Privacy Policy

Last Updated: March 3, 2026

1. Introduction

Lecsy (“the App”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. On-Device AI Transcription

Important: No Third-Party AI Service Is Used

Lecsy performs all speech-to-text transcription entirely on your device using Apple CoreML via the open-source WhisperKit library. No audio data, transcription data, or any personal data is sent to any third-party AI service (such as OpenAI, Google Cloud Speech, or any other external AI provider) for transcription purposes.

The AI model used for transcription is downloaded once to your device (~150 MB) from a public model repository (HuggingFace). During this download, no user data is transmitted — only the model weights are downloaded to your device.

After the initial download, all transcription works completely offline without any internet connection.

3. Information We Collect

We collect the following types of information:

Account Information (optional)

Email address (from Apple ID or Google account)
Display name
User ID

Collected only when you choose to sign in. The app can be used without an account.

Audio Recordings

Lecture audio recorded through the app
Stored on your device only — never uploaded to any server
Processed on-device only — never sent to any third-party service

Transcription Text

Text generated from on-device speech recognition
Stored locally on your device
If you sign in, transcription text is synced to our server (Supabase) for cross-device access

Usage Data

App usage frequency
Feature usage statistics
Device type and operating system version

4. How We Use Your Information

On-Device Transcription: Audio is processed locally using Apple CoreML to generate transcription text. No data leaves your device during this process.
Authentication: To verify your identity and manage your account (if you choose to sign in)
Data Synchronization: To sync your transcription text across devices (only when signed in)
Service Improvement: Anonymized usage data to improve our services
Customer Support: To respond to your inquiries

5. Data Storage

On Your Device

Audio recording files (.m4a)
AI model files (Apple CoreML format)
Transcription text
App settings and preferences

In the Cloud (only when signed in)

Account information (email, display name)
Transcription text (for cross-device sync)
Audio recordings are never uploaded to the cloud

Security Measures

All data is transferred over encrypted connections (HTTPS/TLS)
Data at rest is encrypted
Row-level security ensures you can only access your own data

6. Third-Party Services

We use the following third-party services. None of these services receive your audio recordings or are used for AI transcription.

Service	Purpose	Data Shared	Privacy Policy
Supabase	Database, authentication, cloud sync	Account info, transcription text (no audio)	supabase.com/privacy
Apple Sign In	User authentication	Apple ID credentials	apple.com/privacy
Google Sign In	User authentication	Google account credentials	policies.google.com/privacy
HuggingFace	AI model hosting (one-time download)	No user data (only model files are downloaded)	huggingface.co/privacy

No third-party AI service (such as OpenAI, Google Cloud, or any other external AI provider) is used for transcription or any other processing of user data. All AI processing happens on-device using Apple CoreML.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties, except in the following circumstances:

With Your Consent: When you explicitly authorize sharing
Service Providers: Third-party services listed above, solely for providing our services (authentication and data sync)
Legal Requirements: To comply with applicable laws, regulations, or legal processes

Your audio recordings are never shared with anyone. They exist only on your device.

8. User Consent

Before using Lecsy, we obtain your explicit consent through our in-app privacy consent screen, which clearly explains:

That all AI transcription is performed on-device using Apple CoreML
That no third-party AI service is used
That audio recordings never leave your device
That internet is used only for the one-time AI model download (no user data transmitted)
That signing in enables optional cloud sync of transcription text only

Users must agree to these terms before using the app's transcription features.

9. Your Rights

You have the following rights regarding your personal data:

Right to Access

You can request access to the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate data.

Right to Deletion

You can delete your account and all associated data from within the app (Settings > Delete Account).

Right to Data Portability

You can request a copy of your data in a portable format.

How to Exercise Your Rights: Contact us at nittonotakumi@gmail.com

10. Data Retention

On-device data (audio, transcripts) remains until you delete it
Cloud data is retained while your account is active
Upon account deletion, all cloud data is deleted within 30 days
Some data may be retained longer if required by law

11. Security

Encryption in Transit: All communications use HTTPS/TLS
Encryption at Rest: Cloud data is encrypted when stored
Access Controls: Row-level security ensures data isolation
On-Device Security: Audio and local data are protected by iOS device security

12. Children's Privacy

Lecsy is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

13. International Data Transfers

If you sign in, your transcription text may be transferred to and processed in countries other than your country of residence via our cloud provider (Supabase). By using the sync feature, you consent to such transfers. Audio recordings are never transferred internationally as they remain on your device.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through:

In-app notifications
Updating the “Last Updated” date above

15. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to opt out of the sale of personal information
Right to non-discrimination for exercising your rights

We do not sell personal information.

16. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability, and the right to object.

Legal Basis for Processing: Consent, performance of a contract, and legitimate interests.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: nittonotakumi@gmail.com

Summary

Data	How It's Used	Where It's Stored	Shared With
Audio recordings	On-device AI transcription (Apple CoreML)	Your device only	No one
Transcription text	Display, search, cross-device sync	Device + cloud (if signed in)	Supabase (our cloud provider)
Account info	Authentication	Cloud (Supabase)	Supabase, Apple/Google (auth)

Key Points:

✓ All AI transcription is on-device (Apple CoreML) — no third-party AI service
✓ Audio recordings never leave your device
✓ Cloud sync is optional and only for transcription text
✓ No data is sold to third parties
✓ You can delete your data anytime

This Privacy Policy is effective as of March 3, 2026.

←Back to Home