Privacy Policy

Last updated: 2026-10-24

This Privacy Policy explains how AQLO LABS LLC (“we”, “AQLO”), operator of the AQLO application (the “App”), processes the personal data of people who use the App (“you”). AQLO is an AI application that accompanies your work and personal conversations, provides real-time guidance, and turns meetings into a personal memory.

1. Data We Process

• Account data: your email address, your sign-in identities (email, Google or Apple) and your password (stored only as a salted hash, never in readable form). You can sign in with email and password (confirmed by a verification code sent to your email), with Google Sign-In or with Sign in with Apple; Google and Apple share your name and email address with us only if you choose to sign in with them.
• Your name: optional; you can enter it in the App, or it may come from your Google or Apple account.
• Conversation audio: the audio of conversations you record is streamed for live transcription only. We do not retain audio files, and the audio is not stored by us or by our speech-to-text provider.
• Transcripts: the text of your conversations, with speaker labels and the names you assign, saved to your account.
• AI-generated content: reports and their history, coach notes (the suggestions shown during a conversation), contact profiles and briefings, your communication profile, and your memory-chat messages (your questions and the answers).
• Contacts you add: name, company, role and notes about people you add yourself. We never access your phone's address book.
• Custom expert modes you create, and your scheduled meetings and reminders.
• Plan and usage data: your plan, your monthly usage counters (conversation minutes, memory-chat messages, reports) and purchase events (product, store and date). We never receive your card or bank details; payments are handled by Apple and Google.
• AI usage metering: token counts and cost per AI request, without any content.
• Voice recognition diagnostics (only if you turned on the optional summary): numbers and speaker labels; no audio, text or voiceprint (see Section 6).
• Content reports: if you flag an AI suggestion, report or chat answer as wrong or offensive, we store the flagged text (up to 1,000 characters), the reason you chose and the time, so we can review it and improve the service.
• Technical server logs that contain no conversation content, used to keep the service running and to fix errors. The App contains no crash-reporting or analytics SDKs.

Your voiceprint (see Section 6) never leaves your device. Lock-screen coaching notifications are created locally on your device from the coach notes above; we do not send push notifications.

2. How We Use Data

We process your data to provide live coaching, generate transcripts and reports, build your personal memory, send you the emails needed to sign in or reset your password, apply your plan's allowances, and operate, secure and improve the service. We do not sell your personal data, we do not use it for advertising, and we do not use it to train AI models.

3. Legal Bases (EU/UK GDPR)

• Performance of a contract: to provide the App, its features and your subscription to you.
• Explicit consent: for processing conversation content that may include special categories of data (such as health information), for voice recognition (Section 6) and, where required, for transferring data outside your country. You give these consents in the App (before your first recording, and when setting up voice recognition) and may withdraw them at any time.
• Legitimate interests: to keep the service secure, to fix errors and to meter usage.

4. AI and Third-Party Processors

To operate the App, your data is processed by trusted service providers under data processing agreements. They process your data only to deliver the service to you:

• Speech-to-text: AssemblyAI (processed in its U.S. or EU data center closest to you). Conversation audio is streamed for live transcription. AssemblyAI keeps no audio or transcripts from live streaming, and our account is excluded from model training.
• AI coaching, reports, memory chat, briefings and profiles: Anthropic (United States). Inputs and outputs are deleted within 30 days and are not used to train models. When a question is asked in the conversation — by the other party or by you (including when you ask the coach directly with the spoken “cevap ver” command or its equivalent in your language, such as “answer that”) — and answering it needs a public, current fact about the outside world (for example a current price or exchange rate, or who holds a public role), the coach may run a web search through Anthropic’s search tool (search provider: Brave Search, United States). The query is built only from public names (such as public organizations, public office holders, public figures, places, products or currencies) relevant to the question; your name, your contacts’ names, other personal details, your own business details and account data are not included.
• Earphone voice for coaching tips (optional): ElevenLabs (United States). Receives only the short tip text to be read aloud; it may retain those texts and the generated audio in our account history.
• Hosting, database and authentication: Supabase. The database, authentication and storage are located in the European Union (Ireland); server functions run in the region closest to you. Data is encrypted at rest (AES-256) and in transit (TLS). Supabase stores the IP address of your active sign-in sessions until the session ends.
• Transactional email (sign-up and password codes): Resend (United States). Resend keeps the email content and delivery logs for 30 days.
• Purchases: subscriptions and add-on packs are purchased through the Apple App Store or Google Play under their terms. Purchase management: RevenueCat (United States), which receives your account identifier, your purchase history and your device/OS information. We never receive your card details.

