Legal

Privacy policy

Last updated: 4 October 2026

1. Who is responsible

The controller of personal data processed in connection with SafeAudio Studio (https://safeaudio.app) is [YOUR FULL NAME OR COMPANY NAME], [STREET AND NUMBER, POSTCODE CITY, COUNTRY], e-mail: [CONTACT EMAIL].

2. In short

• The recordings you process never leave your device. We cannot hear them, see them or store them.
• We use no cookies, no analytics and no advertising profiles.
• You do not need an account and we do not ask for your name or e-mail.
• The optional transcription function downloads a speech-recognition model from third-party servers (see section 7). Your audio is still not transmitted.

3. Your recordings

All noise removal, voice enhancement, transcription and format conversion is performed by your own web browser (JavaScript and WebAssembly) in your device's memory. Audio and video files, microphone recordings, transcripts and the files you download are not sent to us or to anyone else and are not stored by us. When you close the page they are removed from memory.

4. Microphone

The recording function asks your browser for permission to use the microphone. The recording is captured and kept only on your device. You can revoke the permission at any time in your browser settings. We have no access to your microphone or recordings.

5. Data stored only on your device

To remember your choices, the site saves in your browser's local storage: your enhancement settings, light/dark theme, chosen language and the transcription language and model you selected. The browser's cache may additionally keep the program files and, if you use transcription, the speech-model files, so the site also works offline. This data never leaves your device and we have no access to it. Storing it is strictly necessary to provide functions you explicitly use, so no consent is required (Art. 5(3) of the ePrivacy Directive and corresponding national law). You can delete it at any time in your browser settings (site data).

6. Server logs

When you open the website, our hosting provider (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — Cloudflare Pages) automatically processes technical data needed to deliver it: IP address, date and time, requested address, browser type and the referring page. Purpose: delivering the website and protecting it against attacks. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). The hosting provider processes the data on our behalf and keeps logs only for a short period unless needed to investigate an attack. The hosting provider is based in the USA; data is transferred on the basis of the EU–US Data Privacy Framework and standard contractual clauses.

7. Program files and the optional speech-recognition model

The noise-removal engine, the AI model, fonts and all other program files are delivered from our own server.

If you start a transcription (button "Transcribe"), your browser additionally downloads, once, the speech-recognition model (Whisper, about 77–250 MB depending on the chosen size) from Hugging Face (Hugging Face, Inc., 20 Jay Street, Brooklyn, NY 11201, USA) and a runtime component from the jsDelivr content delivery network. In doing so your IP address and basic browser information are transmitted to those providers, who may process them outside the European Economic Area (e.g. in the USA, on the basis of the EU–US Data Privacy Framework or standard contractual clauses). Your audio and the resulting transcript are never transmitted; the model runs inside your browser. The downloaded files are cached by your browser for later offline use. Legal basis: performance of the function you requested (Art. 6(1)(b) GDPR) and our legitimate interest in providing it efficiently (Art. 6(1)(f) GDPR). If you do not use transcription, no third-party server is contacted.

8. Links to other websites

The site may contain links to other websites, including partner offers (affiliate links) and a donation page. We receive no personal data when you click them. After you leave our site, the privacy policy of the other website applies; a partner may use cookies there to record that you came from us so that we can receive a commission.

9. Contact by e-mail

If you write to us, we process your e-mail address and the content of your message to answer you (Art. 6(1)(f) GDPR), until the matter is resolved and then for the limitation period of possible claims.

10. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, data portability and to object to processing based on our legitimate interest. You also have the right to lodge a complaint with a supervisory authority, in Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the authority in your country of residence. Please note that we usually cannot identify you, because we do not store data that would allow it.

11. Other information

We do not sell data, we do not use automated decision-making or profiling and we do not require you to provide any data. We may update this policy when the service changes; the date of the latest version is shown at the top.