Privacy Policy — RecapBird

App: “RecapBird” on Google Play (recapbird.ai.note.taker.voice.recorder.summary) · Developer: KLapp

Effective date: October 31, 2026

This policy explains what data the RecapBird Android app collects, uses and shares, why, how long it is kept, and what you can do about it. It describes the current version of the app. “We” means KLapp, the developer of RecapBird.

1. Who we are

RecapBird is published on Google Play by the developer KLapp, which decides how the data described here is used (the “controller”). Privacy contact and support: applarik+recapbird@gmail.com

You never create an account with us or sign in. The app does not ask for your name, e-mail address or phone number. To talk to our server, the app creates an anonymous Firebase user for your install; its ID is the Install ID. It is not linked to your name or e-mail address. RecapBird is for adults aged 18 and over (section 13).

2. Your recordings, transcripts and summaries

• What you give the app. Audio you record with the microphone, or an audio or video file you choose to import (through the file picker or Android's share sheet). From a video file, only the audio track is uploaded; the pictures never leave your phone. One recording or import can be up to 3 hours long. Before your first recording or import, the app shows what is sent.
• Where it goes. The audio is uploaded over an encrypted connection to our servers on Google Cloud (Firebase) in the United States. Audio is processed by our AI service providers to make your notes: a speech-to-text provider (Soniox, or Deepgram as a backup) turns the audio into a transcript, and Google's Gemini model writes a summary from the transcript text. Section 3 says what each provider receives.
• Speakers. Transcripts use generic labels such as “Speaker 1” and “Speaker 2” when the provider returns them. We do not create voiceprints or identify who is speaking.
• Your notes stay on your phone. The transcript and summary are sent to your phone and then deleted from our servers (section 7). The phone is the only long-term home of your notes: we keep no copy, backup or search index of them, apart from summaries you report (kept 90 days) and the processing copies described in section 7. The app keeps notes out of Android's device backup and phone-to-phone transfer, so uninstalling the app, clearing its storage or losing the phone deletes them for good.
• What we do not do with the content. We do not write the contents of your recordings, transcripts or summaries to our logs, and we do not put them in analytics or crash reports. Our team reviews summaries you report (below).
• Copy and share. When you copy or share a note, its text goes to the clipboard or, through Android's share sheet, to the app you choose. We do not receive it.
• Reports. If you report an AI summary, we receive the summary text, the reason you picked, your optional comment and the app version, so that we can review it. Never the audio or the transcript.
• Other people and sensitive content. A recording can contain anything said in it, including other people's voices and personal or sensitive information. The service handles it automatically and uses it only to make your notes. You are responsible for recording only where the law allows (Terms of Use, section 6).
• Permissions. The app uses the microphone to record, the internet, and, if you allow it, notifications. It keeps working in the background while it records and uploads. It has no access to your device location (GPS), your contacts, or your photos and files; imported files come through Android's own picker or share sheet. Google Analytics and Apphud estimate your approximate location from your IP address instead (sections 3 and 4).

3. Who processes data for us

These services receive data from the app, or from our server, in connection with RecapBird. Google's Firebase software in the app sends the Analytics, Crashlytics, Remote Config, installation and messaging data below to Google, which processes it for us. While running Crashlytics and Cloud Messaging, Google also collects technical data such as IP addresses and the app's identifiers (“Firebase Service Data”) and uses it under its own Privacy Policy to run, secure and improve its services (https://firebase.google.com/support/privacy).

Apphud

Apphud Inc. runs our subscriptions for us as a processor: whether you have an active subscription or trial (our server asks Apphud when you ask for a new AI note), purchases and restores, and Google Play's notices of renewals, payment problems, cancellations and refunds. It receives random Apphud user and device IDs; your phone's Android ID; the Android advertising ID and the App Set ID; your IP address and the country derived from it; your language and time zone; phone model, Android and app version, and the store that installed the app; purchase details; the install referrer and attribution data (section 4); the Firebase app-instance ID; and the version of the paywall you see. Apphud's servers may send purchase and subscription events to Google Analytics, so that purchases match the app's own events. Apphud's privacy policy: https://legal.apphud.com/privacy.

No AI training

Neither we nor the service providers that process your notes use your recordings, transcripts or summaries to train AI models. The providers' terms are summarised in the table above. We do not give your content to anyone for that purpose.

The app shows no ads and contains no ad network software; it uses Google Analytics to measure our ads (section 4). We do not sell your data for money. Using Google Analytics to measure and personalize our ads may count as “selling” or “sharing” under some US state laws (section 14).

