PRIVACY.md (3111 bytes)
1 # Privacy policy of Subrep for Android 2 3 This policy is for the Android app Subrep (package `com.honjimaku.subrep`): 4 the build on Google Play, and the builds on GitHub and F-Droid. Contact: 5 support@honjimaku.com. 6 7 ## Captions on the phone 8 9 When Whisper on the phone makes the captions, the sound stays on the phone. 10 The app sends no sound. 11 12 ## Data that leaves the phone 13 14 - **Captions, when "Share the captions by link" is on.** The app sends each 15 caption line to the relay of honjimaku.com. The relay gives the lines to the 16 people who open your link. It keeps only the last 40 lines of each link, in 17 memory, for new viewers. Turn off the share to stop it, or press "New link" 18 to stop the old link. 19 - **Speech, only when you choose the cloud captions.** The app sends each 20 piece of speech to subread.space, which gives it to DeepInfra for the text. 21 subread.space keeps neither the sound nor the text. DeepInfra says that it 22 does not store them 23 ([data privacy](https://docs.deepinfra.com/account/data-privacy)). 24 subread.space takes the length of each piece from your hours. 25 - **An account.** When you choose the cloud captions, the app asks 26 subread.space for the hours of your account. The first time that you choose 27 them, subread.space makes the account. With the captions on the phone, the 28 app does not contact subread.space. The account has a random id (`acct_...`) 29 and a random device token. 30 It holds your hours. It has no name, email address or phone number. 31 - **Purchases.** In the Google Play build, Google Play takes the payment. The 32 app sends the purchase token to subread.space. subread.space asks Google Play 33 if the purchase is paid, and then adds the hours. It keeps the product, the 34 hours, the Google Play order number, the time and a hash of the token. If 35 Google Play refunds a purchase, subread.space takes back its hours. In the 36 GitHub and F-Droid builds, Stripe takes the payment on subread.space (see 37 the [terms of subread.space](https://subread.space/terms.html)). 38 - **The speech model.** The app downloads the model from Hugging Face. 39 Hugging Face sees the IP address of the phone, as for each download. 40 41 ## What the app does not do 42 43 The app shows no ads. It has no analytics and no tracking. We do not sell 44 data. We give data only to the services above, for the work above: DeepInfra 45 for the cloud text, Google Play or Stripe for the payment. 46 47 ## Permissions 48 49 - Screen capture and the microphone permission: for the sound of other apps, 50 or of the microphone. Android asks each time that the captions start, and 51 shows a notification while the capture runs. 52 - Internet: for the model download, the share link and the cloud captions. 53 - Notifications: for the notification with the "Stop" button. 54 55 ## Delete your data 56 57 Write to support@honjimaku.com with the account id that the app shows. We 58 delete the account and its hours. We keep only the purchase records that the 59 law tells us to keep. To delete the data on the phone, uninstall the app. 60 61 ## Changes 62 63 A change to this policy is a change to this file. The history of the file 64 shows each change.