Privacy Policy
Last updated: 30 January 2026
1. Data Controller
My Whisper is operated by Abiola Fatunla. For any privacy-related questions, you can reach us at me@abiolafatunla.com.
2. Information We Collect
We collect and process the following information:
Account Information
- Google account email address
- Display name
- Profile picture URL
Audio Recordings
- Voice recordings you create
- AI-generated transcriptions of your recordings
- Edits you make to transcriptions
Usage Data
- Correction patterns (to personalise future transcriptions)
- Timestamps of recordings
Anonymous Users
If you use My Whisper without signing in, we generate a random identifier stored in your browser. This allows you to access your recordings on the same device without creating an account.
3. How We Use Your Data
We use your information to:
- Provide voice transcription services
- Store and display your recording history
- Learn from your corrections to improve future transcription accuracy (personalisation)
- Enable sharing recordings with others
- Authenticate your identity when you sign in
4. Legal Basis for Processing (GDPR)
We process your data under the following legal bases:
- Contract: Processing is necessary to provide the transcription service you requested
- Consent: You consent to data processing when you record audio or sign in with Google
- Legitimate interests: Improving transcription accuracy through learned corrections
5. Third-Party Services
We use the following third-party services to operate My Whisper:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication | Account info, transcriptions, corrections |
| Google Cloud (OAuth) | User authentication | Email, name, profile picture |
| OpenAI (Whisper API) | Audio transcription | Audio recordings |
| Amazon Web Services | Audio storage, API hosting | Audio files |
| Vercel | Website hosting | Standard web logs |
Each service has its own privacy policy. We encourage you to review them:
6. Data Retention
- Audio recordings: Automatically deleted after 90 days
- Transcriptions: Retained until you delete them or your account
- Correction patterns: Retained to personalise your transcriptions
- Account data: Retained until you request deletion
7. Data Security
We implement appropriate security measures to protect your data:
- All data transmitted over HTTPS
- Audio files stored in encrypted S3 buckets
- Database access protected by Row Level Security
- Authentication handled by Supabase with industry-standard protocols
8. Your Rights (GDPR)
If you are in the European Economic Area, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Restriction: Request we limit processing of your data
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time
To exercise these rights, contact us at me@abiolafatunla.com.
9. International Data Transfers
Your data may be processed in countries outside your residence, including the United States (for OpenAI and AWS services) and the European Union (for Supabase). We ensure appropriate safeguards are in place for any international transfers.
10. Children's Privacy
My Whisper is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for removal.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact
For questions about this Privacy Policy or our data practices, contact:
Abiola Fatunla
Email: me@abiolafatunla.com