← Back to Home

Privacy Policy

Last Updated: October 22, 2025

1. Introduction

Narralyn ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our audio and video editing service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored securely using encryption)
  • Account creation date

2.2 Usage Information

We collect information about how you use Narralyn:

  • Credit purchase history
  • Credit usage and balance
  • Login activity
  • Feature usage patterns

2.3 Audio and Video Files

When you upload files for transcription:

  • Files are temporarily stored on our servers during processing
  • Files are automatically deleted after export
  • We do not permanently store your audio or video content
  • We do not use your content for training AI models or any other purpose

2.4 Project Data

Your project data (transcriptions, edits, cuts) is stored:

  • Locally in your browser using IndexedDB
  • In our database (Firebase Firestore) for persistence across devices
  • You can delete your projects at any time

2.5 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. Stripe collects:

  • Credit card details
  • Billing address
  • Payment transaction data

Stripe's privacy policy applies to payment information: https://stripe.com/privacy

2.6 Technical Information

We automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Referring URLs

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Narralyn service
  • Process transcriptions of your audio files
  • Manage your account and credits
  • Process payments through Stripe
  • Send service-related notifications
  • Improve our service and develop new features
  • Prevent fraud and ensure security
  • Comply with legal obligations

4. Data Storage and Security

4.1 Local Storage

Project data is stored locally in your browser using IndexedDB. This data remains on your device and can be cleared by clearing your browser data.

4.2 Cloud Storage

We use Firebase (Google Cloud Platform) to store:

  • User account information
  • Credit balances and transaction history
  • Project metadata and transcriptions

4.3 Temporary File Storage

Audio and video files are temporarily stored on our servers during processing and are automatically deleted after:

  • Successful export of the edited file
  • 24 hours, whichever comes first

4.4 Security Measures

We implement security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password storage using Firebase Authentication
  • Regular security audits
  • Access controls and monitoring

5. Third-Party Services

We use the following third-party services that may collect data:

5.1 Firebase (Google)

For authentication, database, and hosting. Privacy policy: https://firebase.google.com/support/privacy

5.2 Stripe

For payment processing. Privacy policy: https://stripe.com/privacy

5.3 OpenAI Whisper API

For audio transcription. Your audio is sent to OpenAI for processing. OpenAI's API data usage policy: https://openai.com/policies/api-data-usage-policies

6. Data Retention

  • Account Data: Retained until you delete your account
  • Audio/Video Files: Deleted immediately after export (max 24 hours)
  • Project Data: Retained until you manually delete projects
  • Transaction History: Retained for 7 years for accounting and legal compliance

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Delete your account and associated data
  • Export: Export your project data at any time
  • Withdraw Consent: Stop using the service at any time

To exercise these rights, contact us at: micael@invisiblepuzzle.com

8. Cookies and Tracking

We use minimal cookies and local storage for:

  • Authentication (keeping you logged in)
  • Theme preferences (dark/light mode)
  • Session management

We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

Narralyn is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it immediately.

10. International Users

Narralyn is hosted on servers that may be located in different countries. By using our service, you consent to the transfer of your data to these locations. We ensure that data transfers comply with applicable data protection laws.

11. Data Breaches

In the event of a data breach that affects your personal information, we will:

  • Notify affected users within 72 hours
  • Describe the nature of the breach
  • Explain steps we're taking to address it
  • Provide recommendations to protect your data

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

  • Email notification
  • Notice on our website
  • In-app notification

Continued use of Narralyn after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: micael@invisiblepuzzle.com

14. GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under GDPR:

  • Right to data portability
  • Right to object to processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes:

  • Contract performance (providing the service)
  • Consent (for optional features)
  • Legitimate interests (improving the service, preventing fraud)

15. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information is collected
  • Know if personal information is sold or disclosed
  • Opt-out of the sale of personal information (we do not sell data)
  • Request deletion of personal information
  • Non-discrimination for exercising your rights