information, subject to exceptions the law provides, such as complying with a legal obligation or protecting against illegal activity.
• Request correction of personal information that is inaccurate, or ask us to restrict its processing.
• Opt out of any future sale of your personal information. We'll act on an opt-out request within 15 days.
• Non-discrimination. We won't treat you differently for exercising your rights.

To exercise these rights, email [email protected]. We'll need to verify your identity, and we'll use any information you give us for verification only for that purpose, then delete it. You can also use an authorized agent, but we may deny a request if the agent can't prove they're authorized to act for you.

10. Updates to this policy

We update this policy as needed to stay compliant with the law and to reflect changes in Spiik. The "Last updated" date shows the current version, which takes effect as soon as it's published. If we make material changes, we may tell you with a notice in the app or on this site.

11. How to contact us

Email [email protected], or write to:

Fadel.io OÜ
Sepapaja 6
11415 Tallinn, Harju maakond
Estonia