Capture Privacy Policy

Effective date: June 29, 2026

This Privacy Policy explains how personal data is collected, used, stored, and shared when you use the Capture mobile application, its related services, and the Capture pages on subsword.com (together, the "Service").

Capture is operated by Iuliia Kamaldinova, an individual based in Cyprus ("Capture," "we," "us," or "our"). For data protection purposes, Iuliia Kamaldinova is the controller of personal data processed through the Service.

Contact details:

Iuliia Kamaldinova
Lysis 14, apt. 201
2044 Strovolos, Cyprus
[email protected]

1. Data We Collect

Account data

You may use Capture with an anonymous account or sign in using Apple or Google. Depending on the method you choose, we may receive and store:

If you use Sign in with Apple and choose Hide My Email, we receive the relay email address provided by Apple rather than your personal email address.

Content you provide

Capture processes and stores content you create or send to the Service, including:

Please do not record another person or submit another person's confidential or personal information unless you have a lawful right to do so.

Subscription and usage data

If you purchase Capture Pro, we receive subscription information needed to provide access, such as product identifier, entitlement status, purchase and expiration status, and a service-specific user identifier. Payments are processed by Apple. We do not receive or store your full payment card details.

We also keep counts and timestamps needed to apply plan limits, prevent duplicate processing, and protect the Service from abuse. This includes the number and duration of voice captures used during daily and monthly periods.

Device and diagnostic data

The Service and its providers may process technical information such as:

We currently do not use advertising SDKs, cross-app tracking, or third-party analytics for behavioral advertising.

Microphone access

Capture requests microphone access so that you can create voice captures. Recording starts only after you initiate a recording. You can revoke microphone permission in your device settings, but voice capture will then be unavailable.

2. How We Use Data

We use personal data to:

We do not sell personal data. We do not currently share personal data for cross-context behavioral advertising or use Capture content for our own advertising.

Where the EU General Data Protection Regulation, UK GDPR, or similar law applies, we rely on the following legal bases:

4. Voice and AI Processing

When you submit a voice capture:

  1. the recording is uploaded to our cloud storage;
  2. the audio is sent to OpenAI's API for transcription; and
  3. the transcript, relevant custom dictionary terms, existing project names, and the current date may be sent to OpenAI to create a concise task title and identify a due date or existing project.

We use OpenAI's API under settings that do not opt in to using API inputs or outputs to train OpenAI models. OpenAI may retain API inputs, outputs, and related abuse-monitoring data for up to 30 days, unless a longer period is required by law or applicable provider rules.

AI processing can make mistakes. You should review generated task titles, dates, projects, and transcripts when accuracy is important.

5. Service Providers and Disclosures

We disclose data only as needed to operate the Service or where required by law. Current providers include:

These providers process information under their own terms and privacy documentation and may also process limited data as independent controllers for security, legal compliance, billing, or fraud prevention.

We may also disclose information:

6. International Data Transfers

We are based in Cyprus, while some providers operate in the United States and other countries. Data may therefore be processed outside your country of residence. Where required, we rely on recognized transfer mechanisms such as adequacy decisions, the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses, together with additional safeguards where appropriate.

7. Retention and Deletion

We currently retain tasks, projects, settings, recordings, transcripts, and related account content while your account remains active, unless you delete your account or we are required to delete or retain data earlier.

Deleting an individual task removes it from active views. Its underlying task record, recording, transcript, or related notes may remain until the account is deleted or a server-side cleanup process removes them.

When you use Delete Account in Capture, deletion from our active Firebase account, database, and file-storage systems is initiated immediately. Limited information may remain temporarily in provider backups, security logs, or fraud-prevention systems until it is overwritten or deleted under the provider's normal retention cycle.

Additional retention periods include:

We may retain de-identified or aggregated information that can no longer reasonably identify you.

8. Your Choices and Rights

Depending on where you live, you may have the right to:

You can edit many task and account details directly in Capture. You can delete your account from the app's Settings screen. Capture does not currently provide a self-service data export. To exercise another right, email [email protected]. We may need to verify your identity before completing a request.

If you are in the EEA, you may complain to your local supervisory authority or the Office of the Commissioner for Personal Data Protection in Cyprus: dataprotection.gov.cy.

Residents of jurisdictions including California may also have rights to know, delete, or correct personal information and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.

9. Security

We use reasonable administrative and technical measures intended to protect personal data, including authenticated access, access-control rules, encrypted network transport, provider security controls, and device attestation. However, no internet or storage system can be guaranteed completely secure.

Keep access to your device and sign-in account secure. If you believe your account or data has been compromised, contact us promptly.

10. Children

Capture is not directed to children under 14. You must be at least 14 years old, or the higher minimum age required to use an online service in your country without parental consent. If parental or guardian consent is required under local law, you may use the Service only with that consent.

If we learn that we collected personal data from a child contrary to applicable law, we will take reasonable steps to delete it. A parent or guardian may contact us at [email protected].

The Service may contain links to third-party websites or content. Their privacy practices are governed by their own policies, not this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy as the Service or applicable law changes. We will update the effective date and provide additional notice in the app or by other appropriate means when a change is material.

13. Contact

For privacy questions, rights requests, or complaints, contact:

Iuliia Kamaldinova
Lysis 14, apt. 201
2044 Strovolos, Cyprus
[email protected]