Privacy Policy
1. Controller
The controller of your personal data is JOUGROUP s.r.o., Václavské náměstí 808/66, 110 00 Praha 1, Czech Republic, company ID 19707673, e-mail info@joudigest.com.
2. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address, name (if you give one), sign-in method, session data, IP address and browser of sign-ins | Account, passwordless sign-in, security, notifications you asked for | Contract (Art. 6(1)(b) GDPR), legitimate interest in security (Art. 6(1)(f)) | While the account exists; sign-in logs 90 days |
| Links you submit, files you upload, followed channels, settings | Providing the Service | Contract | Audio files: deleted right after transcription. Links and settings: while the account exists |
| Transcripts, summaries, chapters | Showing you the results, e-mail delivery, search in your archive | Contract | Until you delete the item or the account. Encrypted with a key specific to your account |
| Personal data of third parties appearing in the content you process (names, statements of speakers) | Transcription and summarization requested by you | Legitimate interest of you and us in processing publicly available content for personal information purposes (Art. 6(1)(f)); we do not profile these persons or index them across users | As above |
| Usage data: minutes processed, plan, invoices | Billing, limits, accounting | Contract, legal obligation (accounting, 10 years for invoices) | Account lifetime; invoices 10 years |
| Support e-mails | Answering your requests | Legitimate interest, contract | 3 years |
3. Who helps us (processors)
- Hetzner Online GmbH (Germany): servers and database, EU.
- Anthropic (USA): the Claude API generates summaries from transcripts. Data is transferred under the EU-US Data Privacy Framework and standard contractual clauses; Anthropic does not use API inputs or outputs to train models and keeps them only for abuse monitoring for a limited period.
- Speech recognition runs on our own hardware in the Czech Republic (open source Whisper). No audio leaves our infrastructure for transcription.
- Google LLC (e-mail sending via Google Workspace SMTP) and EXON, s.r.o. (Czech Republic, website hosting and DNS).
- Payment providers for paid plans (named at checkout). They receive what is needed to process the payment; we never see your full card number.
We do not sell personal data and do not use advertising trackers.
4. Security
All traffic is encrypted (TLS). Transcripts and summaries are encrypted at rest with AES-256-GCM using a data key specific to your account, which is itself encrypted with a server master key. Deleting your account deletes your data key, which makes your content unreadable even in backups. Access to servers is restricted to authorized staff with key based authentication.
What we cannot promise: end-to-end encryption. Our servers must be able to read your transcripts in order to summarize them and send them to you by e-mail. E-mails you receive are in plain text in your mailbox.
5. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority (in the Czech Republic the Office for Personal Data Protection, www.uoou.cz). You can export every summary and transcript from the app and delete your account in Settings. For anything else write to info@joudigest.com; we answer within 30 days.
If you appear in content processed by one of our users and want to object, contact us with the link in question. We do not publish transcripts and they are visible only to the user who requested them.
6. Cookies
We use only essential cookies (your sign-in session). No analytics or advertising cookies. Details in the Cookie Policy.
7. Changes
We may update this policy. Material changes are announced in the app or by e-mail at least 14 days before they take effect.