Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how NUB Tech ("we", "us", "our") collects, uses, and protects personal data when you use the Talk Assist AI mobile app (the "App") — a live voice interpreter that speaks on your behalf. We aim to comply with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

1. Controller

NUB Tech is the controller responsible for your personal data.
Contact: talkassist@nubtech.org

2. The App

Talk Assist AI is a real-time interpreter. You pick a situation (e.g. hotel, pharmacy, taxi, doctor), add context, and hand over the phone. The App captures speech, translates between your language and the other person's language, and speaks back on your behalf using an AI voice. It shows a live bilingual transcript and produces an end-of-conversation summary.

3. Data we collect

3.1 Account data (when you sign in)

You create an account by signing in with Google or Apple. From the identity provider we receive:

Your name (display name)
Your email address
A stable user identifier (Apple "sub" or Google subject ID)

We do not receive your password, contacts, or other profile data from the identity provider.

3.2 Preferences

Your app (UI) language, and your "I speak" / "talk in" language pair
AI voice preference and speed, theme, noisy-environment setting, and notification preferences

3.3 Conversation data

For each Live session we process and store, against your account:

The text transcript of the conversation (what the other person said and what the AI said on your behalf), in the original and translated languages
The situation you chose and any context/notes you added
The end-of-conversation summary, action items, important info, and any live "heads-up" notices
Metadata such as start/end time, duration, and credits used

3.4 Microphone audio

Audio is used live, not archived. During an active Live session, your microphone audio is streamed in real time to our backend and on to the AI provider (Google Vertex AI / Gemini) purely to interpret the conversation. We do not save the raw audio file persistently — only the resulting text transcript is retained against your account. Audio streaming happens only while a session is active; closing the session ends the stream.

3.5 Credits & purchases

If you buy a credit pack, the purchase is processed by the Apple App Store or Google Play. From RevenueCat (our purchase-management partner) we receive the product purchased and your resulting credit balance. We do not receive your full payment details — only the metadata needed to grant credits.

3.6 Device & diagnostic data

App version, OS version, and device model (sent with API requests for compatibility)
Crash reports and error traces (no personal content of your conversations)
Request timestamps and IP address at the server edge (held briefly for abuse prevention)

4. Legal bases (GDPR Art. 6)

Purpose	Legal basis
Creating and maintaining your account	Art. 6(1)(b) — contract
Providing live interpretation, transcripts, and summaries	Art. 6(1)(b) — contract
Credit purchases and balance management	Art. 6(1)(b) — contract
Security, fraud prevention, abuse detection	Art. 6(1)(f) — legitimate interests
Service improvement (aggregated, non-identifying)	Art. 6(1)(f) — legitimate interests
Compliance with legal obligations (e.g. tax)	Art. 6(1)(c) — legal obligation

5. Third-party processors

We use the following processors strictly to provide the App. Each is bound by a Data Processing Agreement.

Google Cloud / Vertex AI (Gemini). Real-time interpretation, translation, and summary generation. We send the live audio stream and conversation text needed to interpret — not your name or email. Governed by Google Cloud's Data Processing Addendum.
RevenueCat. Credit-purchase management. Receives an opaque user identifier and store transaction metadata. See revenuecat.com/privacy.
Apple App Store / Google Play. Payment processing for credit packs. Governed by Apple's and Google's own privacy terms.
Sign-in providers. Google Sign-In and Sign in with Apple, used only at the moment of authentication.
Hosting. Our backend runs on a reputable cloud provider with industry-standard safeguards.

6. International data transfers

Some processors (notably Google Vertex AI) operate in regions outside the EU, including the United States. Where personal data is transferred outside your region, we rely on the European Commission's Standard Contractual Clauses and equivalent safeguards to maintain an adequate level of protection.

7. Retention

Account data: kept while your account is active. When you delete your account it is deactivated immediately and all your personal data is permanently erased within 30 days.
Conversations, transcripts & summaries: kept so you can review your history. Deleting a single conversation removes it permanently; deleting your account erases all of them (within the 30-day window above).
Raw microphone audio: not stored persistently (see §3.4).
Billing records: may be retained for up to 10 years where required by tax law.
Server logs: rotated and deleted within 90 days.

8. Your rights under GDPR

Access (Art. 15) — request a copy of your personal data.
Rectification (Art. 16) — correct inaccurate data.
Erasure (Art. 17) — delete your account and personal data.
Restriction (Art. 18) — limit processing while a dispute is resolved.
Data portability (Art. 20) — receive your data in a machine-readable format.
Objection (Art. 21) — object to processing based on legitimate interests.
Complaint (Art. 77) — lodge a complaint with your local supervisory authority.

How to exercise these. You can carry out erasure yourself in the app at any time (see §9). For access, rectification, restriction, data portability, or objection, email us at talkassist@nubtech.org from your account address — we will action your request within 30 days. Some profile details (your app and conversation languages, voice, and theme) can also be changed directly in Profile; your name and email come from Google or Apple and are managed there.

9. Deleting your data

You're in control. Delete a single conversation any time from the History page — it is permanently removed. To delete your whole account, go to Profile → Delete account: your account is deactivated immediately, and all associated personal data (profile, language preferences, conversations, transcripts, summaries, credit balance) is permanently erased within 30 days. The short window is a safety net against accidental deletion. Credit purchases are processed by Apple / Google; billing records held by the stores may be retained for tax reasons (see §7). If you cannot access the in-app option, email talkassist@nubtech.org from your account email and we will delete your data on your behalf.

10. A note about the other person

Talk Assist AI interprets a two-way conversation, so the transcript naturally includes what the other person says. Use the App responsibly and in line with local laws on recording or transcribing conversations. For everyone's safety, do not share passwords, PINs, card numbers, or other secrets during a session — the App reminds you of this before each conversation.

11. Children

Talk Assist AI is intended for adults. We do not knowingly collect data from children under 13. If you believe a child has signed up, contact talkassist@nubtech.org and we will delete the account.

12. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hardened server configuration, and restricted, need-to-know access. No system is perfectly secure; in the event of a personal-data breach affecting you, we will notify you and the competent authority as required by law.

13. Cookies and web pages

The App does not use cookies. Our web pages use only technically necessary storage. We do not run advertising cookies or third-party tracking.

14. Changes to this policy

We may update this Privacy Policy as the App evolves or as the law changes. Material changes will be announced inside the App or by email. The "Last updated" date above indicates the latest revision.

15. Contact

Questions, or to exercise any of your rights: talkassist@nubtech.org. We will respond within 30 days.