4. Analytics and advertising features

• What Google Analytics for Firebase collects: an app-instance ID; the Android advertising ID; how the app was found on Google Play (the Play Store install referrer, for example the campaign of an ad or a link); your approximate location, derived from your IP address (Google states that Google Analytics does not log or store IP addresses); phone model, Android version, language and app version; the events Google Analytics records on its own, such as the first open, sessions, engagement time, screen views, app updates and removals, and crashes; and the events the app logs: onboarding finished, paywall views (with the paywall version you see), checkout and trial starts, recording started, import started (and whether it came from the file picker or a share), and your choice at “Get started” and in the Privacy switch. These events carry no note content and no free text.
• User ID. The app sets the Analytics user ID to the random user ID that Apphud assigns, so that purchases reported by Apphud match the app's own events.
• Install referrer. At the first launch the app reads Google Play's install referrer once, including the Google Ads click ID and campaign details when there are any, and sends it to Apphud.
• Ads. RecapBird shows no ads and contains no ad network software. We use Google Analytics, Apphud and Google Ads to measure how people find the app and to measure and personalize our own ads on Google. Installs and purchases that Google Play attributes to our ads may still be measured through Google Play's link to Google Ads, whatever you choose in the app. Google signals are off in our Google Analytics property. We may link the property to our Google Ads account to measure our app campaigns. How Google uses data from apps that use its services: https://business.safety.google/privacy/.
• How long: we set Google Analytics to keep user-level and event-level data for 14 months. A daily copy of the Analytics events is exported to a BigQuery database in our Google Cloud project, and each day's copy is deleted automatically at the latest 420 days after it is made (section 7).

Google Analytics, Crashlytics and the other Firebase software in section 3 start working when the app first opens, before you reach the “Get started” button. There is no setting that turns off analytics inside the app; the Privacy switch (section 6) turns off the use of your data for ads.

5. What you accept at “Get started”

The first screen of the app says: “By starting you accept our Terms of Use and Privacy Policy, including ads measurement and personalization (Google, Apphud).” Tapping Get started accepts these terms and this policy, including the use of data from the app for measuring and personalizing our ads described in section 4 and the use of Apphud described in section 3.

From the first launch, Google Analytics treats four consent settings as allowed: storing data for analytics, storing data for advertising, using data for advertising, and ad personalization. The app records your tap and the version of these documents you accepted on your phone, and sends a record of the choice to our server and to Google Analytics as an event. You can turn off the use of your data for ads in the app (section 6).

6. Your choices

• Privacy switch: in the app, open Settings → Privacy and data → Privacy and turn off Ads measurement and personalization. It takes one tap and applies at once: the app then tells Google not to use your data for ad storage, ad user data or ad personalization. The app works the same either way, and measurement of how you use the app continues. The switch does not change what Apphud collects to run your subscription.
• Advertising ID: in Android, open Settings → Privacy → Ads. “Delete advertising ID” deletes it and no new one is assigned; “Reset advertising ID” replaces it with a new one and does not stop its use. On some older versions, open Settings → Privacy → Advanced → Ads, then “Opt out of Ads Personalization”. Google's software in the app follows these settings. Google states that resetting the advertising ID also resets Google Analytics' app-instance ID. Neither step deletes data already collected; it is kept as section 7 describes.
• Google's ad settings: https://adssettings.google.com.
• Permissions and notifications: you can take back the microphone permission or turn off notifications in Android's settings for the app at any time. Notifications are optional.
• Uninstalling RecapBird stops all collection by the app at once.
• Deletion, objections and other requests: write to us (sections 9 and 14).

