Privacy policy

What we collect

• Account details — your email address, and your name if you add it. If you sign in with Google we receive your Google account's email, name and profile picture (the openid, email and profile scopes only). We do not get access to your Gmail, Drive, Calendar or contacts.
• Your content — transcripts, summaries, action items, notes, titles and tags created from the recordings you make or upload, and the questions you ask Doppio about them.
• Audio — not kept. Live recordings are sent in short pieces, transcribed and discarded; they are never stored on our servers. An uploaded file is stored only until its transcript is ready and is then deleted.
• Payments — for bKash or Nagad payments: the plan, amount, transaction ID (TrxID) and the sending phone number you enter, so we can verify the payment. We never see your wallet PIN or balance.
• Usage and app information — minutes transcribed and questions asked (to apply plan limits), a random install ID with the app version, platform, operating system and device model (to count installs and active use), and, for Chrome extension recordings, the website's hostname (for example meet.google.com — never the full address).

The Chrome extension

• Tab audio is captured only after you press Start (or click the Doppio icon) on that tab, and only until you press Stop. It is sent in short pieces to be transcribed and is not stored.
• Your microphone is used only while recording, and only if you turn on “Include my microphone”, so your own voice is transcribed too. That audio is handled exactly like tab audio.
• Tabs — the extension notices when a tab starts playing sound (so it can offer to record) and reads that tab's title to name your recording. This happens on your device; nothing about your browsing is sent to us except, when you record, the recording's title and the site's hostname.
• Your sign-in and settings are kept in the extension's local storage on your computer. The extension has no access to other websites' content and runs no code from outside the extension package.

Recording other people

Recordings can include other people's voices. Please tell people when you are recording and get their consent where the law requires it.

How we use it

• To transcribe, summarise and search your recordings and answer your questions about them.
• To run your account, apply your plan, verify payments and send you account notifications.
• To keep the service secure, fix problems and understand which features are used — basic usage data such as which features are used and the app version, never the content of your meetings.

We do not sell your data, show ads, or use your content to train AI models.

Limited Use. Doppio's use of information received from Google APIs and from the Chrome extension adheres to the Google API Services User Data Policy and the Chrome Web Store User Data Policy, including the Limited Use requirements: the data is used only to provide and improve Doppio's user-facing features, is not transferred to others except to run the service as described here, is never used for advertising, and is not read by people except with your permission, for security, or where the law requires it.

Who processes it

We use these providers to run Doppio. They process data only on our behalf:

• Supabase — database, sign-in and temporary file storage.
• Vercel — hosting of the web app and API.
• Soniox — speech-to-text; we delete the audio and transcript from Soniox as soon as the transcript is returned. If Soniox is unavailable, OpenAI Whisper is used instead.
• OpenAI — summaries, action items, answers, search and the Whisper fallback, through the API. OpenAI does not train on API data and may keep it for up to 30 days for abuse monitoring.
• Google — only if you choose “Continue with Google” to sign in, and Firebase Cloud Messaging to deliver the Android app's notifications (it receives a device token and the notification text, never your recordings).

Sharing

Your notes are private to your account. Nobody else can see a session unless you create a share link for it, and you can revoke a link at any time. Administrators can see account and payment details to run the service, but not your meeting content. We look at specific content only if you ask us for help and give permission, to investigate abuse or a security problem, or when the law requires it.

If you connect Doppio to another AI app (Settings → Connected apps), that app can read the notes you allow; you can disconnect it at any time there. We share data only with the providers listed above, only to run Doppio. We never sell it, use it for advertising, share it with data brokers or ad networks, or use it to decide creditworthiness or lending. If Doppio is ever merged or sold, we will ask for your permission before your data moves to the new owner.

Keeping and deleting your data

• Your transcripts and notes stay until you delete them or your account.
• You can download everything (Settings → Export my data) and delete your account (Settings → Delete account) at any time on the web or in the app. Deleting your account removes your sessions, transcripts, notes and payment history permanently.
• When you delete a meeting or your account it is removed from our database straight away; any copies in our hosting provider's backups expire within 30 days.
• If your paid plan ends you move to the Free plan; your notes are not deleted.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers, and access is limited to what is needed to run the service.

Children

Doppio is not intended for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you in the app for significant changes.