Privacy Policy

1. Information we collect

• Phone number. Used to create your account and sign you in with a one-time password (OTP).
• Voice recordings. When you tap the mic, your recording is sent to our servers to be turned into text. We do not store your audio. It is processed in memory and discarded once the text is ready.
• Text from your dictations. The transcribed and cleaned-up text is saved in your History so you can copy it again. You can delete individual items or your entire history at any time in the app. You can also turn history off for a dictation.
• Your dictionary. Words you add so we spell them correctly.
• Profile and settings. Optional name, app language and preferred writing style.
• App and device information. Device model, OS version, app version and IP address. We use this to keep your account secure, show your logged-in devices and fix problems.
• Usage and subscription data. How many dictations you make per day (to apply plan limits), your trial dates and subscription status.
• Support messages. Anything you send us through the contact form, along with the contact details you provide.

We do not collect your contacts, photos, location or messages, and we do not sell your personal data.

2. Accessibility service and "display over other apps"

Bolna uses Android's Accessibility Service API for one purpose: when you tap Insert on the floating mic, it places the text you dictated into the text field you are typing in, and finds where that field is on screen so the result appears next to it. To do this, it reads only the focused input field (its current text, cursor position and location on screen), only at that moment, and only on your device. Bolna does not collect, store or share any data through the Accessibility Service: nothing it reads is sent to our servers or to anyone else, and it does not record your screen or track which apps you use. The service never acts on password fields. Before you turn it on, the app explains this and asks for your agreement; it is optional, and without it Bolna copies the text for you to paste. The "display over other apps" permission is used only to show the floating mic button. You can turn both off at any time in your phone's settings. If you do, you can still dictate inside the app and copy the text.

3. How we use your information

• To provide the service: sign-in, transcription, writing styles, history and dictionary.
• To run your trial and subscription and apply daily usage limits.
• To keep the service secure, prevent abuse (for example, rate limiting and repeated trials) and fix bugs.
• To respond to your support requests.
• To understand how the app is used (for example which screens are opened, whether a dictation succeeded and how long it took) so we can improve it. This never includes what you say or type.
• To comply with legal obligations.

We process your data on the basis of your consent, which you give when you create an account and grant permissions, and as needed to provide the service you asked for. You can withdraw consent at any time by deleting your account.

4. Who we share it with

We share data only with service providers that help us run Bolna, and only as much as they need:

• OpenAI converts your recording to text and rewrites it in the style you choose. It receives the audio, the text and your dictionary words, and processes them under its API data-usage policies.
• MSG91 sends your OTP by SMS or voice call. It receives your phone number.
• Cloud hosting, database and caching providers store the data described above on our behalf.
• PostHog receives app usage events: your account ID (not your phone number or name), your plan, app version, device model and Android version, approximate location from your IP address, and actions such as "dictation completed" with its length and language. It never receives your audio, the text you dictate or type, or your dictionary words. You can turn this off in Profile → Share usage analytics.
• Meta (Facebook) receives app events that help us measure and improve our ads on Facebook and Instagram: app installs and opens, sign-up, starting a trial, finishing setup, starting a checkout, purchases (plan and amount) and that a dictation was completed, along with your account ID, your device's advertising ID and basic device information. It never receives what you say or type, your phone number or your name. You can turn this off in Profile → Share usage analytics, and reset or limit your advertising ID in your phone's Google settings.
• Razorpay processes payments when you buy Premium. We receive the payment status, amount, method (for example UPI or card) and Razorpay's payment ID, never your card number, UPI PIN or bank login.

We may also disclose information if required by law or to protect the rights and safety of our users and the public.

5. How long we keep it

• Audio: not stored. It is deleted right after processing.
• History and dictionary: until you delete them or delete your account.
• Account: until you delete it. When you delete your account, we sign you out everywhere and permanently delete your history and dictionary. We keep your phone number with your account marked as deleted, so that the trial can't be claimed again, together with any subscription and payment records the law requires us to keep.
• Security logs: kept for a limited period and then deleted.

6. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can:

• see and correct your information (Profile in the app),
• delete your history (History → Clear all) or your whole account (Profile → Delete account, or on the web),
• turn off usage analytics at any time (Profile → Share usage analytics),
• withdraw consent by deleting your account,
• ask us about how your data is processed, and raise a grievance (see below).

7. Security

Data is encrypted in transit (HTTPS). Sign-in tokens are encrypted on your device using the Android Keystore. Access to our systems is restricted, and our staff cannot see the text you dictate in our admin tools. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as required by law.

8. Children

Bolna is not intended for children under 18. We do not knowingly collect personal data from children without verifiable parental consent. If you think a child has given us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy. If we make significant changes, we will let you know in the app before they take effect.

10. Contact & grievance redressal

For privacy questions, requests or complaints, contact us. We aim to respond within 7 days and to resolve grievances within 30 days.

Email: [email protected]