5. International Data Transfers

Your account data, transcripts and AI-generated content are stored in the European Union (Ireland). Our AI, voice, email and purchase providers process data in the United States; speech-to-text is processed in the U.S. or the EU, whichever is closest to you. Where the law requires it (for example under the EU/UK GDPR or Turkey’s KVKK), transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or your explicit consent.

6. Sensitive Information

Conversations you record may contain sensitive information (for example about health or legal matters). We process such information only to provide the service to you, based on your explicit consent. If you do not want certain information processed, do not record that part of the conversation.

Voice recognition (optional): If you choose to set up your voice, a voiceprint (biometric data) is created from a ~15-second reading. The voiceprint is stored encrypted ONLY on your device; it is never sent to our servers or service providers and is excluded from backups. The setup recording itself is not kept. During conversations, speakers' voices are compared with your voiceprint on your device, in the moment, only to find which speaker is you; no voiceprint of other people is stored, recorded or shared. This processing is based on your explicit consent, which you can withdraw at any time via Settings > Voice recognition > Delete my voiceprint. The voiceprint is also deleted from your device when you sign out or delete your account. If you turn on the optional diagnostic summary (a separate box when you set up your voice, or Settings > Voice recognition > Send diagnostic summary), a diagnostic summary is saved to our servers at the end of each conversation (and again each time you mark yourself with 👤 on a finished conversation's screen) to improve automatic recognition. It contains only numbers and speaker labels (such as “A”), is stored linked to your account and the conversation, and includes your platform (iOS/Android) and app version. For example: the conversation length, how long each speaker label spoke and how many speech segments it had, similarity scores against your voiceprint and between the labels, which label was picked automatically and when, the number of automatic corrections, and how many times, when and which label you marked yourself with 👤. It contains no audio, text or voiceprint, and neither audio nor a voiceprint can be recreated from these numbers. It is not needed for voice recognition to work and is based on your separate explicit consent. The summaries are deleted when you turn the summary off, delete your voiceprint in Settings, or delete the conversation or your account.

7. Recording Laws and Consent of Other Parties (IMPORTANT)

Before recording a conversation, it is YOUR responsibility to inform everyone taking part and to obtain any required consent. Many jurisdictions require the consent of all parties, including the EU/UK, Turkey and several U.S. states (e.g., California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington). AQLO is not liable for unlawful recordings made by users.

8. Retention and Security

Data is encrypted in transit (TLS) and at rest (AES-256). A voiceprint (biometric data) is stored encrypted only on your device, processed with your explicit consent, and can be deleted by you (see Section 6). We retain your data while your account is active. When you delete your account, your database records and our customer record at RevenueCat are deleted from our live systems right away; copies in encrypted backups kept for disaster recovery expire automatically within 30 days. Technical server logs expire within 30 days. Data already processed by our providers is deleted under their own policies described in Section 4. Purchase records held by Apple or Google are governed by their policies. You can also delete individual conversations, contacts, chats and custom modes at any time inside the App without deleting your account.

9. Your Rights — EU/UK (GDPR) and Turkey (KVKK)

You have the right to access, correct and permanently delete your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time (this does not affect processing carried out before withdrawal). You can permanently delete your account and all your data via Settings > Delete Account in the App or, without the App, by following the steps at https://aqlo.ai/delete-account/ (which also explains how to request deletion by email). For any other request, contact us at info@aqlo.ai and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in Turkey, the Personal Data Protection Board).

10. Your Rights — United States

Depending on your state of residence (for example California under the CCPA/CPRA), you may have the right to know what personal information we collect, to access, correct and delete it, and to opt out of its sale or sharing. We do not sell or share your personal information, and we do not use it for targeted advertising. We will not discriminate against you for exercising your rights. To make a request, use Settings > Delete Account, the page at https://aqlo.ai/delete-account/ or email info@aqlo.ai at any time.

11. Children

The App is not intended for anyone under 18.

12. Changes

We may update this policy from time to time. We will notify you of material changes through the App; the date at the top shows the current version.

13. Contact

Data controller: AQLO LABS LLC, 35 E Price St, Linden, NJ 07036, USA.

Questions: info@aqlo.ai

Support page: https://aqlo.ai/support/