Privacy Policy

Last updated: May 5, 2026

1. What We Collect

Account information

When you sign up, we collect your name, email address, and (if using email/password auth) a hashed version of your password. If you sign in with Google, we receive your name, email, and profile picture from Google.

Usage data

We record translation session metadata: start time, duration, source and target languages, and a session title derived from the first translated phrase. This is used to display your history and enforce monthly usage limits.

Transcript and translation text

The text of transcriptions and translations is stored in your account so you can review, export, and share sessions. You can delete individual sessions or your entire account at any time.

Payment information

Payments are processed by Stripe. We store only a Stripe customer ID and subscription ID — we never see or store your card number or full payment details.

2. What We Do NOT Collect

Audio— Audio captured by your browser is streamed directly to Groq's API for transcription and is immediately discarded. We do not store, record, or retain any audio data.
Cookies beyond authentication — We use a single session cookie for authentication (NextAuth). We do not use tracking or advertising cookies.

3. How We Use Your Data

To authenticate you and maintain your session.
To display your translation history and enforce plan limits.
To process payments and manage your subscription.
To improve the Service (aggregated, anonymized usage patterns only).

We do not sell your data to third parties.

4. Third-Party Services

Groq— Audio chunks are sent to Groq's API for speech-to-text transcription. Groq's privacy policy applies to data processed by their API.
Google OAuth— If you sign in with Google, your Google account data is subject to Google's privacy policy.
Stripe— Payment processing. Stripe's privacy policy applies to payment data.

5. Data Retention

Session transcripts and translations are retained until you delete them or close your account. Account data is deleted within 30 days of account closure. Stripe billing records are retained as required by law.

6. Your Rights

You may at any time:

Access or export your translation history from the History page.
Delete individual sessions from your History page.
Request deletion of your entire account by emailing us.
Update your name and preferences from the Settings page.

7. Security

Passwords are hashed with bcrypt (cost 12). All data is transmitted over HTTPS. We use short-lived signed tokens for WebSocket authentication. We do not log audio or translation content server-side beyond what you save to your history.

8. Children

The Service is not directed at children under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or in-app notice. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or deletion requests: support@rikaigi.app