Privacy Policy

1. What we collect

We collect the minimum needed to run the Service.

Account data — your email address, and optionally your name and how you heard about Quilin.

Billing data — when you subscribe through quilin.ai, our payment processor handles your card and sends us transaction metadata (the amount, the plan, the country, an order ID). We never see or store your full payment card number. Mac App Store purchases are handled entirely by Apple.

Device telemetry — anonymous app-event data (which features you used, error reports, model selections) so we can fix bugs and prioritize improvements.

Audio and transcripts — only when you opt in to cloud features. If you use a cloud transcription option or a paid cloud AI Action, your audio or text is sent to the relevant service provider for processing. The result comes back to your Mac and we do not retain the source content on our servers beyond what is needed to complete the request.

2. What we don't collect

When you use Quilin's local-only modes — local transcription models, local AI providers — your audio and transcripts never leave your Mac. We see no content, no metadata, no fact that the operation happened. This is the default for everything except features that are explicitly labeled as cloud features.

3. How we use your data

We use the data we collect to provide and maintain the Service, process payments and prevent fraud, send you transactional emails (receipts, password resets, account notices), improve the product by analyzing aggregated telemetry, and comply with legal obligations.

We do not sell your personal data. We do not use your audio or transcripts to train AI models, ours or anyone else's.

4. Processors we rely on

We rely on a small set of external service providers to operate the Service. We disclose the categories of processors here, rather than naming each vendor, so this page does not become a roadmap for someone targeting our supply chain. Each processor receives only the data it needs for its specific role, under a written data-processing agreement.

The categories of processors we use are:

Payment processors — for billing, tax compliance, and fraud prevention. We never see your full payment card number.

Cloud infrastructure providers — for hosting the website, the APIs, and the database that holds your account record.

Product analytics providers — for anonymous telemetry on which features get used and where errors occur.

AI inference providers — only when you trigger a paid cloud AI Action; we send the text input needed for the request and receive the result.

Cloud transcription providers — only when you opt in to cloud transcription and supply your own API key; in that case Quilin makes the request directly from your Mac to the provider and we do not act as an intermediary.

Our processors are based in the European Union and the United States. We configure them to keep your data in the European Union where the vendor supports it. If you need a specific, named list of our current processors — for example, to satisfy your employer's vendor-review requirements — email support@quilin.ai and we will send the current list along with each one's data-processing agreement.

5. International data transfers

Some of our processors are based in the United States. When your personal data is transferred outside the European Union, we rely on Standard Contractual Clauses or equivalent safeguards published by the vendor.

6. How long we keep your data

We keep account data for as long as your account is active. If you delete your account, we remove your account record within 30 days, and routine backups containing it are purged within 90 days. Anonymous telemetry retention follows our analytics provider's defaults (currently 12 months). Billing records are retained for as long as tax law requires (typically 7 years).

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, delete your account and the data tied to it, export your data in a portable format, opt out of product analytics, and object to or restrict certain processing.

To exercise any of these, email support@quilin.ai from the address on your account. We aim to respond within 30 days. If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority. If you are in California, the California Consumer Privacy Act gives you specific rights including the right to know what we collect, the right to delete, and the right to opt out of any sale of personal information — we do not sell personal information, but the right is yours regardless.

8. Cookies

The quilin.ai website uses cookies that are strictly necessary for the site to function (for example, your locale preference, a session marker) and an analytics cookie that records anonymous product usage. We do not use cookies for cross-site advertising. Your browser settings let you block cookies; doing so may prevent the site from working correctly.

9. Children's privacy

The Service is not intended for users under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, email support@quilin.ai and we will remove it.

10. Security

We protect your data in transit using TLS. Data at rest is encrypted by the underlying providers that store it. We restrict employee access to production systems to those who need it. No security control is perfect, and you use the Service at your own risk.

11. Changes to this policy

We may update this policy as the product changes. When we make material changes — adding a new category of data we collect, or adding a processor with materially different scope — we will notify you by email or through the app before the change takes effect.

12. Contact

Privacy questions go to support@quilin.ai. Quilin is operated by FLASH KICK IN CONSULTING INC.