Privacy Policy
Last updated: 7 April 2026
CoworkAI is a product of Uhadi Technology ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the CoworkAI application and related services (the "Service").
1. Information We Collect
Account Information
- Email address and name (provided during sign-up via Supabase Auth)
- Authentication tokens (managed securely by Supabase)
Meeting Transcription Data
- Audio recordings you submit for transcription
- Transcription text, summaries, and action items generated from your recordings
- Language preferences you select for transcription
Google Calendar Data (only if you choose to connect your calendar)
- Calendar event titles, start/end times, and attendees
- Meeting links (Google Meet, Zoom, Microsoft Teams)
- Event location information
We request read-only access to your Google Calendar (calendar.readonly scope). We never create, modify, or delete your calendar events.
Device Information
- Push notification tokens (for sending meeting reminders)
- Device platform (Android, iOS, or Web)
2. How We Use Your Information
- Transcription: Audio recordings are sent to third-party transcription providers (Google Cloud Speech-to-Text, AssemblyAI, or Lelapa AI) solely for the purpose of generating text transcriptions. Audio is not retained by these providers beyond processing.
- Calendar sync: We read your Google Calendar events to display upcoming meetings, send you reminders, and help you match recordings to meetings.
- Notifications: Push notification tokens are used to deliver meeting reminders and sync status updates.
- Service improvement: We may use anonymised, aggregated usage data to improve the Service.
3. Data Storage and Security
- Your data is stored in Supabase (hosted on AWS infrastructure) with encryption at rest and in transit.
- Google Calendar OAuth tokens (access and refresh tokens) are stored in a secured database table with row-level security (RLS) policies ensuring only you can access your own data.
- Access tokens are automatically refreshed and old tokens are not retained.
- Audio recordings uploaded for transcription are stored temporarily in Google Cloud Storage and deleted after processing.
4. Third-Party Services
We use the following third-party services to operate CoworkAI:
- Supabase — Authentication and database hosting
- Google Cloud Speech-to-Text — Transcription of African language audio
- AssemblyAI — Transcription of global language audio
- Lelapa AI — Transcription of Sesotho audio
- Google Calendar API — Read-only calendar sync
- Expo Push Notification Service — Delivering push notifications
- Resend — Sending email notifications
- RevenueCat — Subscription and payment management
Each third-party service processes your data only as necessary to provide its specific function and is subject to its own privacy policy.
5. Google Calendar: Limited Use Disclosure
CoworkAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google Calendar data to display your meetings and send reminders within the CoworkAI app.
- We do not sell, share, or use your Google Calendar data for advertising purposes.
- We do not allow humans to read your Google Calendar data unless you explicitly request support assistance, or it is required for security/legal reasons.
- We limit our use of Google Calendar data to providing and improving the calendar features of the Service.
6. Data Retention and Deletion
- Your account data and transcriptions are retained as long as your account is active.
- You can disconnect your Google Calendar at any time from the app. This immediately revokes our access and deletes stored calendar tokens and synced meeting data.
- You can request full account deletion by contacting us at uhadi@uhadi.co.za. We will delete all your data within 30 days of your request.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect third-party integrations (Google Calendar) at any time
- Opt out of push notifications and email notifications via the app settings
8. Children's Privacy
CoworkAI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or your data, contact us: