Privacy Policy

Introduction

Welcome to KathaSync. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how KathaSync (“we,” “us,” or “our”) collects, uses, stores, and protects your data when you use our voice-to-text transcription services.

By using KathaSync, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.

Data Collection

We collect various types of information to provide and improve our services. Below is a detailed explanation of each type of data we collect.

Account Information

When you create an account, we collect:

• Email address - Used for account identification, authentication, and service communications
• Display name - Optional, used for personalizing your experience
• Phone number - Optional, used for SMS verification and account recovery
• Authentication tokens - Securely managed through Firebase Authentication

Audio Data

When you use our transcription service, we collect:

• Audio files - Uploaded audio files (MP3, WAV, M4A, WebM, OGG formats) are temporarily stored for processing
• Audio duration - Used for credit calculation and service delivery
• File metadata - File names, sizes, and upload timestamps
• Recording source - Whether audio was uploaded or recorded directly in the app

Transcription Data

The following data is generated and stored during transcription:

• Transcription text - The converted text output from your audio files
• Language detected - Bengali, English, or Banglish language detection results
• Processing timestamps - When transcriptions were created and modified
• Transformation history - Records of text transformations applied (translations, formatting, summaries)

Payment Data

For payment processing, we collect:

• bKash transaction ID - Used to verify your payment
• Payment amount - The amount paid in BDT
• Payment timestamp - When the payment was made and verified
• Credit purchase history - Records of credit packages purchased

We do not store your bKash PIN, full mobile banking credentials, or any sensitive financial information. Payments are verified through SMS confirmation.

Usage Data

We automatically collect certain information when you use our service:

• Device information - Browser type, operating system, device type
• IP address - Used for security and abuse prevention
• Access logs - Timestamps and actions performed within the service
• Error logs - Technical errors encountered (without personal content)

How We Use Your Data

We use the collected data for the following purposes:

Service Delivery

• Processing and delivering audio transcriptions
• Performing text transformations (translation, summarization, reformatting)
• Managing your account and credit balance
• Processing and verifying payments

Service Improvement

• Analyzing usage patterns to improve transcription accuracy
• Identifying and fixing technical issues
• Developing new features based on user needs

Communication

• Sending transactional emails (payment confirmations, account updates)
• Notifying you about service changes or maintenance
• Responding to support requests

Security & Compliance

• Preventing fraud, abuse, and unauthorized access
• Enforcing our Terms of Service
• Complying with legal obligations

Data Storage & Security

We take the security of your data seriously and implement multiple layers of protection:

Encryption

• In transit: All data transmitted between your device and our servers is encrypted using TLS 1.3
• At rest: Your transcriptions and audio files are encrypted using AES-256 encryption

Infrastructure Security

• Servers hosted on secure infrastructure with DDoS protection
• Regular security audits and vulnerability assessments
• Access controls and authentication for all systems
• Automated backup systems with encrypted storage

Access Controls

• Your data is only accessible by you through authenticated sessions
• Our team has limited access to production data, only when necessary for support
• All access is logged and monitored

Data Retention

We retain your data for different periods depending on the type and your subscription tier:

After the retention period, data is automatically and permanently deleted from our systems. You can request earlier deletion at any time through your account settings or by contacting support.

Third-Party Services

We use the following third-party services to operate KathaSync. Each service has been selected for its security practices and compliance standards:

Firebase (Google)

• Purpose: User authentication and session management
• Data shared: Email address, authentication tokens
• Privacy policy: Firebase Privacy Policy

AI Transcription Services

• Purpose: Audio transcription and text transformation processing
• Data shared: Audio content, text for transformation
• Data Retention: Per our third-party AI providers' safety policies, prompts and generated responses may be retained for up to 55 days for abuse monitoring and safety review.
• Privacy Policy: Data is handled in accordance with the privacy policies of our AI processing partners.

bKash

• Purpose: Payment processing
• Data shared: Transaction verification (amount, transaction ID)
• Note: We do not have access to your bKash account details

Cloudflare

• Purpose: CDN, DDoS protection, and security
• Data shared: IP addresses, request metadata

Your Rights

You have the following rights regarding your personal data:

Right to Access

You can access all your personal data, transcription history, and payment records through your account dashboard. You may also request a complete export of your data.

Right to Rectification

You can update your account information (email, display name, phone number) at any time through your account settings.

Right to Deletion

You can delete individual transcriptions or request complete account deletion. Upon account deletion, all your data will be permanently removed within 30 days, except for payment records which must be retained for legal compliance.

Right to Data Portability

You can export your transcriptions in common formats (TXT, DOCX, PDF) at any time. You may also request a complete data export in machine-readable format.

Right to Withdraw Consent

Where we process data based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

Bangladesh-Specific Considerations

As a service primarily serving users in Bangladesh, we comply with applicable local regulations:

Digital Security Act 2018

We comply with the Digital Security Act 2018 of Bangladesh and cooperate with law enforcement authorities when legally required. We may be required to disclose user data pursuant to valid legal process.

Data Localization

While our infrastructure may utilize global cloud services for reliability and performance, we ensure that data processing complies with applicable laws and that appropriate safeguards are in place for any cross-border data transfers.

Language Support

Our service is designed specifically for Bengali, English, and Banglish (code-mixed) content. We understand the importance of accurate transcription for local dialects and colloquialisms.

Local Payment Methods

We use bKash for payment processing, the most widely used mobile financial service in Bangladesh, to ensure accessibility for all users.

Children's Privacy

KathaSync is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@kathasync.com.

If we discover that an individual under 18 has provided us with personal information, we will delete such information from our servers promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:

• We will notify you via email at least 30 days before the changes take effect
• We will post a notice on our website and within the application
• The “Last updated” date at the top of this policy will be revised

Your continued use of KathaSync after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree with the changes, you should discontinue use and request account deletion.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: