Ezbere

Privacy Policy

Last updated: 22 Oct

Who we are

Ezbere is a personal memory app that turns your meetings, voice memos, notes and files into sourced, searchable records. This policy explains which personal data is processed when you use the Ezbere app and the website ezbere.com, why, with whom it is shared and what your rights are.

Data controller: Ali Cevher (individual), Türkiye. Contact for all privacy questions and requests: support@ezbere.com.

Data we process

Account: your e-mail address, the name you enter (optional), a hash of your password (the password itself is never stored) or the identifier from Sign in with Google or Apple, your language, time zone, settings, and the date and version of the consents you give in the app.

Your content: the recordings, transcripts, notes and pasted text you capture; the audio, video and documents you upload or share into the app (from a video only the audio track is kept, from a document only its text); markers and notes you add while recording; the questions you ask and their answers; and what Ezbere derives from these: summaries, facts, people, companies, projects, tasks and reminders.

Other people in your content: recordings and notes can contain the voices, names and statements of other people. Ezbere processes them only as part of your content. Ezbere does not create voiceprints or other biometric identifiers; speakers are only labelled (for example "Speaker 1") and named by you.

Calendar (only if you allow access): the title, time and attendee names of your upcoming meetings are read on your device to show your next meeting. When you record that meeting, its title and attendee names are added to the recording and processed like other content. Ezbere writes to your calendar only when you add a task to it yourself.

Microphone: used only while you record or ask a question by voice.

Device and technical data: the device name and platform of each signed-in session, the app version, a push notification token, your IP address in server logs, and usage counters (recording minutes, number of questions, storage used). Server logs contain identifiers, counts and durations only, never the text of your content.

Purchases: whether you have an active subscription, its plan and renewal date. Payment is handled by Apple or Google; we never receive your card details.

We do not collect location, contacts, photos, browsing history or an advertising identifier, and the app contains no advertising or analytics/tracking SDKs.

Where your data is stored

You choose where your data is kept and can change it at any time in Settings → Data storage.

On my phone: your recordings, notes and everything derived from them are kept on your phone. To be processed, a recording or text is sent to our server and to the AI providers listed below; once processing has finished and your phone has downloaded the result, the server copy is deleted. Results your phone never downloads are deleted from the server after at most 7 days.

In my Google Drive: in addition to the phone option, your data is encrypted on your phone (AES-256) and backed up to a hidden Ezbere-only folder in your own Google Drive. The encryption key is kept on our server and the encrypted backup at Google, so neither can read the content alone.

On Ezbere's servers: your data is stored on our servers in the European Union (OVHcloud, France). This option is available on every plan; details are in the "Server storage terms".

Why we process it (legal bases)

To provide the service you signed up for (performance of a contract, GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)): your account, transcription, summaries, extracting facts and tasks, search, answering questions, reminders, sync, backups and subscriptions.

To keep the service secure and working (legitimate interest, GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)): preventing abuse, rate limits, troubleshooting and measuring usage and costs. Only counts and durations are used for this, never your content.

To meet legal obligations (GDPR Art. 6(1)(c), KVKK Art. 5(2)(ç)), for example keeping records required by law or answering requests from authorities.

With your explicit consent (GDPR Art. 6(1)(a) and 49(1)(a), KVKK Art. 5(1) and 9): sending your content to AI providers outside Türkiye and the European Union for processing, push notifications and calendar access. You give this consent in the app and can withdraw it by deleting your content or account; without it Ezbere cannot process recordings or answer questions.

Your content is never used for advertising, never sold and never used to train AI models.

Service providers we share data with

We share data only with providers that process it on our behalf for the purposes above, under contracts that require them to protect it:

OVHcloud (France): servers, database and backups.

OpenRouter (USA): routes AI requests to the model providers below; configured so that providers that train on data are not used.

Google (USA): Gemini models for transcription and summaries; Sign in with Google; your Google Drive backup if you choose it.

Anthropic (USA): text processing (summaries, extraction, answers).

OpenAI (USA): reading answers aloud and some text processing.

Voyage AI (USA): converting text into search vectors.

Deepgram (USA, EU endpoint): transcription when it is used instead of Gemini.

Resend (USA): sending account e-mails (sign-up and password-reset codes).

Expo (USA), Apple and Google: delivering push notifications.

RevenueCat (USA), Apple and Google: subscriptions and purchase status.

AI providers receive only the content that must be processed, do not use it to train their models, and use zero-data-retention endpoints where available. Some may keep requests for a limited time (up to 30 days) only to detect abuse.

Transfers abroad

Several providers are located in the USA. These transfers are based on your explicit consent (KVKK Art. 9, GDPR Art. 49(1)(a)) and, where available, on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

Recordings are deleted automatically after the period you choose in Settings (30 days by default); you can delete any recording earlier. You also choose how long transcripts are kept.

Notes, facts, people, tasks, reminders and questions are kept until you delete them, clear all content or close your account.

Server logs are kept only as long as needed for security and troubleshooting, normally no longer than 30 days.

When you delete your account, the account and all its data are deleted permanently 14 days after the request (you can cancel until then). Server backups that still contain it are deleted within a further 14 days. Data kept only on your phone or in your own Google Drive is under your control.

Your rights

Under KVKK (Art. 11) and the GDPR you have the right to know whether your data is processed and to get a copy, to have it corrected or deleted, to restrict or object to processing, to data portability, to withdraw consent, to learn to whom it was transferred, and to claim compensation for damage caused by unlawful processing.

In the app (Settings → Privacy and data) you can export all your data as one file, clear all content, delete single recordings, transcripts and facts, exclude people or topics, and delete your account. For anything else write to support@ezbere.com; we answer within 30 days.

You can also complain to the Turkish Personal Data Protection Authority (KVKK) or, if you live in the EU, to the data protection authority of your country.

Children

Ezbere is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.

Security

Data travels between the app and our servers over encrypted connections (TLS). Each user's data is isolated from other users at the database level, Google Drive backups are encrypted on your phone, and administrators see only account details and counts, never the content of your recordings, notes or transcripts.

Changes and contact

We announce changes to this policy in the app and on ezbere.com. If a change requires your consent again, the app asks for it before it applies.

Questions and requests: support@ezbere.com