Effective date: June 24, 2026
Operator: Peter (Pinjas) Adler Asch ("we," "us")
Contact: [email protected]
1. What we collect
When you use CHASKY (web at pinjasemet.com or our mobile apps) we collect:
- Account data: email address, name (optional), password hash (we never see your plaintext password)
- Audio you upload: voice notes, recordings — only for the purpose of transcribing and structuring them for you
- Transcripts and manuscripts generated from your audio
- Usage data: pages visited, features used, timestamps, error logs
- Device info on mobile: OS version, app version, anonymized device ID (used for crash reporting only)
- Payment data: handled by Stripe — we never store your card number; we keep only Stripe's customer ID
2. What we do NOT collect
- We do not access your phone contacts, calendar, photos, or location
- We do not sell or rent your data to anyone, ever
- We do not use your audio or transcripts to train AI models — yours stays yours
- We do not track you across other apps or websites
3. How we use it
- To run the service: transcribe your audio, generate manuscripts, let you log back in
- To send service emails (password reset, billing receipts) — never marketing without your explicit opt-in
- To debug errors and improve the service (aggregate, anonymized usage stats only)
- To comply with legal requests when we are legally required to respond
4. Where it lives
- Database: Supabase (PostgreSQL), hosted on infrastructure we control
- Audio files: stored encrypted at rest
- Backups: encrypted, retained 14 days, then deleted
- All data processing happens on servers we operate. We do not send your audio to third-party LLM APIs unless you explicitly use a feature that calls one (and we tell you before that call happens)
5. Sharing
We share data only with:
- Stripe — for payment processing (their privacy policy: stripe.com/privacy)
- Twilio — only if you use WhatsApp features, and only the message content for that flow (twilio.com/legal/privacy)
- Hosting provider — Oracle Cloud Infrastructure (oracle.com/legal/privacy.html)
No advertising networks. No analytics-broker resale. No data brokers.
6. Your rights
You can:
- Export all your data — email us, you get a ZIP in 7 days
- Delete your account and all associated data — irreversible, takes 30 days to propagate through backups
- Correct any data we have about you — email us with the correction
- Opt out of any non-service email at any time
If you are in the EU/UK: GDPR rights apply. If you are in California: CCPA rights apply. If you are in Israel: Privacy Protection Law (5741-1981) applies. In all cases the way to exercise them is the same: email [email protected].
7. Children
CHASKY is not directed at children under 13 (under 16 in the EU). We do not knowingly collect data from minors. If you believe a minor has registered, email us and we will delete the account.
8. Security
- TLS for all data in transit
- Encryption at rest for audio and database backups
- We do not store passwords — only salted hashes
- Limited employee access (currently: one person, the operator)
- We will notify affected users within 72 hours of any confirmed breach
9. Changes
If we change this policy materially, we will email registered users and post the change on this page at least 14 days before it takes effect. The current version always lives at pinjasemet.com/privacy-policy.
10. Contact
Privacy questions: [email protected]
General support: [email protected]
Legal: [email protected] (read at most weekly)
Mailing address available on request for formal correspondence.