Data Controls

1. What you can do, at a glance

• View all data we hold about you — at /app/account
• Export your profile, credits, usage, and orders — click one button
• Delete your account permanently — at /app/account
• Delete individual recordings — from the desktop app
• Withdraw AI / translation consent — in Settings
• Submit a formal data-protection request — legal@uniflowtrans.com

2. View your data

Sign in at /app/account. The page shows your profile, email, display name, credit balance, and order history. Usage details (minutes used, by kind) live at /app/usage.

For audio recordings: they're stored on your Mac under ~/Library/Application Support/transcription-app/transcriptions/. Browse them with Finder.

3. Export your data

From /app/account, click “Export my data.” Within a few seconds you'll download a JSON file containing:

• Profile record (email, display name, created_at, last_signin_at)
• Credit balance history
• Usage log (minutes, per kind)
• Order history
• User settings

For your audio and transcripts, use File → Export in the desktop app to produce a ZIP containing the .webm audio, transcript JSON, and notes.

4. Delete your account

At /app/account, click “Delete my account.” You'll be asked to confirm twice. Within 30 days your account record, profile, credits, usage log, and settings are permanently erased from our database.

Order history is retained for 7 years for tax reasons, with email redacted to the hash of your original email.

Your audio and transcript files on your Mac are NOT deleted by this action — they're your files, on your disk. Move them to Trash yourself if you want them gone.

5. Delete individual sessions

In the desktop app, right-click any session in the History tab → Delete. This removes the transcript JSON, the .webm audio, and any associated notes from your Mac. We never held copies, so nothing needs to be deleted from our side.

6. Withdraw consent

Translation and AI chat run only when you opt into them per-session. You can disable either globally at /app/settings → Privacy. Disabling translation still allows you to transcribe — only the post-processing step is skipped.

7. How long we keep things

• Active account data — for as long as your account is active
• After account deletion — 30 days buffer, then purged
• Order / billing records — 7 years (tax law)
• Sign-in IP logs — 90 days
• Audit logs (admin actions on your account) — 24 months
• Audio recordings — not applicable (we never receive them)

8. How we protect what we hold

• TLS 1.2+ on every connection
• Row-level security: you can only read your own records
• Admin actions logged immutably
• Third-party API keys AES-256-GCM encrypted with a master key never returned to clients
• Supabase Postgres hosted in the EU (Frankfurt)

9. Submit a formal request

For anything beyond the self-serve options above — a correction, restriction of processing, a formal access request from your lawyer — email legal@uniflowtrans.com. Include your account email and what you'd like done. We'll acknowledge within 72 hours and resolve within 30 days.