Privacy Policy

Last updated: January 7, 2025

Kuratd ("the App") is a native application for macOS and iOS that helps users transcribe, analyze, and transform podcast content into actionable intelligence. This privacy policy explains how the App handles your data across both platforms.

Platform Differences

Kuratd is available on two platforms with different data handling approaches:

• macOS: No account required, all data stored locally, no email collection
• iOS: Account required (Supabase), local + cloud sync, email collected for authentication

Data Collection

macOS Application

The macOS version of Kuratd is a fully local application that:

• Stores all data on your Mac in ~/Library/Application Support/Kuratd/
• Does not require user accounts or sign-in
• Does not transmit personal information to our servers
• Does not share data with third parties (except as described below for AI services)

iOS Application

The iOS version requires a user account and collects:

• Email Address: For account authentication (stored in Supabase)
• User ID: For account identification (stored in Supabase)
• Subscription Status: For access management (stored in Supabase)
• Usage Statistics: For feature analytics and credit tracking (stored in Supabase)
• Search History: Stored locally on device only

Payment Processing

Apple In-App Purchase (iOS)

If you subscribe through the iOS app:

• Payment processor: Apple Inc.
• Data we receive: Subscription status, expiration date, transaction ID
• We do NOT receive: Your payment card details, billing address

Stripe (Web Subscriptions)

If you subscribe through our website:

• Payment processor: Stripe, Inc.
• Data we receive: Subscription status, customer ID, expiration date
• We do NOT receive: Your full payment card number

We do not store complete payment card numbers, CVVs, or bank account details.

Third-Party Services

Supabase (iOS Only)

• Purpose: User authentication, profile storage, subscription management
• Data Sent: Email address, user ID, usage statistics, subscription information
• Data Center: AWS (United States)

OpenAI API (Required)

• Purpose: AI-powered summarization and content analysis
• Data Sent: Podcast transcripts (text only, not audio)
• macOS: You provide your own OpenAI API key
• iOS: Processing through our secure proxy (included in subscription)

Important: Transcripts are sent to OpenAI servers for processing. Audio is never transmitted.

HuggingFace (macOS Only)

• Purpose: Download WhisperKit transcription models
• Data Sent: HTTP requests to download model files

Podcast RSS Feeds

• Purpose: Fetch podcast episodes and metadata
• Your Control: You choose which feeds to subscribe to
• Note: Podcast providers may log your IP address

Data Processing

Transcription

• Official Transcripts: When available, downloaded directly from podcast RSS feeds
• WhisperKit (macOS): Audio transcribed locally on your device using Apple's CoreML. No audio leaves your Mac.
• iOS: Transcription performed on-device where possible

AI Summarization

• Transcripts (text only, not audio) are sent to OpenAI API for analysis
• Processing follows OpenAI's data usage policies

Data Retention

macOS

• All data remains on your device until you delete it
• Transcripts and summaries cached indefinitely for offline access
• Delete individual episodes or uninstall the app to remove all data

iOS

• Cloud data (Supabase) retained while your account is active
• Local data remains on device until app is uninstalled
• Subscription data retained for 2 years after cancellation for billing records
• You may request account deletion at any time

Your Rights

You have full control over your data:

• Access: Request a copy of your personal data
• Export: Use built-in export features
• Delete: Remove app data via settings or delete your account
• Portability: Export in open formats (SQLite, JSON)

Account Deletion (iOS)

To delete your iOS account and all associated data:

1. Go to Settings within the app
2. Select Delete Account
3. Or email tyron@indiestudio.ai with your account email

Deletion is completed within 30 days.

Data Security

• macOS: API keys stored in macOS Keychain (hardware-protected)
• iOS: Authentication handled by Supabase with industry-standard encryption
• Transit: All network communications use HTTPS/TLS encryption
• Payments: Handled by Apple and Stripe (PCI-DSS compliant)
• No Tracking: We do not use advertising identifiers (IDFA) or share data with advertisers

Children's Privacy

Kuratd does not knowingly collect information from children under 13. The app is designed for adult professional use.

International Data Transfers

If you are located outside the United States:

• Supabase data is stored in AWS data centers in the United States
• OpenAI processing occurs in the United States
• Stripe processing may occur in the United States or your local region

By using Kuratd, you consent to the transfer of your data to the United States.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the "Last updated" date at the top of this document. For significant changes affecting data collection, we will notify iOS users through the app or via email.

Contact Us

For questions, concerns, or data requests regarding this privacy policy:

• Email: tyron@indiestudio.ai
• Website: kuratd.com/support