Privacy Policy
Last Updated: March 2026
1. Data We Collect
We collect the minimum data necessary to provide and improve the Service:
(a) Account Data: Your email address, obtained through Google or Apple Sign-In, used solely for authentication
(b) Voice Recordings: Audio captured when you use voice input. Recordings are transmitted to our cloud servers for transcription processing and may be retained for service delivery
(c) Transcribed Text and AI-Processed Content: Text generated from your voice recordings and any AI-refined text are stored on our cloud servers (Google Firebase)
(d) Subscription Data: Managed by Apple; we receive only confirmation of your subscription status
(e) Anonymous Usage Analytics: We collect anonymized usage statistics (e.g., feature usage frequency, crash reports) through PostHog. No personal content is included
2. How Your Data Flows
To help you understand how your information moves through our system:
(a) Voice Input: When you record voice input, the audio is transmitted to Google Cloud for speech-to-text transcription. The resulting text is stored on Google Firebase
(b) AI Text Refinement: When you use AI text improvement features, your text is sent to Google Cloud for processing. The refined result is stored on Google Firebase
(c) Cloud Storage: Your recordings, transcriptions, and AI-processed content are stored on Google Firebase servers. Data is encrypted both in transit (TLS) and at rest
(d) On-Device Processing: Certain features may use on-device models (e.g., WhisperKit for transcription, on-device LLM for text refinement) to process data locally when available. Even when on-device processing is used, results may be synced to our cloud servers
(e) Analytics: Anonymous, non-personal usage data is sent to PostHog for service improvement. No voice recordings, text content, or AI results are included in analytics data
3. How We Use Your Data
We use your data to:
(a) Provide voice-to-text transcription and AI text improvement services
(b) Process your voice recordings and text content through Google Cloud to deliver transcription and AI refinement services
(c) Store your content on Google Firebase to enable cross-device access and data persistence
(d) Improve service quality and user experience through anonymous analytics
(e) Perform technical maintenance and troubleshooting
(f) Send service-related notifications
4. Cloud Storage
Your content is stored on Google Firebase cloud servers as part of the core service:
(a) Voice recordings, transcribed text, and AI-processed content are transmitted to and stored on Google Firebase servers
(b) All cloud data is encrypted in transit (TLS) and at rest
(c) We do not guarantee the permanent availability, integrity, or security of cloud-stored data. You are responsible for maintaining your own backups
(d) You can request deletion of your cloud data at any time by contacting us or using the account deletion feature in the app
(e) Deleting your account will initiate removal of all associated cloud data, subject to any legal retention requirements
5. Third-Party Services
(a) Google Cloud: Your voice recordings and text content are transmitted to Google Cloud for speech-to-text transcription and AI text refinement. This transmission occurs as part of the core service functionality.
(b) AI Data Usage Restrictions: Your content sent to Google Cloud is used exclusively to fulfill your request. We do not authorize, and to the best of our knowledge and per our agreements with providers, Google Cloud does not use your content for: training or improving AI models, building user profiles or behavioral analytics, serving advertisements or marketing, or any purpose other than delivering the specific feature you requested.
(c) Firebase (Google): Used for authentication, cloud storage, and backend services. Your content (voice recordings, transcriptions, and AI results) is stored on Firebase servers.
(d) PostHog: Used for anonymous usage analytics only. No personal content (voice recordings, text, or AI results) is transmitted to analytics services.
(e) Apple StoreKit: Used for subscription management. We receive only subscription status confirmation from Apple.
We do not sell, rent, lease, trade, or otherwise provide your personal data to any third party for commercial, advertising, marketing, or data brokerage purposes. Your data is never shared with any entity without your explicit authorization, except as strictly necessary to provide the Service or as required by applicable law.
6. Data Protection
We commit to:
(a) Implementing reasonable technical and administrative measures to protect your data
(b) Never selling, renting, leasing, or trading your personal data to any third party
(c) Never sharing your data with any entity without your explicit authorization, except: (i) with Google Cloud for voice transcription and AI text processing; (ii) with Google Firebase for cloud storage; or (iii) as required by applicable law or valid legal process
(d) Not using your personal content for targeted advertising, user profiling, or any purpose unrelated to providing the Service
(e) Ensuring only you can access your content through your account
(f) Promptly notifying you of any data breach that may affect your personal information
(g) Using Google Cloud and Firebase, which offer appropriate data protection commitments, and configuring our integrations to minimize unnecessary data retention
Absolute security cannot be guaranteed. We encourage you to review the privacy policies of Google Cloud and Firebase for details on their data handling practices.
7. Your Consent to Cloud Data Processing
(a) By using the Service, you explicitly consent to the transmission of your voice recordings and text content to Google Cloud for processing and to Google Firebase for storage, as described in this Privacy Policy.
(b) Cloud processing is an integral part of the Service. If you do not consent to your content being transmitted to our cloud servers, please do not use the Service.
(c) You may delete your account at any time, which will initiate removal of your cloud-stored data. Previously processed data is subject to applicable data retention policies.
(d) This consent is specific to the processing described herein. We will not transmit your data for any purpose beyond what is described in this policy without obtaining your separate, explicit consent.
8. Data Retention
(a) Cloud Data: Your voice recordings, transcriptions, and AI-processed content are retained on our cloud servers as long as your account is active or until you request deletion
(b) Local Cache: Some data may be cached on your device for offline access; this cache is removed when you uninstall the app
(c) Account Data: Retained as required by applicable law after account deletion
(d) Anonymous Analytics: Retained in aggregated, non-identifiable form indefinitely
9. Your Rights
You have the right to:
(a) Access: View your personal data and request a copy of cloud-stored data
(b) Rectification: Modify incorrect data at any time
(c) Deletion: Delete your personal data at any time through the app, or request complete account deletion including all cloud-stored data
(d) Data Portability: Export your data
(e) Withdraw Consent: Stop using the Service at any time; request deletion of all cloud-stored data
10. Cookies and Tracking
The Kio Flow mobile app does not use cookies. The agave-space.com website does not use cookies to track user behavior.
11. Children's Privacy
This service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we discover we have mistakenly collected such data, we will delete it immediately.
12. Policy Changes
We may update this Privacy Policy from time to time. Significant changes will be communicated through in-app notifications or email. Continued use of the Service after notification constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at agavehsu@gmail.com.