7. How long data is kept

• On your phone: until you delete a note, uninstall the app or clear its storage in Android's settings.
• Audio on our servers: deleted right after the transcript is made. If transcription fails, the audio is kept up to 7 days so that you can retry. An upload that is never finished is dropped after 7 days, and audio that is still waiting to be processed is deleted after 30 days at the latest.
• Audio and transcripts at our speech-to-text providers: Soniox deletes audio and transcripts automatically after 30 days at the latest; we delete our copy there after each job, and a daily clean-up deletes anything older than 24 hours. Deepgram does not keep the audio.
• Transcripts and summaries on our servers: deleted when your phone confirms it has received them, and in any case after 7 days, removed from storage within one more day. Google Vertex AI may keep a summary prompt that its automated checks flag as possibly abusive for up to 90 days (section 3).
• Job records (status, length and IDs, no content): deleted 1 day after a job ends, and 8 days after a failed job.
• Reported summaries: 90 days.
• Install record (the Install ID, notification token, Apphud user ID, country group) and consent records: deleted on your deletion request (section 9), and otherwise after 24 months without use of the app.
• The free AI note record (a one-way fingerprint of your phone's Android ID, kept to stop abuse of the free note): 24 months after its last change, also after a deletion request (section 9).
• Subscription records (usage counters, the purchase record, and the purchase token stored only as a fingerprint, without your Apphud ID): while the subscription is relevant to its billing and limits, then 14 months, also after a deletion request (section 9).
• Install counts per device (to stop abuse): 24 hours.
• Deletion records: when a deletion request is carried out, we keep a short record of it, without your content (a case number, the date, a one-way fingerprint of the Install ID and which team member handled it), for up to 24 months.
• Google Analytics: we set Google Analytics to keep user-level and event-level data for 14 months; Google then deletes it automatically in a monthly run, and for user-level data it counts the 14 months from your last use of the app. This setting does not limit Google's aggregated reports.
• BigQuery copy: each day's copy of Analytics events is deleted automatically at the latest 420 days after it is made; Google keeps deleted copies in its recovery storage for up to 14 more days.
• Crashlytics: keeps crash details and the related IDs for 90 days, then starts removing them from its live and backup systems. Google publishes no separate period for the sessions data that Crashlytics uses for its crash statistics (section 3).
• Firebase Authentication: Google keeps the IP addresses it logs for sign-in for a few weeks, and the anonymous user record (the Install ID and its sign-in times, no content) until it is deleted; our deletion route does not yet delete that record.
• Firebase installation ID: kept by Firebase until a request to delete it reaches Firebase, then removed from its live and backup systems within 180 days; the app sends no such request. Notification token: Firebase treats it as expired and deletes it once the app has not connected for 270 days.
• Apphud: Apphud sets no fixed retention period for its customer records; we keep them there while we use Apphud and delete your record there when you ask us to delete your data (section 9).
• Support e-mails: kept, with their copies on our computers and the Telegram notifications about them, until you ask us to delete them.
• Data Google holds as a controller in its own right follows Google's Privacy Policy (https://policies.google.com/privacy).

8. Support e-mail

• We receive your e-mail address, your name if your e-mail shows it, your message, attachments and anything you include. “Contact support” and “Delete my data” in the app open your own e-mail app with our address and add only the app version and the Android version (and, for a deletion request, the Install ID); you see the message before you send it.
• Handling. Support e-mails arrive in our Gmail mailbox and are copied to computers our team runs; our team reads them, sometimes with the help of an AI assistant. When an e-mail arrives, its sender address, subject, date and mailbox folder are sent to our team as a Telegram notification; the message text and attachments are not. A person answers every e-mail by hand; no reply is sent automatically.
• Use. Only to answer you and handle your request. We never add your address to a mailing list or use it for advertising.

9. Deleting your data

• On your phone. Delete a note in the app: this deletes it on your phone, cancels any processing of it and deletes any copy we still hold on our servers, including reports about that note. To delete everything the app keeps on the phone, uninstall RecapBird, or open Android Settings → Apps → RecapBird → Storage & cache and tap Clear storage (the names vary by phone). The app has no account to delete.
• On our servers, by e-mail. In the app, open Settings → Privacy and data → Delete my data. It opens an e-mail to us with the subject “RecapBird: delete my data” and a line “Install ID: …”. Send it as it is. The Install ID is the anonymous ID of your install: it is not a password and does not prove that the install is yours, but it is how we find your records, because we have no accounts and cannot tie an e-mail address to an install. A person on our team carries out the request by hand through our deletion route. For that install, it deletes the audio, transcripts and summaries still on our servers, the job records, the reports you sent, your consent records and the install record, and the team deletes your customer record at Apphud (if your subscription is still active, we first tell you that this ends paid access in the app, and delete it once you confirm or the subscription has ended). Then the team deletes the Google Analytics data and the matching rows of our BigQuery copy for your analytics user ID, no earlier than 4 days after the server step, so a request is not finished on the day we start it. We may ask you a question to make sure the request is yours. We act on each request as soon as we can; a person answers every e-mail by hand.
• An e-mail without an Install ID. If you write without the Install ID, we ask you for it. Without it we cannot identify your records. If you have uninstalled the app, the Install ID went with it, and a reinstalled app has a new one; data from before then expires as section 7 describes; your record at Apphud is kept while we use Apphud.
• Limits of analytics deletion. (a) Events the app sent before it set its analytics user ID are not deleted on request; they expire with the retention periods in section 7. (b) Analytics events tied to an Apphud ID that another install, which has not asked for deletion, holds or held (or that another install's report or consent record carries) are kept for that ID's normal retention until every holder has asked.
• What stays after a deletion. The record that this phone has used its free AI note (kept to prevent abuse of the free note); the subscription's usage counters and purchase record, without your Apphud ID (kept to run the subscription and its limits); the 24-hour install count; the short deletion record (section 7). We also delete your record at our subscription provider, Apphud. Deleting data does not cancel your subscription: cancel it in Google Play.
• Support e-mails. We delete your e-mails to us, their copies and the Telegram notifications about them when you ask from the address that sent them.
• Data that expires on its own is listed in section 7. Our deletion page sums this up: https://klapp-app.github.io/recapbird/delete-data.html.

