Privacy Policy
Last updated: 7 August 2026
CoworkAI is a product of Uhadi Technology ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the CoworkAI application and related services (the "Service").
1. Information We Collect
Account Information
- Email address and name (provided during sign-up via Supabase Auth)
- Authentication tokens (managed securely by Supabase)
Meeting Transcription Data
- Audio recordings you submit for transcription
- Transcription text, summaries, and action items generated from your recordings
- Language preferences you select for transcription
Google Calendar Data (only if you choose to connect your calendar)
- Calendar event titles, start/end times, and attendees
- Meeting links (Google Meet, Zoom, Microsoft Teams)
- Event location information
We request read-only access to your Google Calendar (calendar.readonly scope). We never create, modify, or delete your calendar events.
Device Information
- Push notification tokens (for sending meeting reminders)
- Device platform (Android, iOS, or Web)
2. How We Use Your Information
- Transcription: Audio recordings are sent to third-party transcription providers (Google Cloud Speech-to-Text or AssemblyAI) solely for the purpose of generating text transcriptions. These providers process your audio under their own privacy policies.
- AI summaries and insights: Transcription text is sent to OpenAI to generate meeting minutes, insights, and answers to your questions about your meetings.
- Calendar sync: We read your Google Calendar events to display upcoming meetings, send you reminders, and help you match recordings to meetings.
- Notifications: Push notification tokens are used to deliver meeting reminders and sync status updates.
- Service improvement: We may use anonymised, aggregated usage data to improve the Service.
3. Data Storage and Security
- Your account and meeting data (transcripts, minutes, insights) are stored in Supabase, hosted on AWS infrastructure in London, United Kingdom, with encryption at rest and in transit.
- Google Calendar OAuth tokens (access and refresh tokens) are stored in a secured database table with row-level security (RLS) policies ensuring only you can access your own data.
- Access tokens are automatically refreshed and old tokens are not retained.
- Audio recordings are stored in Google Cloud Storage (hosted in the United States) so that you can play back your recordings and re-run transcriptions. They are retained until you delete the meeting or your account.
4. Third-Party Services
We use the following third-party services to operate CoworkAI:
- Supabase — Authentication and database hosting (London, UK)
- Google Cloud Speech-to-Text — Transcription of African language audio
- AssemblyAI — Transcription of global language audio
- Google Cloud Storage — Storage of audio recordings for playback and re-transcription
- OpenAI — Generation of meeting minutes, insights, and chat answers from transcription text
- Google Calendar API — Read-only calendar sync
- Expo Push Notification Service — Delivering push notifications
- Resend — Sending email notifications
- RevenueCat — Subscription and payment management
- PayFast — Payment processing for web subscriptions
- Google AdMob — Advertising on the free tier (may collect device identifiers for ad delivery)
Each third-party service processes your data only as necessary to provide its specific function and is subject to its own privacy policy.
5. Google Calendar: Limited Use Disclosure
CoworkAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google Calendar data to display your meetings and send reminders within the CoworkAI app.
- We do not sell, share, or use your Google Calendar data for advertising purposes.
- We do not allow humans to read your Google Calendar data unless you explicitly request support assistance, or it is required for security/legal reasons.
- We limit our use of Google Calendar data to providing and improving the calendar features of the Service.
6. Data Retention and Deletion
- Your account data, transcriptions, and audio recordings are retained as long as your account is active, so that your meeting history remains available to you.
- You can delete individual meetings (including their audio recordings) from within the app at any time.
- You can disconnect your Google Calendar at any time from the app. This immediately revokes our access and deletes stored calendar tokens and synced meeting data.
- You can delete your account from within the app. To request complete deletion of all data associated with your account, contact us at uhadi [at] uhadi.co.za — we will complete the deletion within 30 days of your request.
7. International Data Transfers
CoworkAI stores and processes data in more than one country:
- Your account and meeting data (transcripts, minutes, insights) are stored in London, United Kingdom, under UK data protection law.
- Your audio recordings are stored and processed in the United States (Google Cloud), and our transcription and AI providers (AssemblyAI, OpenAI) process data in the United States.
These transfers are made in accordance with section 72 of South Africa's Protection of Personal Information Act (POPIA): our providers are subject to contractual and legal protections for your data, and by using the Service you consent to this cross-border processing.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect third-party integrations (Google Calendar) at any time
- Opt out of push notifications and email notifications via the app settings
9. Children's Privacy
CoworkAI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us: