Data Controls

1. What you can do, at a glance

• View the data we hold about you — in the app (Settings → Account) or at /app/account on the web
• Export a session's bilingual transcript — the Share button in the app; export your profile, credits, usage, and orders — one button at /app/account
• Delete your account permanently — in the app (Settings → Account → Delete Account) or at /app/account
• Delete individual sessions — in the app's Library, or the desktop History tab
• Manage translation / AI processing — per session, or in Settings
• Submit a formal data-protection request — legal@uniflowtrans.com

2. View your data

In the iOS app, open Settings → Account for your profile, email, display name, and credit balance, and the Library tab for all your sessions. On the web, sign in at /app/account for the same profile and order history; usage details (minutes used, by kind) live at /app/usage.

For your recordings: on iPhone and iPad, your sessions (transcripts and notes) live inside the app's private storage and are listed in the Library tab. On Mac, recordings are stored under ~/Library/Application Support/transcription-app/transcriptions/ — browse them with Finder.

3. Export your data

From /app/account, click “Export my data.” Within a few seconds you'll download a JSON file containing:

• Profile record (email, display name, created_at, last_signin_at)
• Credit balance history
• Usage log (minutes, per kind)
• Order history
• User settings

For your transcripts: in the iOS app, open any session and tap Share to export its bilingual transcript. On desktop, use File → Export to produce a ZIP containing the .webm audio, transcript JSON, and notes.

4. Delete your account

In the iOS app, go to Settings → Account → Delete Account and confirm (a two-step confirmation). On the web, sign in at /app/account and click “Delete my account,” confirming twice. Either way, within 30 days your account record, profile, credits, usage log, and settings are permanently erased from our database.

Order history is retained for 7 years for tax reasons, with email redacted to the hash of your original email.

On iPhone and iPad, deleting the app also removes its sessions from the device's private storage. On Mac, your local audio and transcript files are NOT deleted by this action — they're your files, on your disk; move them to Trash yourself if you want them gone.

5. Delete individual sessions

In the iOS app, open the Library, swipe a session (or use its menu) and tap Delete — a brief undo is offered. In the desktop app, right-click any session in the History tab → Delete. This removes the transcript and any associated notes (and, on Mac, the .webm audio) from your device. We never held copies, so nothing needs to be deleted from our side.

6. Withdraw consent

Before any audio, transcript, or chat is sent to our third-party processors, the iOS app asks for your consent once; translation and AI features are then used per session. To stop all third-party processing, stop recording (no audio is sent) or delete your account. On the web, you can disable translation or AI globally at /app/settings → Privacy. Disabling translation still lets you transcribe — only the post-processing step is skipped.

7. How long we keep things

• Active account data — for as long as your account is active
• After account deletion — 30 days buffer, then purged
• Order / billing records — 7 years (tax law)
• Sign-in IP logs — 90 days
• Audit logs (admin actions on your account) — 24 months
• Audio recordings — not applicable (we never receive them)

8. How we protect what we hold

• TLS 1.2+ on every connection
• Row-level security: you can only read your own records
• Admin actions logged immutably
• Third-party API keys AES-256-GCM encrypted with a master key never returned to clients
• Supabase Postgres hosted in the EU (Frankfurt)

9. Submit a formal request

For anything beyond the self-serve options above — a correction, restriction of processing, a formal access request from your lawyer — email legal@uniflowtrans.com. Include your account email and what you'd like done. We'll acknowledge within 72 hours and resolve within 30 days.