10. Why we use data, and legal bases (EEA and UK)

• Making your transcripts and summaries, notifications you allow, subscriptions and purchases, and answering your requests. Legal basis: performing our contract with you.
• Storing or reading information on your phone for advertising; ad personalization; measuring our ads and building audiences with Google and Apphud (section 4). Legal basis: your consent, given by tapping “Get started” (section 5); you can turn off the use of your data for ads in Settings → Privacy and data → Privacy (section 6).
• Analytics, crash reports, remote settings, and the installation ID and notification token that Google's software creates (section 3). Legal basis: our legitimate interests in keeping the app working and improving it, in knowing how it is used, and in using Google's Firebase software, which creates these IDs on its own; you can object by writing to us, and uninstalling the app stops all collection.
• The free AI note record, install counts and protection against abuse. Legal basis: our legitimate interest in preventing fraud and abuse.
• Keeping the record of your tap on “Get started” and of your Privacy switch choices. Legal basis: our legitimate interest in keeping a record of what you accepted and when.
• Deletion records; lawful requests. Legal basis: our legal obligations and our legitimate interest in showing that a request was carried out.

You are not required by law or by contract to give us personal data. To use the transcript and summary features, the app must send your audio for processing; if you do not want that, do not record or import. Google's software in the app sends the data in section 3 whenever the app runs; if you do not want that, do not use the app, or uninstall it.

11. International transfers

Our servers run in the United States (Google Cloud region us-central1). Google (Firebase, Cloud Storage, Vertex AI, Analytics, BigQuery) processes data in the United States and other countries; Gmail is Google's e-mail service under Google's own terms and Privacy Policy. For data from the EEA, the UK and Switzerland, Google relies on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions (https://www.dataprivacyframework.gov/list) and on the standard contractual clauses in its Cloud Data Processing terms. Soniox (United States) processes data under its data processing agreement with us. Deepgram (United States) relies on standard contractual clauses. Apphud (United States) relies on the 2021 standard contractual clauses and, for the UK, the UK Addendum to them. Telegram and the AI assistant we use for support receive support e-mails or their details (sections 3 and 8) and may process them in countries outside the EEA and the UK for which no adequacy decision exists; we pass them only what our team needs to notice and answer your e-mail. You can ask us for information about these transfers at applarik+recapbird@gmail.com.

12. Security

Connections between the app, our servers and our providers are encrypted in transit (HTTPS/TLS). Audio and results sit in a closed storage bucket that no app can read or write directly: uploads and downloads go only through links our server creates for that note. Provider keys are kept only on our server, never in the app. Access to our Analytics, Firebase and Google Cloud data is limited to our team and to Google, which processes it for us. The Install ID is not a password. Android's backup and phone-to-phone transfer leave out the app's data (section 2). No method is perfectly secure.

13. Children

RecapBird is meant for adults aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has used the app or sent us personal data, write to us and we will delete what we can find.

14. Your rights

EEA and UK: you can ask to access, correct, delete, restrict, object to or port your personal data, withdraw consent at any time, and complain to your data protection authority. Withdrawing consent does not affect the lawfulness of processing based on your consent before you withdrew it. To withdraw consent to ads measurement and personalization, turn off the Privacy switch (section 6) or write to us; uninstalling the app stops all further collection. You can object at any time to our use of your data for direct marketing, including related profiling, by writing to us. United States: depending on your state, you may have the right to know, access, correct and delete your personal information, and to opt out of its “sale” or “sharing” for targeted advertising, without being treated differently. The Settings → Privacy and data → Privacy switch “Ads measurement and personalization” is your opt-out of sharing and targeted advertising through Google Analytics; it does not change what Apphud collects to run your subscription and to tell which ads led to an install or purchase (section 3); you can also write to us, and uninstalling the app stops all further collection. We use the content of your recordings only to provide the service you ask for. Android's advertising ID controls (section 6) are additional and do not by themselves exercise these rights. Because the app has no account, we may be unable to link a request to the data collected from your phone unless you send your Install ID; we then tell you so. To use your rights or appeal our decision on a request, write to applarik+recapbird@gmail.com (for deletion, follow section 9); where the law allows, an authorized agent may ask for you. We answer as soon as we can and within the time the law requires where it applies.

15. Changes

We post each new version of this policy here with a new effective date. Before we start sending your data to a new processor, we update this page. When you tap “Get started”, the app records on your phone which version of these documents you accepted.

16. Contact

KLapp, developer of RecapBird: applarik+recapbird@gmail.com