Last updated: June 2026
This Privacy Policy explains how BrightSolution ("we", "us", "our") collects, uses, and shares information when you use the FlowScribe AI mobile application and related services (the "App"). It also describes your rights under the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act as amended ("CCPA/CPRA").
By using the App you agree to this Policy. If you do not agree, please do not use the App.
The data controller responsible for your information is:
BrightSolution
[POSTAL ADDRESS]
Email: support@flowscribe.org
We collect only what we need to run the App.
Account information. When you create an account we collect your name, email address, and a password. Passwords are handled by our authentication provider and stored only in hashed form; we never see your plain-text password.
Audio you record or import. The core function of the App is to record audio through your device microphone or to import audio files you choose. These recordings are uploaded to our cloud storage so they can be transcribed and analyzed.
Transcripts and AI-derived content. We generate and store a text transcript of your audio and structured outputs derived from it, such as summaries, key points, decisions, action items, risks, and suggested calendar events or task items.
Virtual meetings (optional). If you choose to record a virtual meeting, you provide a meeting link and we dispatch a notetaker bot that joins the call to record and transcribe it on your behalf. Participants are notified of the bot's presence in the call.
Sharing data. If you create a share link or share file for a recording, we generate a share token and store the association between that token and the recording so a recipient can open it. Anyone who holds the link or file can access that recording's content until you delete the share or the recording.
Calendar access (write-only). If you choose to add a suggested event, the App writes that event to your device calendar. The App requests write-only calendar access and does not read, collect, or upload your existing calendar entries, except where you explicitly enable upcoming-meeting features that read events you select.
Support communications. If you contact us, we keep your messages and contact details to respond.
Limited technical data. We and our infrastructure providers process basic technical information (such as IP address, app version, device type, and error logs) needed to operate, secure, and debug the service.
We do not knowingly collect special-category data, and we do not use the App to serve advertising or to track you across other apps or websites.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and manage your account; authenticate you | Performance of a contract |
| Record, store, transcribe, and analyze your audio to deliver App features | Performance of a contract |
| Enable sharing and export features you initiate | Performance of a contract |
| Process subscriptions and purchases | Performance of a contract |
| Secure the service, prevent abuse, debug errors | Legitimate interests |
| Respond to your support requests | Legitimate interests / contract |
| Comply with legal obligations | Legal obligation |
| Any optional feature requiring it | Your consent (which you may withdraw) |
Where we rely on consent (for example, microphone access granted through the iOS permission prompt), you can withdraw it at any time in your device settings; this does not affect processing carried out before withdrawal.
To provide its features, the App relies on third-party services that act as our processors. We share your content with them only to the extent needed to deliver the features you use:
| Provider | Role | Data shared |
|---|---|---|
| Supabase | Database, file storage, and authentication hosting | Account data, audio files, transcripts, and derived content |
| AssemblyAI | Speech-to-text transcription | Your audio recording |
| OpenAI | Text analysis and search embeddings | Your transcript and derived text |
| Recall.ai | Joins and records virtual meetings (only when you use that feature) | The meeting link and call audio/transcript |
| RevenueCat | Subscription and purchase management | Purchase and subscription status (no payment card data) |
Optional integrations you connect. If you connect Jira, Notion, Slack, or Google, the App sends the specific meeting content you choose to export to that service on your instruction, using access you authorize. Data flows to these services only when you connect them and initiate an export or post.
We do not sell your content to these providers or anyone else. A current list of sub-processors is available on request at support@flowscribe.org.
We do not sell your personal information. We disclose information only:
We keep your information for as long as your account is active or as needed to provide the App. When you delete a recording, we delete its stored audio file and associated transcript and derived content. When you delete your account — which you can do at any time from within the App (Settings → Delete Account) — we delete your personal data, meetings, recordings, transcripts, and connections, except where we must retain limited information to comply with legal obligations, resolve disputes, or enforce our agreements. Backups and logs are purged on a rolling basis.
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and row-level security that restricts your data to your account. API keys and other secrets are held server-side and are never embedded in the App. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our providers may process and store data in the United States and other countries. Where data is transferred out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may request a copy of the relevant safeguards at support@flowscribe.org.
Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at support@flowscribe.org. We will respond within the time limits required by law.
If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; to request deletion of your personal information; to correct inaccurate information; and not to be discriminated against for exercising these rights. We do not "sell" or "share" your personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. Residents of other U.S. states with comparable laws have similar rights. To exercise your rights, contact us at support@flowscribe.org. You may use an authorized agent, and we will verify your request before acting on it.
You are responsible for complying with laws that govern recording conversations, which in some U.S. states and other jurisdictions require the consent of all participants. The App is a tool; obtaining any required consent before recording is your responsibility. The App displays a consent reminder before recording. See the Terms of Service for more.
The App is not directed to children. We do not knowingly collect personal information from anyone under the age required for consent in their jurisdiction (16 in much of the EU; 13 in the U.S.). If you believe a child has provided us personal information, contact us and we will delete it.
We may update this Policy from time to time. We will post the new version in the App and update the "Last updated" date, and where required by law we will notify you. Your continued use of the App after changes take effect constitutes acceptance.
Questions or requests about this Policy or your data:
BrightSolution
Email: support@flowscribe.org
[POSTAL ADDRESS]