Narrail — Privacy Policy
Last updated: 2026-09-04
This policy explains how Narrail processes your data. It is the source text for the hosted policy linked from the app and app stores.
The data controller is Individual Entrepreneur Aliaksandr Audzei ("Narrail", "we", "us"), Georgia, Identification Number 304736828, legal address: Tbilisi, Krtsanisi district, Fonichala settlement 3, building 5, hall 2, floor 4. Contact for privacy matters: privacy@narrail.audzei-ie.com.
The short version
- Audio is sent only for transcription. Short WAV windows travel over HTTPS to our EU-hosted service, encrypted with AES-256-GCM while queued, and are deleted immediately after processing (30-minute safety TTL if processing is interrupted). Audio is never sent to analytics.
- Transcript and assistant text are sent only to do what you asked. Parsing a note into tasks, or using the chat assistant, sends that text to our service and, transiently, to an AI provider. We do not keep a server-side copy of your notes.
- Sign-in uses a one-time email code, nothing else. We store your email address to authenticate you; we do not require or collect your name.
- You can delete your content in-app, anytime. Any note can be deleted in one tap, and you can export everything you have. Full account deletion is handled on request (see "Your rights" below) while we finish a self-service option.
What we process and why
| Data | Where it lives | Purpose | Leaves device? |
|---|---|---|---|
| Audio windows for transcription | Device; our EU service transiently; ElevenLabs | Speech-to-text | Yes |
| Raw transcript | Your device (local database) | Your permanent record of what you said | No |
| Transcript text sent for parsing | Our EU service, transiently; DeepSeek | Turn text into tasks with dates | Yes, only on your action |
| Chat assistant messages | Our EU service, transiently; DeepSeek | Answer you and propose task changes you confirm | Yes, only when you use it |
| Email address | Our EU service (accounts database) | One-time-code sign-in, account identity | Yes |
| OTP codes | Our EU service, hashed, short-lived | Verify sign-in | Yes |
| Apple Calendar events | Your device (read on-device via EventKit) | Show your calendar next to your tasks | No |
| Subscription status | RevenueCat / app stores | Manage your subscription | Yes |
| Push token | Our EU service; Expo push service | Deliver reminder notifications | Yes, only if enabled |
| Product analytics events | PostHog (EU) and our EU service | Understand the funnel; never contains audio, transcript, or message content | Yes |
What we never collect
- Audio, transcript, or assistant message content in analytics events.
- A permanent, searchable server-side library of your recordings or notes.
- Your name, phone number, or contacts.
- Precise location.
- Payment card details (handled entirely by the App Store / Google Play).
Who else processes data on our behalf
- ElevenLabs — speech-to-text transcription of audio windows.
- DeepSeek — AI structuring of transcript text into tasks, and the chat assistant.
- RevenueCat — subscription entitlement and billing state.
- Resend — delivery of sign-in emails containing your one-time code.
- PostHog (EU-hosted) — product analytics, scrubbed of content fields.
- Expo — delivery of push notifications, if enabled.
- Hetzner (EU) — hosting for our backend and database.
None of these providers receives more than the minimum needed for the function above, and none is permitted to use your data for its own purposes. We do not sell your data.
Retention
- Audio windows and assistant/parsing request bodies: deleted immediately after processing, with a 30-minute maximum safety TTL.
- Email address and account record: retained until you delete your account.
- Calendar events: never stored on our servers. They are read from your device and cached locally; revoking calendar access in iOS Settings stops the read.
- Local notes, transcripts, and tasks: retained on your device until you delete them or uninstall the app; deletion in-app marks content removed immediately and it is excluded from all views and exports.
- Analytics events: retained on a rolling window and then aggregated or dropped; see
docs/15-self-hosted-analytics-spec.mdfor the schedule.
Legal basis (GDPR)
Where GDPR applies to you, we process the data above to provide the service you request (performance of a contract) and, for analytics, on the basis of your consent, which you can withdraw in Settings. Our infrastructure is hosted by Hetzner in the EU. We are established outside the EU/EEA; for GDPR purposes you may also contact us directly at the address above regarding any EU representative arrangement in place at the time of your request.
Your rights
You can access, export, and delete your local content directly in the app (Settings → Your data). For account deletion (removing your email address and account record from our servers) or any other data-subject request under GDPR or your local law — access, correction, portability, or erasure — contact privacy@narrail.audzei-ie.com. We aim to complete verified requests within 30 days.
Children
Narrail is not directed to children and we do not knowingly collect data from children under the age applicable in your jurisdiction.
International transfers
Our infrastructure and most processors above are EU-based. Where a processor transfers data outside the EU/EEA, it does so under a recognized safeguard (such as Standard Contractual Clauses) required by that processor's own compliance program.
Changes
We will update the "Last updated" date above and, for material changes, surface a notice in the app.