Narrail — Privacy Policy

Last updated: 2026-09-06

This policy explains how Narrail processes your data. It is the source text for the hosted policy linked from the app and app stores.

The data controller is Individual Entrepreneur Aliaksandr Audzei ("Narrail", "we", "us"), Georgia, Identification Number 304736828, legal address: Tbilisi, Krtsanisi district, Fonichala settlement 3, building 5, hall 2, floor 4. Contact for privacy matters: privacy@narrail.audzei-ie.com.

The short version

• Audio is sent only for transcription. Short WAV windows travel over HTTPS to our EU-hosted service, encrypted with AES-256-GCM while queued, and our queued copy is deleted after processing. Interrupted jobs are subject to a 30-minute expiry and periodic cleanup. Provider retention is separate, as explained below. Audio is never sent to product analytics.
• Transcript text is sent to structure what you asked. Parsing a note into tasks sends that text to our service and to DeepSeek. We do not keep a server-side copy of your notes.
• Sign-in uses a one-time email code, nothing else. We store your email address to authenticate you. A display name is optional: if you type one in the account section, we keep a copy so it survives a reinstall — clearing the field deletes that copy.
• You can delete your content and account in-app. Any note can be deleted in one tap, and you can export everything you have. If you have signed in, Settings → Account → Delete account removes the server account and signs the device out. This does not delete notes that remain only on the device; use Settings → Your data → Delete all data for those.

What we process and why

PostHog and our product analytics event sink are disabled in the first production release. RevenueCat still processes purchase information for subscription management and purchase analytics.

Before audio or text is uploaded for AI processing, the app names the provider and asks for permission. Audio and text permissions are separate and last only for the current app session. Cancel to keep the content local; restarting the app requires permission again before another AI upload.

What we never collect

• Audio or transcript content in analytics events.
• A permanent, searchable server-side library of your recordings or notes.
• Your legal name, phone number, or contacts. The display name is whatever you choose to type, is optional, and is never shared with a third party.
• Precise location.
• Payment card details (handled entirely by the App Store / Google Play).

Who else processes data on our behalf

• ElevenLabs — speech-to-text transcription of audio windows.
• DeepSeek — AI structuring of transcript text into tasks.
• RevenueCat — subscription entitlement and billing state.
• Resend — delivery of sign-in emails containing your one-time code.
• Expo — remote push delivery is not enabled in this release. Local notifications remain on-device.
• Hetzner (EU) — hosting for our backend and database.

We send each provider the data needed for the function above. Provider processing and retention are governed by the applicable service terms and our agreements. We do not sell your data.

Retention

• Our queued audio copy: deleted after processing; interrupted jobs expire after 30 minutes and are removed by periodic cleanup. Transcription results are retained briefly for delivery to the app. Parsing request bodies are processed in memory, not kept as a server-side note library.
• AI provider copies: our server cleanup does not delete provider records. ElevenLabs offers zero-retention processing only for eligible configurations; we do not promise that it is enabled. DeepSeek retention is governed by the applicable API terms. Contact us for details about provider processing.
• Email address and account record: retained until you delete your account.
• Display name: retained until you clear the field or delete your account; account deletion erases it in the same transaction.
• Calendar events: never stored on our servers. They are read from your device and cached locally; revoking calendar access in iOS Settings stops the read.
• Local notes, transcripts, and tasks: retained on your device until you delete them or uninstall the app; deletion in-app marks content removed immediately and it is excluded from all views and exports.
• Purchase records: retained by Apple and RevenueCat under their applicable retention rules, including billing and legal obligations.

Legal basis (GDPR)

Where GDPR applies to you, we process the data above to provide the service you request (performance of a contract). Product analytics is not enabled in a release until its collection, consent, and withdrawal mechanism has been implemented and described here. Our infrastructure is hosted by Hetzner in the EU. We are established outside the EU/EEA; for GDPR purposes you may also contact us directly at the address above regarding any EU representative arrangement in place at the time of your request.

Your rights

You can access, export, and delete your local content directly in the app (Settings → Your data). If you signed in, Settings → Account → Delete account removes the email address and account record from our servers and signs the device out. For any other data-subject request under GDPR or your local law — access, correction, portability, or erasure — contact privacy@narrail.audzei-ie.com. We aim to complete verified requests within 30 days.

Children

Narrail is not directed to children and we do not knowingly collect data from children under the age applicable in your jurisdiction.

International transfers

Our backend infrastructure is hosted in the EU. This does not mean all processing stays in the EU: DeepSeek is based in China, and other providers may process data in other countries. Applicable transfer arrangements depend on the provider and our service agreement. Contact us for details; we do not claim EU-only processing or verified safeguards for every provider.

Changes

We will update the "Last updated" date above and, for material changes, surface a notice in the app.