Privacy and data processing
Last updated: 26 October 2026
Qatip records your meetings, transcribes them and summarizes them. This page explains where your audio, text and account details go, how long they stay there, and what you control.
In short
- Your recordings, transcripts and summaries are stored on servers in Frankfurt, Germany. Nobody but you can see them, unless you share them.
- To be processed, audio and text go to the companies listed below. None of them uses your data to train AI models.
- You decide how long audio is kept: forever, 1 year, 90 days or not at all. Transcripts and summaries stay until you delete them.
- You can delete a meeting, or your whole account, at any time.
What we process
- Account: your email address and sign-in details. You sign in with a one-time code sent to your email, with your Apple or Google account, or with your company's sign-in (SSO); we don't keep passwords. With Apple or Google we receive only your email address and name (Apple lets you hide your address). With company sign-in, your company's sign-in system passes us your email address.
- Recordings: the meeting's audio. On a computer, your microphone and the computer's sound are recorded as two separate tracks; on a phone, the microphone.
- Text: transcripts, summaries, decisions and action items, notes you take while recording, questions you ask about your meetings, and translations.
- Pictures: screenshots, slides or photos you add to a meeting.
- Voice prints: numeric fingerprints taken from the voices of people you name, so Qatip can recognize them in later meetings. They aren't audio, but because they identify a person they are biometric data (a special category under the GDPR and Turkey's KVKK). They stay in your account only, are never matched against other accounts and are never shared with your team. Deleting a person deletes their voice prints.
- Settings: custom words, report templates, your name, your report email preferences, your app and report language.
- Calendar: when a recording starts, the Qatip app on your computer or phone adds the name of the meeting in your calendar at that moment, and the names and email addresses of its invitees. Nothing else from your calendar leaves your device. Reports go to invitees only if you choose that.
Other people's voices are recorded too. Telling participants before recording, and getting their consent where the law requires it, is the responsibility of the person who starts the recording.
Teams
If you join a team:
- Your teammates can read only the meetings you share into your team's folders: their report, transcript, pictures and audio. Meetings you don't share stay with you.
- Nobody on the team can change or delete a meeting you shared, or send it on by public link or email; only you can.
- Speaker names are visible to the team; voice prints are never shared.
- Everyone on the team sees the other members' names, email addresses and roles. Admins invite and remove people and can set how long the team keeps audio; when the team's rule is shorter than your own choice, it applies.
- When you leave a team, or are removed from it, the meetings you shared leave the team and your access to the team's meetings ends at once.
Connected calendars (Google, Microsoft)
If you connect Google Calendar or Outlook to Qatip, you approve the connection on Google's or Microsoft's own consent screen. With that permission, Qatip:
- Only reads calendar events (Google:
calendar.events.readonly; Microsoft:Calendars.Read) and sees the connected account's email address. It never writes to, deletes or changes anything in your calendar. - Only looks at the event at the time a recording starts, and adds that event's name and its invitees' names and email addresses to the meeting. It doesn't store the rest of your calendar.
- Keeps the refresh token the connection needs, encrypted. Removing the connection in Settings › Calendars deletes the token and revokes the permission at Google.
Qatip's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is not used for advertising, not sold and not used to train AI models.
Where data goes
| Company | What for | Which data | Where | How long |
|---|---|---|---|---|
| Supabase | Accounts, database, file storage | All of it | Frankfurt, Germany | Until you delete it; audio as long as you chose |
| Modal | Transcribing audio and telling speakers apart (GPU) | Audio | USA | Only while processing; the machine shuts down afterwards |
| Anthropic (Claude) | Summaries, answers to questions, translations, reading pictures, fixing custom words | Transcripts, notes, pictures | USA | Under Anthropic's commercial terms; not used to train models |
| Deepgram | Live transcript while recording | The recording's audio, live | USA | Only while processing (opted out of model improvement on every request) |
| Resend | Sign-in codes and report emails | Your email address, the addresses you send reports to, the report's text | USA | To deliver the email |
| Google, Microsoft (only if you connect a calendar) | Reading the event at recording time | Calendar event, invitees | Their services | Under their terms |
Audio and text travel to these companies over encrypted connections. Each one sees only the data its job needs and is bound by contract not to use it for anything else.
Legal bases (GDPR)
- Providing the service you asked for (Art. 6(1)(b)): your account, recording, transcribing, summarizing, syncing between your devices, emails you turn on.
- Your consent (Art. 6(1)(a) and 9(2)(a)): voice prints (when you choose "remember the voice"), connected calendars, sending reports to invitees. You can withdraw consent any time by deleting the person, removing the connection or turning the option off.
- Legitimate interest (Art. 6(1)(f)): keeping the service secure and fixing errors, with as little data as possible.
International transfers
Your data is stored in Germany. Transcription, summaries and the live transcript run on servers in the USA, so audio and text are transferred there to be processed. These transfers rely on the European Commission's Standard Contractual Clauses (and, for Turkey, on your explicit consent under KVKK article 9), included in our processors' data processing agreements.
Your choices
- Audio: in Settings › Audio, choose forever, 1 year, 90 days or "Don't keep". With "Don't keep", audio is deleted as soon as the meeting is ready.
- Live transcript: turn it off in Settings; audio is then not sent to Deepgram while recording.
- Report language: reports and emails are written in your app's language, or one you choose in Settings.
- Sharing: if you share a meeting by link, anyone with the link can read its summary and (if you chose) its transcript. Stop sharing any time and the link stops working at once.
- Deleting: deleting a meeting deletes its audio, transcript, summary and pictures together. Settings › Delete account permanently deletes all your recordings, text, voice prints and your account.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Under KVKK article 11 you have equivalent rights in Turkey. You can do most of this directly in the app; for anything else, write to the address below. You can also complain to your data protection authority (in the EU, the authority of your country; in Turkey, the Personal Data Protection Board).
Qatip is not meant for children under 16.
Controller and contact
EVALENTO BİLİŞİM HİZMETLERİ EĞİTİM VE DANIŞMANLIK LİMİTED ŞİRKETİ, İzmir, Türkiye
Contact: info@evalento.com