Privacy Policy

1. In short

APPRO analyses conversations you record or upload and gives you a written reflection on the communication patterns in them. To do that, we send your audio and its transcript to third-party AI providers, and our AI estimates the emotional tone of each speaker's voice.

APPRO is an AI reflection tool. It is not health care, not therapy, and not a substitute for a qualified professional. See our Terms of Service.

2. What we collect

Account data

• Name and email address — supplied by you, or by Google or Apple if you sign in with them.
• Sign-in identifiers — your Google account ID, Apple user ID, or our own account ID and a hashed password. We never store your password itself.
• Profile picture URL, if you sign in with Google.
• If you use Apple's "Hide My Email", we only ever see the relay address Apple gives us.

Conversation data

• Audio recordings you record in the app or upload.
• Transcripts — the words spoken, split by speaker, produced by AI transcription.
• AI-inferred vocal tone and emotion labels. For each segment of speech our AI estimates the dominant emotional tone (for example calm, frustrated, defensive, affectionate) and how strongly it came across, based on how something was said — pitch, pace, intensity — not only the words.
• Statistics derived from those labels — tone distribution, emotional intensity, speaking pace per emotional state, response timing, escalation and repair moments.
• Your analysis reports and growth plans, generated from all of the above.
• Names you assign to speakers, if you choose to label who is who.
• Session notes you write yourself.

Payment data

• Purchase records — which analyses you unlocked, when, and the payment reference. Card details are handled entirely by Stripe or Apple; we never see or store them.

Technical data

• Usage and diagnostic logs — sign-ins, uploads, errors, along with IP address, browser or device type, and the page or endpoint requested. We use these to keep the service working and to investigate abuse.

3. Who processes your data

We do not sell your data and we do not use it for advertising. We do send it to the following providers, because the service cannot function otherwise:

• Google (Gemini) — receives your audio file to produce the transcript and the vocal-tone/emotion labels.
• OpenAI — receives the transcript and tone data (not the audio) to generate your analysis report and growth plan.
• ElevenLabs — receives audio for transcription only, on sessions processed through our earlier transcription path. No emotion inference happens there.
• Stripe — processes card payments on the web.
• Apple — processes in-app purchases, and handles Sign in with Apple.
• Google Sign-In — used for authentication if you choose it.

These providers process your data on our instruction, under their own terms and security commitments. Processing may take place outside Norway and the EEA, including in the United States. We rely on the providers' standard contractual clauses and equivalent safeguards for those transfers.

We may also disclose data where the law requires it, or where it is necessary to establish or defend a legal claim.

4. How long we keep it

• Audio recordings: deleted from our servers automatically as soon as the analysis for that recording completes successfully. If an analysis fails or is never started, the audio stays until you delete the session or your account.
• Transcripts, tone/emotion data and reports: kept until you delete the session or your account. There is no automatic expiry — they remain available to you, so they remain stored.
• Account data: kept while your account exists.
• Payment records: kept as long as accounting and tax law requires, even after account deletion.
• Technical and security logs: kept for a limited period for troubleshooting and abuse investigation. These may reference your account ID and IP address after the account itself is gone.

5. Deleting your data

Deleting a single session

Deleting a session from your dashboard removes its database record — the transcript, the tone and emotion data, the analysis report and the growth plan — and deletes the audio file if it is still on the server. This cannot be undone.

Deleting your account

Deleting your account removes your account record and, with it, every session you own: all audio files, transcripts, tone data, reports, growth plans, saved speaker names, and your purchase and credit history. This is immediate and cannot be undone.

Two things survive account deletion, and we would rather say so plainly: payment records we are legally required to retain, and technical or security log entries, which may still reference your former account ID and IP address until they age out.

6. Sensitive data and your legal basis

Inferring emotional state from a person's voice produces sensitive personal data under the GDPR. We treat it accordingly.

• Our legal basis is your explicit consent, given when you create an account and again each time you choose to submit a recording for analysis. Nothing is analysed unless you ask for it.
• You can withdraw consent at any time by deleting the session or your account. Withdrawal does not affect processing that already happened.
• We do not use your conversations to train AI models, and we do not share them with anyone other than the processors listed above.
• No human at APPRO reads your conversations as a matter of routine. We may access specific data only where it is strictly necessary to investigate a fault you have reported to us, or a serious abuse of the service.

Under the GDPR you have the right to access your data, correct it, delete it, export it, restrict or object to processing, and to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

7. Recording other people

When you upload a recording, you are telling us you have the right to do so. Specifically, you confirm that:

• You have obtained the agreement of everyone whose voice is in the recording, before recording and before uploading.
• They understand that an AI will transcribe what they said and estimate their emotional tone, and that a report about the conversation will be produced.
• Recording the conversation was lawful where you are. Rules on recording conversations differ between countries, and secret recording of others may be unlawful.

APPRO analyses a recording only because you asked us to. We have no way to verify that the other participants agreed, so that responsibility rests with you. If you are the other participant in a recording someone else uploaded and you want it removed, contact us through our support page.

8. Security

• Traffic between your device and our servers is encrypted with HTTPS/TLS.
• Passwords are stored only as strong one-way hashes.
• Access to production data is limited to what is needed to operate the service.
• Audio files are removed as soon as they are no longer needed, which is the strongest protection we can offer for the most sensitive item we hold.

No online service can promise perfect security, and we do not.

9. Children

APPRO is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

10. Changes to this policy

If we change this policy materially, we will update the date below and ask you to review and accept the new version the next time you sign in.

11. Contact